last executing test programs: 19.327902053s ago: executing program 3 (id=9284): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe800000000000002b000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000010000000000000044000500"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) 19.199442421s ago: executing program 3 (id=9285): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4000}, 0x18) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xff, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132835}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x100, 0x148, 0x0, {0x0, 0x40000}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x3, 0x1, 0x2}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x100, 0x700000, 0x8, 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) 18.868522085s ago: executing program 3 (id=9286): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000e60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000002a0002000000000000001f0d00000a0101020000001a67ee810000000000000000003c000000000004000000000000000000000000000000000100000000040000000001000000000000800000002001000000000000000000000000000100000000ff000000f3ffffff1d0400000000000000000000000000000000000005"], 0x17c}, 0x1, 0x0, 0x0, 0xc001084}, 0x40800) 18.769914867s ago: executing program 3 (id=9288): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89fc, &(0x7f0000000040)={'sit0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0xb9, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 18.312105902s ago: executing program 3 (id=9293): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 18.16418518s ago: executing program 3 (id=9295): socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x3, 0x8000000003c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 3.866313051s ago: executing program 1 (id=9382): r0 = socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000e88a800008100007eab91b32dd80cffd20adf8cf828782802010045fc006953d778f6c9a77f00"], 0x32) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "1d88d56a159a45"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r8, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) recvmmsg$unix(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) readv(r10, &(0x7f0000000780)=[{&(0x7f0000000100)=""/39}, {&(0x7f0000000380)=""/210}, {&(0x7f0000000540)=""/139}, {&(0x7f0000000600)=""/47}, {&(0x7f0000000280)=""/90}, {&(0x7f0000000740)=""/49}], 0x1000000000000149) recvmmsg(r1, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/55, 0x37}], 0x1}, 0x8}], 0x1, 0x40000180, 0x0) preadv(r4, &(0x7f0000003c00)=[{&(0x7f0000001480)=""/255, 0xff}, {&(0x7f00000000c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/4096, 0x1000}], 0x5, 0x23a1, 0x1) close(r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 3.226587113s ago: executing program 2 (id=9385): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x5, 0x10, 0x0, 0x1, [@generic="8b"]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'batadv_slave_0\x00', &(0x7f0000000040)=@ethtool_channels={0x3d, 0x5, 0x7, 0x9, 0x2, 0x2, 0x8, 0x3, 0x4}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800"], 0x2c}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.988755052s ago: executing program 2 (id=9387): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x1ff, 0x10}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x1, 0xbd8, 0x100}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="100000003ff0ffff050000000900000000050000", @ANYRES32=r4, @ANYRES32=r2, @ANYRES64=r3, @ANYRESOCT, @ANYBLOB="02000000000000000200"/28, @ANYRESDEC=r2, @ANYRESOCT=r4, @ANYRES32=r2, @ANYRES32=r4, @ANYRESOCT=r0, @ANYRES8=r3], 0x50) 2.827039956s ago: executing program 0 (id=9388): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x600, &(0x7f00000001c0)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) 2.712309152s ago: executing program 2 (id=9390): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f00000000c0)="c40952af1964f0e116145ce14ad3a2eea9d5d314af096ea060bfa4aeaf7df61b4ca78fe09036f984d226771dbb439f5ce5b527f8a705def0f4896460ae80c3f1ffae7e71be742ed16171b8cd4376333297aabe6899de63f3d1af7f540ffe2b5a5ad7e6648aa8b5c02bc4794d74e1231a76e68df049996f427f57ffe3b0241a9c267f830b168d2759a0fffd48cc4c022ff2359e5fe7685495d6d805939f13c22e92854bf9adf6c40b600c6925369aae8fee1db0d997973aa1dbe68eb57b2e133f6420aa4bf07faf6e6f07684c20ea8e069ca2a6e492eb") (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) (async) close(0x4) (async, rerun: 32) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000300)={@private, @dev, 0x0}, &(0x7f0000000340)=0xc) (async, rerun: 32) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000060000000600000000300000007000000060000850a0000000c00000004000000feffffff0b000000010000002f080000040000000500000040000000090000000100000003000000040000a022648f60d500010000000d0000000f0000000200000006000000000000000000000802"], &(0x7f00000004c0)=""/242, 0x7b, 0xf2, 0x0, 0x6}, 0x28) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r7 = socket$kcm(0x11, 0x3, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async, rerun: 64) r9 = socket(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x6, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffa8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r11) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="01002dbd7000fedbdf2531"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x9, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r14, {0x0, 0xd}, {0xffff, 0xb}, {0xa01371efd7435063, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x83}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) sendmsg$kcm(r7, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r14, 0x13}, 0x80, &(0x7f0000000740)=[{&(0x7f00000005c0)="691e243e3a6328ceb31c80645b76129e", 0x10}], 0x1}, 0x20008110) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x8, 0x0}, 0x8) r16 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000020000ddff520500080000008520000001000001000000000600000000000000000102000020000002000000850e300001000000184600000800"/72], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x30, '\x00', r4, @fallback=0x2d, r5, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x7fff, 0x10, 0xfffffffc, 0xc}, 0x10, r15, r16, 0x3, &(0x7f00000006c0)=[r3, r3, 0x1, r3, 0x1, r3], &(0x7f0000000780)=[{0x0, 0x4, 0x1, 0x2}, {0x7, 0x2, 0xd, 0xa}, {0x3, 0x5, 0x0, 0x8}], 0x10, 0x2800}, 0x94) 1.634707507s ago: executing program 4 (id=9391): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newchain={0x440, 0x64, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {0xa, 0xfffd}, {0xfff3, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @filter_kind_options=@f_u32={{0x8}, {0x40c, 0x2, [@TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x8, 0x4, 0x9, 0x30b4, 0xa, 0x0, 0x6, 0x7fffffff, 0x2, 0x27, 0x7a25, 0x7fffffff, 0x6, 0x40, 0x8, 0x81, 0x1, 0x0, 0x40, 0x0, 0xfffffffb, 0xe3b, 0x3, 0x200, 0x4, 0xffffff80, 0x3, 0x1, 0x0, 0x6, 0x0, 0x2, 0x29f75488, 0x0, 0x10001, 0x8bb, 0x7, 0xa83, 0xc, 0x9, 0x8, 0x3, 0x800, 0x9, 0x4, 0x3ff, 0x1, 0x5, 0x9, 0x7, 0x2, 0xe6bf, 0x3, 0xcc9, 0x8000, 0x6, 0x5, 0xfd3, 0x6, 0xfa15, 0x80000000, 0xb68a, 0x9, 0x40, 0x7, 0x6, 0x81, 0xa33c, 0x81, 0x4, 0x6, 0x2, 0xe49, 0x8, 0x81, 0x7, 0x7fff, 0x1918, 0xf7a, 0x80, 0x1, 0x2ecc, 0xc000000, 0x2c23, 0x9, 0x80004, 0x5, 0xb60, 0x2, 0x7ff, 0x6, 0x1, 0x0, 0x3, 0xf0eb, 0x3, 0x8, 0xe00000, 0x80000000, 0x4, 0x2, 0x569db32e, 0x7f, 0xaa60, 0x7, 0x9, 0xf3, 0x2, 0x3, 0x3, 0x8, 0x1, 0xc, 0x1, 0x7, 0x1, 0x7, 0xffff8001, 0xffff, 0xc83, 0x2, 0xc, 0x6, 0x5, 0x100, 0x2, 0x0, 0x7, 0xffffff3e, 0x23, 0x4, 0xd94, 0x0, 0x4, 0x8, 0x5, 0x9e2c, 0xffff9f8b, 0x1, 0x3ff, 0x5, 0x80, 0x9, 0xe475, 0x1, 0x8, 0x8d4b, 0x100, 0x100, 0x7fffffff, 0x0, 0xe4, 0x200, 0x45, 0x7fff, 0x9, 0x1, 0x18295722, 0xd, 0x9, 0x53, 0xaf2, 0xe701, 0x0, 0x9, 0x101, 0x86000, 0x70e, 0x10, 0x2ded, 0x7, 0x793, 0x8001, 0x3, 0x2, 0x400, 0x1, 0x5, 0xd2, 0x3, 0x1, 0x7, 0x4, 0xfffffffc, 0x7, 0xfffffffd, 0x4, 0xfffffff1, 0xb, 0x3, 0x9, 0x3, 0x6, 0x3, 0x0, 0xffffff67, 0x2, 0x3, 0x1, 0x2b, 0x6, 0x1, 0x1, 0x5, 0x0, 0x0, 0x10001, 0x0, 0x8, 0x8, 0x11e, 0x2, 0xfff, 0x1f9a, 0x200, 0x5, 0x8, 0x5, 0x8, 0x14, 0xffffffff, 0xfa, 0x6, 0x3, 0x380, 0x100, 0x2, 0x2a49, 0x4, 0x1, 0x9, 0x9d3e, 0xf5, 0x36b, 0x3db7e015, 0x2, 0x6, 0x8, 0xcb1f, 0x73d, 0x9, 0x9, 0x0, 0x1, 0x10, 0x7fff, 0x4, 0x0, 0x6, 0x40000, 0x9, 0x7, 0xa9, 0xa8, 0xd709]}]}]}}]}, 0x440}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xb, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000050000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 1.596790346s ago: executing program 2 (id=9392): bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000001c0)={@broadcast, @local, r2}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) 1.544909374s ago: executing program 1 (id=9393): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000100)={@empty}, &(0x7f0000000140)=0xc) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2400c08d) socket$inet(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) shutdown(r2, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x20, 0x10, 0x800, 0x70bd24, 0x25dfd404, {0x0, 0x0, 0x0, r1, 0x65ed8, 0x1aac0}}, 0x20}, 0x1, 0x0, 0x0, 0xc084}, 0x200088c2) 1.544527658s ago: executing program 0 (id=9394): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newchain={0x448, 0x64, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {0xa, 0xfffd}, {0xfff3, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}, @filter_kind_options=@f_u32={{0x8}, {0x40c, 0x2, [@TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x8, 0x4, 0x9, 0x30b4, 0xa, 0x0, 0x6, 0x7fffffff, 0x2, 0x27, 0x7a25, 0x7fffffff, 0x6, 0x40, 0x8, 0x81, 0x1, 0x0, 0x40, 0x0, 0xfffffffb, 0xe3b, 0x3, 0x200, 0x4, 0xffffff80, 0x3, 0x1, 0x0, 0x6, 0x0, 0x2, 0x29f75488, 0x0, 0x10001, 0x8bb, 0x7, 0xa83, 0xc, 0x9, 0x8, 0x3, 0x800, 0x9, 0x4, 0x3ff, 0x1, 0x5, 0x9, 0x7, 0x2, 0xe6bf, 0x3, 0xcc9, 0x8000, 0x6, 0x5, 0xfd3, 0x6, 0xfa15, 0x80000000, 0xb68a, 0x9, 0x40, 0x7, 0x6, 0x81, 0xa33c, 0x81, 0x4, 0x6, 0x2, 0xe49, 0x8, 0x81, 0x7, 0x7fff, 0x1918, 0xf7a, 0x80, 0x1, 0x2ecc, 0xc000000, 0x2c23, 0x9, 0x80004, 0x5, 0xb60, 0x2, 0x7ff, 0x6, 0x1, 0x0, 0x3, 0xf0eb, 0x3, 0x8, 0xe00000, 0x80000000, 0x4, 0x2, 0x569db32e, 0x7f, 0xaa60, 0x7, 0x9, 0xf3, 0x2, 0x3, 0x3, 0x8, 0x1, 0xc, 0x1, 0x7, 0x1, 0x7, 0xffff8001, 0xffff, 0xc83, 0x2, 0xc, 0x6, 0x5, 0x100, 0x2, 0x0, 0x7, 0xffffff3e, 0x23, 0x4, 0xd94, 0x0, 0x4, 0x8, 0x5, 0x9e2c, 0xffff9f8b, 0x1, 0x3ff, 0x5, 0x80, 0x9, 0xe475, 0x1, 0x8, 0x8d4b, 0x100, 0x100, 0x7fffffff, 0x0, 0xe4, 0x200, 0x45, 0x7fff, 0x9, 0x1, 0x18295722, 0xd, 0x9, 0x53, 0xaf2, 0xe701, 0x0, 0x9, 0x101, 0x86000, 0x70e, 0x10, 0x2ded, 0x7, 0x793, 0x8001, 0x3, 0x2, 0x400, 0x1, 0x5, 0xd2, 0x3, 0x1, 0x7, 0x4, 0xfffffffc, 0x7, 0xfffffffd, 0x4, 0xfffffff1, 0xb, 0x3, 0x9, 0x3, 0x6, 0x3, 0x0, 0xffffff67, 0x2, 0x3, 0x1, 0x2b, 0x6, 0x1, 0x1, 0x5, 0x0, 0x0, 0x10001, 0x0, 0x8, 0x8, 0x11e, 0x2, 0xfff, 0x1f9a, 0x200, 0x5, 0x8, 0x5, 0x8, 0x14, 0xffffffff, 0xfa, 0x6, 0x3, 0x380, 0x100, 0x2, 0x2a49, 0x4, 0x1, 0x9, 0x9d3e, 0xf5, 0x36b, 0x3db7e015, 0x2, 0x6, 0x8, 0xcb1f, 0x73d, 0x9, 0x9, 0x0, 0x1, 0x10, 0x7fff, 0x4, 0x0, 0x6, 0x40000, 0x9, 0x7, 0xa9, 0xa8, 0xd709]}]}]}}]}, 0x448}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xb, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000101010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 1.402309041s ago: executing program 2 (id=9395): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000480)={0x0, 'veth0_to_hsr\x00', {0x2}, 0x51}) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000e88a800008100007eab91b32dd80cffd20adf8cf828782802010045fc006953d778f6c9a77f00"], 0x32) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r9, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002dbd7000fbdbdf25021b6ac114250000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) recvmmsg$unix(r2, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) readv(r11, &(0x7f0000000780)=[{&(0x7f0000000100)=""/39}, {&(0x7f0000000380)=""/210}, {&(0x7f0000000540)=""/139}, {&(0x7f0000000600)=""/47}, {&(0x7f0000000280)=""/90}, {&(0x7f0000000740)=""/49}], 0x1000000000000149) recvmmsg(r2, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000640)=""/147, 0x93}, {&(0x7f0000000800)=""/228, 0xe4}], 0x3}, 0x8}], 0x1, 0x40000180, 0x0) preadv(r6, &(0x7f0000003c00)=[{&(0x7f0000001480)=""/255, 0xff}, {&(0x7f00000000c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/4096, 0x1000}], 0x5, 0x23a1, 0x1) close(r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 1.328112807s ago: executing program 4 (id=9396): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x5, 0x10, 0x0, 0x1, [@generic="8b"]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.237255853s ago: executing program 0 (id=9397): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="7c010000190001002bbd700000000000e0000001000000000000000000000000ac1414bb000000000000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0xc001084}, 0x40800) 1.236552203s ago: executing program 1 (id=9398): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r1, &(0x7f0000000000)="a8addc8a", 0x4, 0x840, 0x0, 0x0) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000003a000b0026747000ffdbdf2512"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8010) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1881982e", @ANYRES16=r7, @ANYBLOB="04002abd7000fbdbdf252100000009001f007068793200000000"], 0x20}, 0x1, 0x0, 0x0, 0x24048041}, 0x2001) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) (async) close(r5) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000002c000480280001800e000103696d6d65646961746500000014000280080002800400028008000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x50) r10 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r10, &(0x7f0000000380)={&(0x7f0000000280)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/26, 0x1a}, 0x62) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000100001002bbd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200305b01001400030076657468315f746f5f62617461647600180016801400018010000600", @ANYRESHEX=r3, @ANYRESHEX=r3, @ANYRES32=r3, @ANYRESHEX, @ANYRES8=r3], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000100001002bbd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200305b01001400030076657468315f746f5f62617461647600180016801400018010000600", @ANYRESHEX=r3, @ANYRESHEX=r3, @ANYRES32=r3, @ANYRESHEX, @ANYRES8=r3], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) epoll_create(0x7) (async) r11 = epoll_create(0x7) r12 = epoll_create1(0x0) epoll_create(0x7) (async) r13 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000180)) (async) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r11, &(0x7f0000000140)={0x60000000}) r14 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r14, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'batadv_slave_0\x00', 0x4}, 0x18) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000e0001006e657464657673696d0000000f00854a58e2d85af2bdf402006e657464657673696d30000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000", @ANYRES8=r4], 0xd4}, 0x1, 0x0, 0x0, 0x48040}, 0x8000) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000e0001006e657464657673696d0000000f00854a58e2d85af2bdf402006e657464657673696d30000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000", @ANYRES8=r4], 0xd4}, 0x1, 0x0, 0x0, 0x48040}, 0x8000) 968.418482ms ago: executing program 0 (id=9399): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@delchain={0x38, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40054}, 0xc014) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@delchain={0x38, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40054}, 0xc014) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e23, 0xcc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}], 0x38) 948.715342ms ago: executing program 4 (id=9400): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x18, 0x30, 0x1, 0x70bd29, 0x25dfdbde, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x404c844}, 0x4000814) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r3, 0x40000}, 0x10) 468.38896ms ago: executing program 1 (id=9401): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'rr\x00', 0x0, 0x7f}, 0x2c) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 467.393567ms ago: executing program 4 (id=9402): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x5, 0x10, 0x0, 0x1, [@generic="8b"]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'batadv_slave_0\x00', &(0x7f0000000040)=@ethtool_channels={0x3d, 0x5, 0x7, 0x9, 0x2, 0x2, 0x8, 0x3, 0x4}}) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac14140034"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) 385.03023ms ago: executing program 0 (id=9403): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x1200, &(0x7f00000001c0)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) 320.773169ms ago: executing program 2 (id=9404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x228}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0x3) socket$netlink(0x10, 0x3, 0x4) socketpair(0x25, 0x6, 0x7, &(0x7f0000000280)={0xffffffffffffffff}) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000300)="a28f23984c62a6dc5ae4612bf4b6998528a5636f141ba77096d12b8ae57952e43686af7d15fb00dc38ca1fdfa951373abb23776c105a9317f5f19a75172865bb90f26a81b6b1bceeff45d27f", 0x4c}], 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000004) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100004365000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r3, &(0x7f0000000b00)=[{&(0x7f00000011c0)="000000c3", 0x4}, {0x0}, {&(0x7f0000000ac0)="df2920304402f39101f9977e", 0xc}], 0x3) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a01e6ffffffffffffff000a0000010900020073797a31000000000800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000240001000000000000000000000000000600030000ff"], 0x24}}, 0x8004) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000080014a7a2aefd64970887ff9b", @ANYRES16=r5, @ANYBLOB="170900000000ffdbdf25010000000500070000000000080009000000000008000a0000000000"], 0x2c}, 0x1, 0x620b}, 0x0) 200.259021ms ago: executing program 4 (id=9405): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x1d0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8, 0xd001}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 199.943171ms ago: executing program 1 (id=9406): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newchain={0x440, 0x64, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {0xa, 0xfffd}, {0xfff3, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @filter_kind_options=@f_u32={{0x8}, {0x40c, 0x2, [@TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x8, 0x4, 0x9, 0x30b4, 0xa, 0x0, 0x6, 0x7fffffff, 0x2, 0x27, 0x7a25, 0x7fffffff, 0x6, 0x40, 0x8, 0x81, 0x1, 0x0, 0x40, 0x0, 0xfffffffb, 0xe3b, 0x3, 0x200, 0x4, 0xffffff80, 0x3, 0x1, 0x0, 0x6, 0x0, 0x2, 0x29f75488, 0x0, 0x10001, 0x8bb, 0x7, 0xa83, 0xc, 0x9, 0x8, 0x3, 0x800, 0x9, 0x4, 0x3ff, 0x1, 0x5, 0x9, 0x7, 0x2, 0xe6bf, 0x3, 0xcc9, 0x8000, 0x6, 0x5, 0xfd3, 0x6, 0xfa15, 0x80000000, 0xb68a, 0x9, 0x40, 0x7, 0x6, 0x81, 0xa33c, 0x81, 0x4, 0x6, 0x2, 0xe49, 0x8, 0x81, 0x7, 0x7fff, 0x1918, 0xf7a, 0x80, 0x1, 0x2ecc, 0xc000000, 0x2c23, 0x9, 0x80004, 0x5, 0xb60, 0x2, 0x7ff, 0x6, 0x1, 0x0, 0x3, 0xf0eb, 0x3, 0x8, 0xe00000, 0x80000000, 0x4, 0x2, 0x569db32e, 0x7f, 0xaa60, 0x7, 0x9, 0xf3, 0x2, 0x3, 0x3, 0x8, 0x1, 0xc, 0x1, 0x7, 0x1, 0x7, 0xffff8001, 0xffff, 0xc83, 0x2, 0xc, 0x6, 0x5, 0x100, 0x2, 0x0, 0x7, 0xffffff3e, 0x23, 0x4, 0xd94, 0x0, 0x4, 0x8, 0x5, 0x9e2c, 0xffff9f8b, 0x1, 0x3ff, 0x5, 0x80, 0x9, 0xe475, 0x1, 0x8, 0x8d4b, 0x100, 0x100, 0x7fffffff, 0x0, 0xe4, 0x200, 0x45, 0x7fff, 0x9, 0x1, 0x18295722, 0xd, 0x9, 0x53, 0xaf2, 0xe701, 0x0, 0x9, 0x101, 0x86000, 0x70e, 0x10, 0x2ded, 0x7, 0x793, 0x8001, 0x3, 0x2, 0x400, 0x1, 0x5, 0xd2, 0x3, 0x1, 0x7, 0x4, 0xfffffffc, 0x7, 0xfffffffd, 0x4, 0xfffffff1, 0xb, 0x3, 0x9, 0x3, 0x6, 0x3, 0x0, 0xffffff67, 0x2, 0x3, 0x1, 0x2b, 0x6, 0x1, 0x1, 0x5, 0x0, 0x0, 0x10001, 0x0, 0x8, 0x8, 0x11e, 0x2, 0xfff, 0x1f9a, 0x200, 0x5, 0x8, 0x5, 0x8, 0x14, 0xffffffff, 0xfa, 0x6, 0x3, 0x380, 0x100, 0x2, 0x2a49, 0x4, 0x1, 0x9, 0x9d3e, 0xf5, 0x36b, 0x3db7e015, 0x2, 0x6, 0x8, 0xcb1f, 0x73d, 0x9, 0x9, 0x0, 0x1, 0x10, 0x7fff, 0x4, 0x0, 0x6, 0x40000, 0x9, 0x7, 0xa9, 0xa8, 0xd709]}]}]}}]}, 0x440}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xb, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000200000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 39.712218ms ago: executing program 0 (id=9407): sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYRES16=0x0, @ANYBLOB="000229bd7000fedb0004000000000000078008000100a40f00000c00040001000000000000000c00030002080000000000000c000400000c00000000000008000100740000003d060000000000002400058014000280080002000400000008000100190000000e00028008000100"], 0x78}, 0x1, 0x0, 0x0, 0x20004840}, 0xcc00) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtaction={0x48, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}, [{0x4}, {0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x1d, {0x3, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtaction={0x48, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}, [{0x4}, {0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x1d, {0x3, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@initdev, @in=@local}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000c80)={0x2e8, 0x42, 0x3, 0x70bd25, 0x25dfdbff, "", [@nested={0xbb, 0x13b, 0x0, 0x1, [@generic="f560537f2157ecfc9a18f166913e039355e3f30fad0f48b1a21ec275a5e96d6f740889e5a60a3614916b98c8802de7706105891e87f7fe4a32142d817d6409ddc0e719591cd41f92f2ac1975e7b997651c69436e265a39dfa7da0a45235964ccb323dbed654738f5fc2d9446008cc0a2a53746eb62c12f0501700d702881b2957657c19f62839b6c5038e1f0bc821139a89f00"/159, @nested={0x4, 0x60}, @typed={0x8, 0x7b, 0x0, 0x0, @uid=r2}, @nested={0x4, 0xb6}, @nested={0x4, 0x10a}, @nested={0x4, 0x14e}]}, @typed={0xef, 0x208b, 0x0, 0x0, @binary="95ada800897c318f75b6ca3361d25826b7538228853f7e6b9f75dae7872990cae864896b5dcaa046b336d02337f659495891a7a8e7e7faccb3c2185642c5f95f9f6e42a602bafd3985f6d78b40de4f5bc6c7b4b07e2deb4d69283d965bf6ad97cea6494e28ff71772c08669a2b5692da570093aaf3265401cddc15d10c09eeae0f07c5f44d8dc78799c5a013d169faeb59ae46162804b05c82e891caeab983acfec595afb04355785003d6da259fd627552dfbd8d80db3bc4e5674bbda316b7f76bdc379c230b797586a6f454fc68a8411efee1aa04c4c389005ecb2d973b10c52a831487e07bc82f6092f"}, @typed={0x8, 0x4d, 0x0, 0x0, @uid=r2}, @nested={0x10a, 0x132, 0x0, 0x1, [@nested={0x4, 0x167}, @generic="10892cd5b82cfa3e5e64163feb9c4228c433668c02413a97ba76979ef5dbc403d0f6444c7ec40faa93d1025221df719b8ca976cd9436df53dfa0cbfcb8dddab3c0951d675edd0d52c014c4806e5d4ed7095b7d1707435c2bca2a66ab5c51ec9b5dbde44a15168164ac0a20914007701b96c10f94cc7d9105207869f8b331adbc0b14be6007d669fc691d11f994b4e8bf75ba", @nested={0x70, 0x119, 0x0, 0x1, [@typed={0xc, 0xd9, 0x0, 0x0, @u64=0x15d}, @nested={0x5f, 0xae, 0x0, 0x1, [@generic="62815ee1a4c290377b3e08ce8f877a8b0a384f9e0e6b87a1957b58ee6a5a6ec045ad7ae066de2d303daba14487c8fa32b067bf54a4de78a5849e154cb0dd2b3634ed30d50e10b8dd44b6ef62de21a503d338460952817136198abd"]}]}]}, @typed={0x14, 0x6f, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @generic="158f"]}, 0x2e8}], 0x1, 0x0, 0x0, 0x4000001}, 0x41) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000300)={r1, &(0x7f0000000180)=',!\x00', 0x202, &(0x7f0000000240)={@_ha_fsid={[0x8, 0x5]}, {0x67, 0x8, 0x4, 0x7}}, 0x9, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x7}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000300)={r1, &(0x7f0000000180)=',!\x00', 0x202, &(0x7f0000000240)={@_ha_fsid={[0x8, 0x5]}, {0x67, 0x8, 0x4, 0x7}}, 0x9, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x7}) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r5, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x24040050) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000008c0)=[0x45c, 0x9], 0x0, 0x0, 0x2, 0x1, r7}}, 0x40) sendmsg$nl_generic(r4, &(0x7f00000022c0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002240)={&(0x7f0000001f80)={0x294, 0x1f, 0x1, 0x70bd29, 0x25dfdbff, {0xf}, [@nested={0x30, 0x130, 0x0, 0x1, [@typed={0x4, 0xed}, @typed={0x8, 0x11d, 0x0, 0x0, @pid=r7}, @typed={0x14, 0xd0, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x132, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x4c}]}, @generic="cafa9bd16b32f5b4d6b9a169e6563097bfb639c71554180362b3", @nested={0x4, 0x3f}, @generic="da24d1f81a040088ca774aca9fa3d38246676458ffab9a4e7199de46e3c9c105cc10582f86c80d00ff7abcccee9891c664584052516ee250ebf2f40a8eb6d8be36eba9302ab9f8766f6aa1b065850114c90d77785f0472e664010267e6d1962a9ddd6a1f2a7120d5726201021878bbf7b18ecb5c01f59bc1c9aa0a040b3a38f0b9d8be109c6a", @typed={0x103, 0x84, 0x0, 0x0, @binary="7de965b1eea936cd5845bc078e42dfc332095e2b333690f0897f46a397199d5ac3beeb5ee04a6ddd4f82bfe7319fecd7c72de19e4346a6826a73fae9416804e7270ab431652787802f6c2c6b98ddf844676ff41e84f73a647c636db0dccc32619cb5484bf85d3c7123244a21a102090a7bff4cf7899116da53eb0b726ef5ac9d54ef2bada4128453dd7658b781dab44b14be37cdb8f1f2ebb52e143f37e7c3e08462589a3ccd86c01bb3e1f89a53cbd806b6a7bef3ea004f31e6228a4243316b0f354c7f64654e17ae41db550a018b06a2ccd6f5c8da34069b7fa8313fcb3dadf57453fd4a7b6d8f5f9b304ac6f7ef4c925dd1fa325c0dfd7c98e1860089da"}, @typed={0xb, 0xe3, 0x0, 0x0, @str='%)-(!$\x00'}, @nested={0x9b, 0x10c, 0x0, 0x1, [@generic="ca8d7eb4806b91600d8a6893170c7d4d89dc3d7e354defaba9313604e4607059a56180f7d0acde648dd05b02bb1b4f491c9c810a144223ff6af7138f1243c6f78e110e766c0b3bbf538a53693ad251425c5b200ee7ebed9a2969fa8069b8cb8f193b8f97d2857198b6b2a2b4e8297461d83408d4ec4f19f01b1d101705b582f0c342b9f91df7dab59ff0e883ec8ebd206109f30da06549"]}]}, 0x294}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) sendmsg$nl_generic(r3, &(0x7f0000002000)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000000f80)={0x1040, 0x38, 0x8, 0x70bd28, 0x25dfdbff, {0x17}, [@typed={0x8, 0x80, 0x0, 0x0, @pid=r7}, @generic="ac3d9a47c39f251774141ef3813626c561e6492a", @generic="09fb3cbbe427ebddb29feab609ae0aeb1b255b628b0ca783fced9378da3b918512382401e99be19c56a5fbcb064ff1fa79c8b4d9fad610cfd3ba22f9d9f17a03551c729d68db44a35516cdc8663cbb4ef2bef6346029def16ce4849ff83942d1c29e28650e92ca7dea804d749405fe71745018fb1502baceccc49204acf27b94747aa3986291eef9bfd33a440381b24437ec335afb962ec008a1d5f10c968175dc2db1a451fa8856a904e8192cd0d5eace3223b6b56340cfd283d9f5c396f2f4615fc78269cfaf0f859ca5421cff891578f6bcbf79e4fa65b387627e8e28799bd3adeea2a21b6c3da2b5cd7983f63edf3cf7b18c3d9c5eda1c2439c81dc9a91c2478a2308c445e227b8fa9e44603516ff75f33a6dd7b3653040f722ee9c6aab02fd36cb2aa93ed523ee251e4fd0da3df6671a629a353e42c8b2249dd5a70180da6727c21d2afffc365bdad33105a83d376cf668eba9662f3593c27c601a3dc881e5184e15c9cffed962b6c0db65f2822039762040c15fc678261a3f77aab74cda6e5b84b731ed4b466d72ae68bb1efe6a85370fc57f4cd6111b0c3d31f1caaeb4e4fe9807c0bec1dbf23efa6656aa030b0051d415ced2f71fe962d7650477840053b8bbebfa4fac37ed8bccfd277255afa0a9dedd4bf7fa16631cdb7886c53fb99437d271ef763376db327b63c52e5c8dc696fd0516c21584d4153959521a6eb0f0ebbdff9331520cebe3a5d7843805230985aad6c1977bd10d7ecee634a748e117d365592024f8674d79b9f29b4447b9e02c7645b2812bfb793095a061c52a791ede56a7f58b8f9d8c8bd90a1fa952f81ba9070a308d5c5254b07d85a941c8dceb38b4ab6a574159244f230750b8ef7ae79b30fee0420fcdb2aa4474947e43b5b27994ba0edb1530c7d2da9466ca5ee955bbfb22284eea76e88d104d805b444021af0d8d79c972378de782a10da6b9caa44844aaa5afd590243c2e8dfa83c62cfd96a2cd4276b1af24b0bc17c4fb9ec911e36a1c17972c78811dd69c24e0b9ad49ea3007fc2b83e75a075d0393bb08ae7cc9e78bd4db86cd943a5334dbdc8c1f58d0ec1cad9c3cb5c365b7f656b0c741e32c571433a02e7a3a8b3fef46b38e2b1f71ac37d1b28fc59b61908eeec60ec84cd3caf398c68020dd75629c8a24f17298da46980c866b475850c8c5045fb8f9f42792206de32d51d1290db5a4a16baa724eb1db4012b5054cf2f4edbab0414ec015a68c5ecf878240472dbf71fbcbdca1a2c5ea2dc565ede2d0ea255ec274bac01503c9f841a3d76555b88195e794c60127c9161224753651cbbe15e5bd82b1469a9aa6f398ff15f9fa57acdec6389ed2e26e1e7a94794856f51784707ca3ffa31dd7741d18eed7c9542856cf01d60d2496aaac0952dd89fb2f8681ab234b3ed449afaf44d24c9ee387495ede326fedad14d1a84aa6b778fc8e90a9eedee79c713cf6baefa4bc1618aacacc7deab12b0a9f184153dfd81c0607885751ac533ec4fe5ee82fcbc8f2d276da27442e7f93001f55aa79dc4d6b6358e927cad6a2c80995df6d6a120b4f6c81aa2adf6310b9e5a2272551cff01935870091eda9d465202d257372cbf3b2841bd93984f3915912257ec6b15726d50c0a49b903c9b5bbf917f8887b59c0ef1e88715bea894b838916bd094587df30533e6fc82af8dfb07f1831f9a37e76d9f6df416767ae9a7de9fb35f50e34e223551d01a865be31103a13e15e507a622be29b79bbf2c422567937d7d64f3249a6ba93f89f112deb3bc92fc8d2eae3d9c6170b7d06ecff637cede1d71968b709ca867638470587fd0435e1cf77582036dbb52b1c8b3db50bd52323fa3921a143d0d6c4b28fc81cb3d30e74ab2fd880486929dc93ad380b49ad18f4f65b13a3b3130a3f7a6de24cccfc6ce7ab2a75f099d195b68db4f446f5fb98e5a28d09a6c7dea5248800dba6b4f3d63cb65ac5804a3aa4656657456bd4f3e6dc55072602819f14249ac7ff93cbee3cdd29179d3188044a6e96d3de053c5e964fbff50ed6a1194fe74d75bba3833fbb2b472afc72d9a05960e404798693520f20f3821c5873c3ccfbbcfc17a8fd6a93807794b485c7326a82dc83a4319ae2c3000e1f13c66854fcdcb0c88e677ef27b8d01c017f309bf0c73159e76b5f3fc638235eaf7602a3b91d51152c47fa0aa077898dab267dcf3c4de23071d3e26dff6a3f04a1bd1788dd0ccaf9d07e1a4bef2fa98175210890d350f2b81919e19e869b910a472b61a3398a06e4ec0734a2df6b8a43b2d6042a6aa538e5890523a7a013e9ff5c13d69966036607c93ebd377388f909231b5cce0797fe0f5fb9cc1bf92fe8e0a2aad9c40322cccb7f3a89aa9e245c484c2ff056405fe5bdee67f26cc0d828792e3daacfb5d338661aa80cd45e475bd2a071a260daaea122ce8cc5d68d1d25098faec9c0f2769f2d1be4dfbc38f2494664e001af7dfa62541efa9020f90025728fbeb5ac33cb44bd04d59fd940abb887968d4b586dd7e38ab51c9fb081938864747f7236ced6c4b309756766314958bd9597e3a110ad33c89015efd9aa54d7d970f948b3200c67688c54e5e60f3d7f250c47e0d5b294a78a2513a481df6dad0e7599bb743a12d9e4cbf7cc9d308328c0b985c7c313f05b75b3e33f0280fcdc21cf2272ac92cd2aa83e09d66706bd0a5e81608092eb17cb1ae21afc0f69b22c8c243759693b53bffa902bf7fd0244e1e569a7316b62cd5d9f4c34d45a3aee890e83886120fa3806c3e1bb36b93b3a8bcfd838dac32b1eaf88aa8a08c663b96f2b6c0dee8cb3222fafdc3adc033a5882d2619352730749db1483d8341d2afd42bca68cf9f3f2c6a6e24d5ab873edcb929e46a73ffa521d38819e589b883e3bab0975009fdf57e1af3e44ed4f9a633506382ca11a78ccdc160b4c72ab875840817a831dd32070cc7cf5421fec9812b1cd2322cd6d6f5b4dd5a2aca6021216101e706272cd30a37ea02f709c02cb39af89ae8da634ac3b6b6cc14f2a3792d653e2d737bb2880e1650687bcaeeedf790a8a87474df2aef974fe9b7c2177d5d145c1ac1c98e95d9fb6109c98fd66eb3f1334a1ad2cc82cba2d0cd91472c97e98944f2910ca4a6af669b14aa781d7b3c6c4313ce487b3cbc6321d90c90562d7cc243ae8e2afd240c7912678c768c17b4e5dc39246c9dbf623b1328f69a956d5322239257d3b585595d3155b4f0d82d24287468feb96e33a53d783944940c7794c1644c1dbf076f5cd8b83532aaa2dfacf990d4b7a1861798ef8047eca09c3dcb7883f95e7f5620dee6c0931f02b2fe379a287e55a85cd511ad3209befd240e59937245ce1d879a13aa00bda784b7f43becf98b4feadca3a078608554c0f4d845ec214fe2effdc0382ff1f7536b79068db2f11776f1b5c382e142d969dab87983350e3fa818f0013bb61dd8bef62078713506bcdf3fc6e9cf2474035af3c7e4558ec21a93b69a0023f9311d7d0e010f901c05508afd88d5e5a52de652de68358b0a2e6015e56344599f0db5b999f6c6895d783bb496341be5893ac0993c3782b2e7aeae7caa0321649e3acc2ba60a659191407a2ccaea7ba23f27261902368bdc0cb95c9174cb7dd72599b654f7ff902b3d8e51df9b5b4a1147c142edd327090b33fc47a5969a4149cbda8e0b8a60cfe35395ba12839696956ca818d0a24495ae1bc5e2d725478bf18c0b56ef6a8462eb02bd56b0421d2ccbe7221a93213d4be7e69d80db59e8c211cb7c44c439baab0ba64fb40a04878a9e0980a6ce8e23ee9a85da99595433bcd05ab0a70b68944994a017306c7eeff5c6191038932f2741e9731c1cd40c02d121a9277b1d2b207b8f5e29baf4f7015db6eac5561010773e64de3988cc3d7596ec360d99a141cc6fd623a2a2e4f51052eba988b587d11753dae56839f5432c1e074682f4406f9afb83e621c971492cded4455bcc03584de3eed683e186c17189e23d53c1ae367d72e82f2087951cb187d1090e9646ab257c526edc0c8ccccf67c333af5db979fadbfee77d20b433560c8c6ce4d118a0e7c3f206e5fd9dc818ffe3c6b26d09b8df78ce1274b4ac4568fcb979c55feaebd219344f5ecb05c7a17a05842c64c545f0da3578cb5532516171a1a20358f5507776139f9fae23603556615eacafb9818c6b88b2f42041a629455a02546f943f66eddd16f5d55de418f39fc6c6b7cd5b13532ed2fe6c07a0afb349823e8c3c11f36667b09e1c9af2c7398db8e218c1992704f165f5b07a71f108783f1f677469cb4fa4e4635acbe4f64c09098237bba8499888e1a24779cc3cfb328b59ede80853f07a4600c5701b4950d81562d8da1457de0fe4371edf0fa7572f0023a6a0167bf88d168f467d08511b16decec8304d61bec9da9a90a2c0e8a4e0fdf44899f10cbdb3ad85f9cab764caaac739107723067965328112b87843bb2f1afcdb6f4034ab85776f163977c3402253201a47ea7bfd56b2a12e666111c2b1d6c71a47ec5f0c1e21b070ebdca2ab4d8c201ed366205ad9b949b221c9f6cac319678d41fe172a774ea5db5599321ac1555933da28a251f08a6da6277b00d4eac1e169d8fa96fb49cc63d9b5e062c17eb5d6f2b5e6bd0f0ca764a811227d55330e6fa0a6e577c18acc0f4f04ae3ed15328d61ad018a35fffbc24cfd9bbdacc5519422556d2fa231ba4fe76437c9d5e9469f667190883d34ea400f5bc7169004b9d6b82f95142ccbc496cf34c5496839d3c99d4f86c76422c3fc9643b8d6b4cb4af94469947914c9432049fe3deeefffb73e244a824ec80a3e5670732f786490ff6933c68b506e55ff91407d43a0225f872ecab11ecc31ccaa60f0422eaffa44930e976c57d66de5c32cf3dfb25d8d4f66134809432c85df39b5264a431d93f18325d38bfcb2a1251bfa6d78a4ab9ea91858671361166d53cfbf35220be85fb8496b5341fac41d6914f55737dc8f516591726a6bfd9d4dc741511963b27621463721edc532d6cc09eac5598084688eea3efae1922234100848efc40e52df388d3b7987a5a47067066e59182a3f2bf6a832bd10f707a3619061a10f626f32fd6e0c2f622791c7efb83dcb0abe873baf6c92db62d1c20563422a1f9d7754d5d1ec2bca41e3eb3bc1b368f9a854931c9644646e74ffee2e02a2e46797e5c20ca217b4551ca5cfc1566d6a4aae7128c486e5e72df7d50b09316c99707f3078b9131262c298cc18de5403349fc7c1c83f6167317f919b4372c20a8f6d371fee3dab9c2faa9ce7190f07bfb79851d2c18fc74064142d45bb6449f54d2c26f5fcdf5e9059e60f5c16abcec5cac023cc9e3feb84eb4a0fd2e9b99a899327dbbe48f8ba6fd20216e930ee5f30e24860d72edd2af908390f23283883689d86e87520f114bf81b6cf007494dc85f2a5a41ea1748b4ee3ceb62a2fc98f70ad49bb90db4d79a2c7495b9fa17758fe569e3d6e699b4ae9cb7c5bc09361b7ba2f884c1ce55d8fdf528de5d1293e1e10021e10e85b41ea04798d77426e213abd76b4f743123fe2e8d886c3e22e915fbdf2cbcccfae97f5e8b61ac7ad2e0df640ae79a57688b9c93fbb9f5c8ce937d4f50368a5447ae0f2e6dbff111e947d0018ffcbe27f977c0bab6076e92615573c062bd86b740edd3c62da53f51e36e2194516270c814b2520c7aa98dbb8962aba48878eaa69951e3fe5be24972d2848777925bb02517c98847e9282b767a8569f5db687068d1bd64821821b0b5a15b6cd98e50993a3f4c2ceae1edcc40bd6c95d9f", @typed={0x8, 0x130, 0x0, 0x0, @uid=r2}, @generic="012dd4b93610b1"]}, 0x1040}, 0x1, 0x0, 0x0, 0x10}, 0x20004040) 38.928434ms ago: executing program 4 (id=9408): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x28, r3, 0x1, 0x70bd26, 0x27dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004001}, 0x20008800) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r7, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73e763e5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x50e9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2fe2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1512}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x62f6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x25a8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6fdb8186}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c773fa}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4051) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x1406, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c000}, 0x20040000) 0s ago: executing program 1 (id=9409): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="7c010000190001002bbd700000000000e0000001000000000000000000000000ac1414bb0000000000000000000000000000000000000000020000000100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0xc001084}, 0x40800) kernel console output (not intermixed with test programs): 88] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.995366][ T1888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.243769][ T1907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7986'. [ 1023.280210][ T1907] netlink: 'syz.2.7986': attribute type 3 has an invalid length. [ 1023.311144][ T1907] netlink: 'syz.2.7986': attribute type 3 has an invalid length. [ 1023.324919][ T1907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7986'. [ 1023.350704][ T1910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7986'. [ 1023.523290][ T1914] ip6gre2: entered promiscuous mode [ 1023.539133][ T1914] ip6gre2: entered allmulticast mode [ 1023.613252][ T6653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.582570][ T1950] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 1025.418502][ T2005] ip6tnl0: entered promiscuous mode [ 1025.427126][ T2005] ip6tnl0: entered allmulticast mode [ 1025.817122][ T2022] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20002 [ 1026.216990][ T2037] __nla_validate_parse: 6 callbacks suppressed [ 1026.217014][ T2037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8021'. [ 1026.297885][ T2037] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8021'. [ 1026.768216][ T2051] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 1026.785723][ T2052] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8025'. [ 1026.927970][ T2057] tipc: Started in network mode [ 1026.947485][ T2057] tipc: Node identity ac14140f, cluster identity 4711 [ 1026.972023][ T2057] tipc: New replicast peer: 255.255.255.255 [ 1026.986203][ T2057] tipc: Enabled bearer , priority 5 [ 1027.621907][ T2081] netlink: 388 bytes leftover after parsing attributes in process `syz.4.8031'. [ 1027.806079][ T2086] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1028.131895][ T2107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8036'. [ 1028.162344][ T9] tipc: Node number set to 2886997007 [ 1028.629924][ T2112] bridge5: port 1(erspan0) entered blocking state [ 1028.636922][ T2112] bridge5: port 1(erspan0) entered disabled state [ 1028.644524][ T2112] erspan0: entered allmulticast mode [ 1028.666692][ T2112] erspan0: entered promiscuous mode [ 1028.697778][ T2112] bridge5: port 1(erspan0) entered blocking state [ 1028.704442][ T2112] bridge5: port 1(erspan0) entered forwarding state [ 1028.735069][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.746651][T25576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.756617][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.804094][ T2118] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8037'. [ 1029.335735][ T2136] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8041'. [ 1029.351377][ T2135] netlink: 388 bytes leftover after parsing attributes in process `syz.2.8043'. [ 1029.381957][ T1030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.596921][ T2140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8042'. [ 1029.798141][ T2151] validate_nla: 1 callbacks suppressed [ 1029.798192][ T2151] netlink: 'syz.1.8045': attribute type 1 has an invalid length. [ 1030.115246][ T2151] bond11: entered promiscuous mode [ 1030.151782][ T2151] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1030.310746][ T2156] bond11: (slave bridge6): making interface the new active one [ 1030.340408][ T2156] bridge6: entered promiscuous mode [ 1030.378129][ T2156] bridge6: left promiscuous mode [ 1030.537682][ T2169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8050'. [ 1030.657789][ T1030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.671074][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.694098][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.741894][T16830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.753320][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.776441][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.799463][ T2172] x_tables: duplicate underflow at hook 3 [ 1030.975900][ T2175] ip6tnl0: Caught tx_queue_len zero misconfig [ 1033.309983][ T2221] __nla_validate_parse: 2 callbacks suppressed [ 1033.310005][ T2221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8065'. [ 1033.353799][ T2193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1033.448777][ T2193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1033.467649][ T2223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8065'. [ 1033.819115][ T2193] bond4: left promiscuous mode [ 1033.858566][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1033.980734][ T2202] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8060'. [ 1034.011612][T16842] net_ratelimit: 9 callbacks suppressed [ 1034.011633][T16842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.333656][T16935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.820176][ T2257] netlink: 'syz.3.8073': attribute type 11 has an invalid length. [ 1034.849428][ T2261] netlink: 'syz.1.8075': attribute type 5 has an invalid length. [ 1034.863116][ T2262] netlink: 'syz.3.8073': attribute type 11 has an invalid length. [ 1035.052130][T16836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.684349][ T2294] syzkaller0: entered allmulticast mode [ 1035.805313][ T2299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8084'. [ 1036.092540][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.163171][ T2290] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.206164][ T2290] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 57084 - 0 [ 1036.244817][ T2290] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1036.649499][ T2290] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.678899][ T2290] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 57084 - 0 [ 1036.691603][ T2290] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1037.054828][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.072358][T16935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.106459][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.131633][T16836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.306590][ T2343] netlink: 560 bytes leftover after parsing attributes in process `syz.0.8099'. [ 1037.337901][ T2343] netlink: 964 bytes leftover after parsing attributes in process `syz.0.8099'. [ 1037.383447][ T2343] netlink: 560 bytes leftover after parsing attributes in process `syz.0.8099'. [ 1037.404401][ T2290] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1037.415460][ T2290] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 57084 - 0 [ 1037.426837][ T2290] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1037.612577][ T2357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8101'. [ 1037.723760][ T2362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8101'. [ 1037.849167][ T2290] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1037.908028][ T2290] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 57084 - 0 [ 1037.932294][ T2290] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1038.175001][T16836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.081415][ T35] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.121514][ T35] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.129847][ T35] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 57084 - 0 [ 1039.215469][ T2391] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1039.306027][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.475276][T19018] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.495456][T19018] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.535251][T19018] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 57084 - 0 [ 1039.689598][T19018] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.727216][T19018] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.755810][T19018] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 57084 - 0 [ 1039.846077][ T6128] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.856630][ T6128] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.874719][ T6128] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 57084 - 0 [ 1039.922891][ T2415] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8113'. [ 1039.984372][ T2428] xt_socket: unknown flags 0x8 [ 1040.031816][ T2430] sctp: [Deprecated]: syz.0.8118 (pid 2430) Use of int in max_burst socket option. [ 1040.031816][ T2430] Use struct sctp_assoc_value instead [ 1040.181663][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.254980][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.283998][ T2439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8121'. [ 1040.331999][T16827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.382813][ T2444] netlink: 'syz.4.8120': attribute type 1 has an invalid length. [ 1040.418033][ T2439] bond0: entered promiscuous mode [ 1040.424222][ T2444] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8120'. [ 1040.438569][ T2439] ÿ: entered promiscuous mode [ 1040.451590][ T2444] netlink: 'syz.4.8120': attribute type 10 has an invalid length. [ 1040.461910][ T2439] bond_slave_1: entered promiscuous mode [ 1040.475144][ T2439] batadv_slave_0: entered promiscuous mode [ 1040.483735][ T2439] batadv_slave_0: left promiscuous mode [ 1040.505192][ T2448] netlink: 'syz.4.8120': attribute type 10 has an invalid length. [ 1040.540063][ T2439] bond0: left promiscuous mode [ 1040.554077][ T2439] ÿ: left promiscuous mode [ 1040.565423][ T2439] bond_slave_1: left promiscuous mode [ 1040.612680][ T2444] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1040.640451][ T2444] team0: Port device netdevsim1 added [ 1040.722461][ T2449] vlan3: entered promiscuous mode [ 1040.744382][ T2449] bond_slave_1: entered promiscuous mode [ 1040.836463][ T2448] team0: Port device netdevsim1 removed [ 1040.868176][ T2463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8125'. [ 1040.898085][ T2448] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1040.918197][ T2464] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8124'. [ 1040.983425][ T2448] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1041.373942][T16827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.384524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.398021][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.657042][ T2489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8131'. [ 1041.894295][ T2494] netlink: 136 bytes leftover after parsing attributes in process `syz.1.8133'. [ 1041.947165][ T2495] netlink: 136 bytes leftover after parsing attributes in process `syz.1.8133'. [ 1041.991243][ T2494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8133'. [ 1042.060934][ T2494] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8133'. [ 1042.174043][T19018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.186780][T16827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.205317][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.708873][ T2518] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 1044.091464][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1044.476311][ T2557] net_ratelimit: 2 callbacks suppressed [ 1044.476365][ T2557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.493117][ T2557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.562222][ T2557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.635757][ T2557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.764776][ T2557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.852033][ T2557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.019447][ T2573] __nla_validate_parse: 7 callbacks suppressed [ 1045.019467][ T2573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8151'. [ 1045.189576][ T2574] gretap0: entered promiscuous mode [ 1045.311329][T16935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.336315][ T2574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.363940][ T2574] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.394967][ T2574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1045.467488][ T2574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1045.506693][ T2574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1045.524006][ T2574] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1045.537035][T16827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.583102][T25576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.591212][T25576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.632823][T25576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.641071][T25576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.590533][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.127554][ T2621] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 1047.220572][ T2614] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8156'. [ 1047.612303][T16824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.977894][ T2646] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1049.211915][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1049.691973][T16824] net_ratelimit: 5 callbacks suppressed [ 1049.691996][T16824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.779212][ T2683] netlink: 1060 bytes leftover after parsing attributes in process `syz.3.8169'. [ 1049.865916][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.312120][ T2704] pim6reg1: entered allmulticast mode [ 1050.732934][T16824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.834761][ T2722] syzkaller0: entered promiscuous mode [ 1050.847211][ T2722] syzkaller0: entered allmulticast mode [ 1051.009503][ T2730] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1051.069986][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.089248][ T2731] x_tables: duplicate underflow at hook 2 [ 1051.253980][ T2737] netlink: 'syz.4.8183': attribute type 13 has an invalid length. [ 1051.447366][ T2747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8183'. [ 1051.724579][ T2761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8189'. [ 1051.753176][ T2764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8189'. [ 1051.784591][T16836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.896312][ T2761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8189'. [ 1052.480133][ T2785] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1052.572611][ T2785] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8195'. [ 1052.590330][ T2780] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1052.619277][ T2780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8193'. [ 1052.815543][T16836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.505396][T16836] IPVS: starting estimator thread 0... [ 1053.615250][ T2808] IPVS: using max 26 ests per chain, 62400 per kthread [ 1053.699367][ T1132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.710299][T16836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.742769][T16836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.809470][ T2810] syz_tun: entered allmulticast mode [ 1053.864459][ T2810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8203'. [ 1054.172321][ T2810] syz_tun (unregistering): left allmulticast mode [ 1054.463967][ T2822] sit0: Caught tx_queue_len zero misconfig [ 1054.507999][ T2819] batadv_slave_1: entered promiscuous mode [ 1054.892155][T16824] net_ratelimit: 1 callbacks suppressed [ 1054.892175][T16824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.017217][ T2841] xt_hashlimit: size too large, truncated to 1048576 [ 1055.256712][ T2853] hsr0: entered promiscuous mode [ 1055.935575][T16824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.543670][ T2898] syzkaller0: left allmulticast mode [ 1056.770786][ T2904] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8225'. [ 1056.781602][ T2905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8226'. [ 1056.814059][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.834420][ T2907] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8227'. [ 1056.875213][ T2911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8226'. [ 1056.948547][ T2913] netlink: 788 bytes leftover after parsing attributes in process `syz.4.8224'. [ 1056.984343][T16824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.056699][ T2916] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1058.012090][T16824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.228324][ T2949] 8021q: VLANs not supported on sit0 [ 1058.749238][ T2971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8241'. [ 1059.069573][T16824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.185907][ T2982] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8247'. [ 1059.217914][ T2982] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8247'. [ 1059.460040][ T1132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.479230][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.553978][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.577343][T16824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.100479][T16836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.429292][ T3014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8257'. [ 1060.467145][ T3014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8257'. [ 1060.476688][ T3011] vlan7: entered promiscuous mode [ 1060.529591][ T3018] netlink: 'syz.3.8259': attribute type 6 has an invalid length. [ 1060.562405][ T3018] netlink: 'syz.3.8259': attribute type 23 has an invalid length. [ 1060.573485][ T3018] IPv6: NLM_F_CREATE should be specified when creating new route [ 1060.635674][ T3018] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1061.145421][T16836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.663580][ T3054] bridge0: port 1(batadv1) entered blocking state [ 1061.682580][ T3054] bridge0: port 1(batadv1) entered disabled state [ 1061.690887][ T3054] batadv1: entered allmulticast mode [ 1061.720531][ T3054] batadv1: entered promiscuous mode [ 1061.803407][ T3056] bridge0: port 2(batadv2) entered blocking state [ 1061.834014][ T3056] bridge0: port 2(batadv2) entered disabled state [ 1061.840948][ T3056] batadv2: entered allmulticast mode [ 1061.892584][ T3056] batadv2: entered promiscuous mode [ 1062.141626][ T35] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1062.151137][ T35] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1062.171826][T16836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.271787][ T35] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 1062.281202][ T35] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 1062.661808][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.056676][ T3092] x_tables: duplicate underflow at hook 1 [ 1063.211474][T16836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.314468][ T3099] netlink: 388 bytes leftover after parsing attributes in process `syz.3.8282'. [ 1063.366606][ T3102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8284'. [ 1063.657599][ T3102] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1063.917727][ T3119] FAULT_INJECTION: forcing a failure. [ 1063.917727][ T3119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1063.967230][ T3116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8288'. [ 1063.986167][ T3119] CPU: 1 UID: 0 PID: 3119 Comm: syz.3.8290 Not tainted syzkaller #0 PREEMPT(full) [ 1063.986196][ T3119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1063.986209][ T3119] Call Trace: [ 1063.986219][ T3119] [ 1063.986229][ T3119] dump_stack_lvl+0xe8/0x150 [ 1063.986260][ T3119] should_fail_ex+0x40c/0x560 [ 1063.986302][ T3119] _copy_from_user+0x2d/0xb0 [ 1063.986329][ T3119] ___sys_sendmsg+0x1c6/0x360 [ 1063.986363][ T3119] ? __lock_acquire+0x683/0x2cd0 [ 1063.986392][ T3119] ? __pfx____sys_sendmsg+0x10/0x10 [ 1063.986450][ T3119] ? __fget_files+0x2a/0x420 [ 1063.986477][ T3119] ? __fget_files+0x3a2/0x420 [ 1063.986513][ T3119] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1063.986539][ T3119] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1063.986592][ T3119] ? __pfx_ksys_write+0x10/0x10 [ 1063.986636][ T3119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.986661][ T3119] do_syscall_64+0x174/0x580 [ 1063.986685][ T3119] ? trace_irq_disable+0x3b/0x140 [ 1063.986718][ T3119] ? clear_bhb_loop+0x40/0x90 [ 1063.986746][ T3119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.986767][ T3119] RIP: 0033:0x7f939a59ce59 [ 1063.986788][ T3119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1063.986807][ T3119] RSP: 002b:00007f939b405028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1063.986830][ T3119] RAX: ffffffffffffffda RBX: 00007f939a815fa0 RCX: 00007f939a59ce59 [ 1063.986846][ T3119] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1063.986860][ T3119] RBP: 00007f939b405090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.986873][ T3119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1063.986886][ T3119] R13: 00007f939a816038 R14: 00007f939a815fa0 R15: 00007ffec1e6bfd8 [ 1063.986921][ T3119] [ 1064.058714][ T3116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8288'. [ 1064.251292][T16836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.299166][ T3121] bond12: Removing last arp target with arp_interval on [ 1064.436816][ T3128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8292'. [ 1064.496519][ T3128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8292'. [ 1064.736611][ T3134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8294'. [ 1064.870185][ T3135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.881468][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.294549][T16836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.566048][ T3144] netlink: 388 bytes leftover after parsing attributes in process `syz.0.8297'. [ 1065.694031][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.953971][ T3155] netlink: 'syz.2.8301': attribute type 1 has an invalid length. [ 1066.085950][ T3160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8302'. [ 1066.098716][ T3164] FAULT_INJECTION: forcing a failure. [ 1066.098716][ T3164] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.101457][ T3155] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1066.132283][ T3164] CPU: 0 UID: 0 PID: 3164 Comm: syz.3.8303 Not tainted syzkaller #0 PREEMPT(full) [ 1066.132316][ T3164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1066.132331][ T3164] Call Trace: [ 1066.132340][ T3164] [ 1066.132350][ T3164] dump_stack_lvl+0xe8/0x150 [ 1066.132381][ T3164] should_fail_ex+0x40c/0x560 [ 1066.132424][ T3164] should_failslab+0xa8/0x100 [ 1066.132460][ T3164] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 1066.132491][ T3164] ? __alloc_skb+0x189/0x7a0 [ 1066.132524][ T3164] ? __alloc_skb+0x1d7/0x7a0 [ 1066.132555][ T3164] ? __local_bh_enable_ip+0xd0/0x130 [ 1066.132595][ T3164] __alloc_skb+0x1d7/0x7a0 [ 1066.132631][ T3164] netlink_sendmsg+0x5d4/0xb40 [ 1066.132666][ T3164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1066.132694][ T3164] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1066.132728][ T3164] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1066.132756][ T3164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1066.132789][ T3164] ____sys_sendmsg+0x9b9/0xa20 [ 1066.132813][ T3164] ? __might_fault+0xaf/0x130 [ 1066.132846][ T3164] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1066.132880][ T3164] ? import_iovec+0x73/0xa0 [ 1066.132909][ T3164] ___sys_sendmsg+0x2a5/0x360 [ 1066.132931][ T3164] ? __lock_acquire+0x683/0x2cd0 [ 1066.132960][ T3164] ? __pfx____sys_sendmsg+0x10/0x10 [ 1066.133019][ T3164] ? __fget_files+0x2a/0x420 [ 1066.133045][ T3164] ? __fget_files+0x3a2/0x420 [ 1066.133081][ T3164] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1066.133108][ T3164] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1066.133140][ T3164] ? __pfx_ksys_write+0x10/0x10 [ 1066.133179][ T3164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.133203][ T3164] do_syscall_64+0x174/0x580 [ 1066.133229][ T3164] ? clear_bhb_loop+0x40/0x90 [ 1066.133256][ T3164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.133277][ T3164] RIP: 0033:0x7f939a59ce59 [ 1066.133298][ T3164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1066.133317][ T3164] RSP: 002b:00007f939b405028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1066.133340][ T3164] RAX: ffffffffffffffda RBX: 00007f939a815fa0 RCX: 00007f939a59ce59 [ 1066.133355][ T3164] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1066.133369][ T3164] RBP: 00007f939b405090 R08: 0000000000000000 R09: 0000000000000000 [ 1066.133383][ T3164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1066.133396][ T3164] R13: 00007f939a816038 R14: 00007f939a815fa0 R15: 00007ffec1e6bfd8 [ 1066.133430][ T3164] [ 1066.335470][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880578bfc00: rx timeout, send abort [ 1066.419998][T16836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.502790][ T3169] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1066.916581][ T3187] netlink: 388 bytes leftover after parsing attributes in process `syz.0.8310'. [ 1067.231895][ T3195] pimreg: entered allmulticast mode [ 1067.410806][ T3205] macsec2: entered promiscuous mode [ 1067.451776][T16836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.508286][ T3222] netlink: 'syz.1.8317': attribute type 1 has an invalid length. [ 1067.691908][ T3226] syzkaller1: entered promiscuous mode [ 1067.697451][ T3226] syzkaller1: entered allmulticast mode [ 1068.388871][ T3244] team0: left promiscuous mode [ 1068.393714][ T3244] team_slave_0: left promiscuous mode [ 1068.399322][ T3244] team_slave_1: left promiscuous mode [ 1068.441646][ T3255] openvswitch: netlink: Flow actions attr not present in new flow. [ 1068.520766][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.621340][ T3244] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1068.782517][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.062881][ T3284] __nla_validate_parse: 5 callbacks suppressed [ 1069.062904][ T3284] netlink: 388 bytes leftover after parsing attributes in process `syz.0.8336'. [ 1069.113817][ T3281] bridge_slave_0: left allmulticast mode [ 1069.124082][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.134483][ T3281] bridge_slave_0: left promiscuous mode [ 1069.152460][ T3287] netlink: 'syz.3.8334': attribute type 3 has an invalid length. [ 1069.157008][ T3281] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.160287][ T3287] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8334'. [ 1069.256377][ T3281] bridge_slave_1: left allmulticast mode [ 1069.283638][ T3281] bridge_slave_1: left promiscuous mode [ 1069.289514][ T3281] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.335514][ T3281] bond0: (slave bond_slave_0): Releasing backup interface [ 1069.365721][ T3281] bond0: (slave bond_slave_1): Releasing backup interface [ 1069.401248][ T3281] team0: Port device team_slave_0 removed [ 1069.425188][ T3281] team0: Port device team_slave_1 removed [ 1069.432421][ T3281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1069.439871][ T3281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1069.497789][ T3281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1069.507331][ T3281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.526169][ T3281] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1069.682615][ T3310] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8340'. [ 1069.798766][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1069.929623][ T3315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8342'. [ 1070.429536][ T3332] mac80211_hwsim hwsim65 wlan1: Caught tx_queue_len zero misconfig [ 1070.631166][T16824] net_ratelimit: 1 callbacks suppressed [ 1070.631193][T16824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.657168][ T3376] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8359'. [ 1071.691545][T16836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.751321][ T3376] ip6gre2: entered promiscuous mode [ 1071.765528][ T3376] ip6gre2: entered allmulticast mode [ 1071.947822][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.000228][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.023282][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.038765][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.096692][ T3376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1072.238697][ T3395] netlink: 204 bytes leftover after parsing attributes in process `syz.2.8364'. [ 1072.302272][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.303627][ T3395] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8364'. [ 1072.595621][ T3401] tipc: Started in network mode [ 1072.651280][ T3401] tipc: Node identity ac14140f, cluster identity 4711 [ 1072.658363][ T3401] tipc: New replicast peer: 255.255.255.255 [ 1072.664961][ T3401] tipc: Enabled bearer , priority 5 [ 1072.694408][ T3407] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8365'. [ 1072.711918][ T3411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8367'. [ 1072.735023][T16824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.814566][ T3407] sctp: [Deprecated]: syz.2.8365 (pid 3407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1072.814566][ T3407] Use struct sctp_sack_info instead [ 1072.843645][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.852905][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.047898][ T3417] 8021q: adding VLAN 0 to HW filter on device team0 [ 1073.111244][ T3417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.125782][ T3417] wireguard: wg0: Could not create IPv4 socket [ 1073.182845][ T12] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 1073.192151][ T12] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 1073.203605][ T12] bond0: now running without any active interface! [ 1073.459580][ T3434] netlink: 204 bytes leftover after parsing attributes in process `syz.3.8375'. [ 1073.546880][ T3436] syzkaller0: entered promiscuous mode [ 1073.552421][ T3436] syzkaller0: entered allmulticast mode [ 1073.862958][ T5746] tipc: Node number set to 2886997007 [ 1073.877205][ T3443] netlink: 'syz.1.8379': attribute type 1 has an invalid length. [ 1073.900793][ T3449] netlink: 'syz.1.8379': attribute type 1 has an invalid length. [ 1074.048337][ T3456] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1074.063760][ T3456] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1074.071596][ T3456] __nla_validate_parse: 3 callbacks suppressed [ 1074.071614][ T3456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8383'. [ 1074.111847][ T3458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8383'. [ 1074.121067][ T3458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8383'. [ 1074.342931][ T3463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8384'. [ 1074.355123][ T3464] netlink: 204 bytes leftover after parsing attributes in process `syz.3.8386'. [ 1074.375398][ T3464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8386'. [ 1074.512360][ T3470] tipc: Enabled bearer , priority 5 [ 1074.569039][ T3472] xt_policy: output policy not valid in PREROUTING and INPUT [ 1074.730002][ T3477] netlink: 6060 bytes leftover after parsing attributes in process `syz.3.8391'. [ 1075.572697][ T3504] netlink: 'syz.2.8397': attribute type 1 has an invalid length. [ 1075.584064][ T3507] netlink: 'syz.3.8399': attribute type 1 has an invalid length. [ 1075.617750][ T3508] netlink: 204 bytes leftover after parsing attributes in process `syz.0.8398'. [ 1075.648598][ T3507] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8399'. [ 1075.657712][ T3508] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8398'. [ 1075.762194][ T3504] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1075.769644][ T11] tipc: Node number set to 2876534849 [ 1075.785263][ T3507] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1076.155631][ T5294] macvtap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1076.483097][ T3530] bridge_slave_0: left allmulticast mode [ 1076.488967][ T3530] bridge_slave_0: left promiscuous mode [ 1076.495038][ T3530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.571378][ T3530] bridge_slave_1: left allmulticast mode [ 1076.577096][ T3530] bridge_slave_1: left promiscuous mode [ 1076.582935][ T3530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.606201][ T3530] bond0: (slave 45ÿ): Releasing backup interface [ 1076.670528][ T3530] bond0: (slave bond_slave_1): Releasing backup interface [ 1076.696580][ T3530] team_slave_0: left allmulticast mode [ 1076.728112][ T3530] team0: Port device team_slave_0 removed [ 1076.735070][ T3530] team_slave_1: left allmulticast mode [ 1076.821849][ T3530] team0: Port device team_slave_1 removed [ 1076.828601][ T3530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1076.836041][ T3530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.902853][ T3530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1076.910311][ T3530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1076.936676][ T3530] net_ratelimit: 7 callbacks suppressed [ 1076.936695][ T3530] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1078.771394][ T3625] ip6gre1: entered promiscuous mode [ 1078.777006][ T3625] ip6gre1: entered allmulticast mode [ 1078.963993][ T3633] ÿ: renamed from bond_slave_0 [ 1079.132872][ T3637] sctp: [Deprecated]: syz.2.8428 (pid 3637) Use of int in maxseg socket option. [ 1079.132872][ T3637] Use struct sctp_assoc_value instead [ 1079.185974][ T3637] tipc: Enabling of bearer rejected, already enabled [ 1079.585572][ T3650] tipc: Enabled bearer , priority 2 [ 1079.608974][ T3650] netdevsim netdevsim2 €Â: renamed from netdevsim0 (while UP) [ 1079.686428][ T3653] __nla_validate_parse: 5 callbacks suppressed [ 1079.686463][ T3653] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8434'. [ 1079.915859][ T3650] tipc: Disabling bearer [ 1080.240735][ T3679] netlink: 'syz.0.8437': attribute type 1 has an invalid length. [ 1080.289228][ T3674] netlink: 'syz.3.8439': attribute type 1 has an invalid length. [ 1080.374605][ T3674] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1080.409652][ T3686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8443'. [ 1080.438826][ T3676] iwpm_parse_nlmsg: Invalid attribute (msg type Remote Mapping info ret = -34) [ 1080.451922][ T3686] erspan2: entered allmulticast mode [ 1080.497184][ T3687] bond5: (slave geneve3): making interface the new active one [ 1080.506208][ T3687] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 1080.576978][ T3686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8443'. [ 1080.612690][ T3686] netlink: 63 bytes leftover after parsing attributes in process `syz.2.8443'. [ 1080.622238][ T3691] netlink: 'syz.0.8444': attribute type 33 has an invalid length. [ 1080.707006][ T3686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8443'. [ 1080.718076][ T3686] netlink: 63 bytes leftover after parsing attributes in process `syz.2.8443'. [ 1080.820934][ T3697] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8445'. [ 1080.954557][ T3706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8448'. [ 1080.980045][ T3707] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8447'. [ 1081.502375][ T3719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8450'. [ 1081.679090][ T3717] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1082.416441][ T3736] syzkaller0: entered promiscuous mode [ 1082.421978][ T3736] syzkaller0: entered allmulticast mode [ 1083.378659][ T3754] tipc: Enabled bearer , priority 5 [ 1083.655554][ T3778] netlink: 'syz.2.8465': attribute type 10 has an invalid length. [ 1083.681126][ T3779] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 1083.757331][ T3771] syzkaller0: entered promiscuous mode [ 1083.765915][ T3771] syzkaller0: entered allmulticast mode [ 1083.816530][ T3771] tipc: Enabled bearer , priority 0 [ 1083.868588][ T3771] mac80211_hwsim hwsim64 wlan0: Caught tx_queue_len zero misconfig [ 1083.902799][ T3771] tipc: Resetting bearer [ 1083.916173][ T3770] tipc: Resetting bearer [ 1083.962663][ T3770] tipc: Disabling bearer [ 1084.001713][ T3786] tap0: tun_chr_ioctl cmd 1074025676 [ 1084.007072][ T3786] tap0: owner set to 0 [ 1084.113575][ T3792] netlink: 'syz.4.8470': attribute type 32 has an invalid length. [ 1084.483731][ T3801] netlink: 'syz.2.8473': attribute type 1 has an invalid length. [ 1084.603152][ T3801] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1084.628500][ T3807] batadv_slave_1: entered promiscuous mode [ 1084.713219][ T3801] gretap2: entered promiscuous mode [ 1084.729608][ T3801] bond9: (slave gretap2): making interface the new active one [ 1084.740744][ T3801] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 1084.772117][ T3819] syzkaller0: entered allmulticast mode [ 1084.841141][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.880685][ T3801] macvlan6: entered promiscuous mode [ 1084.893622][ T3801] macvlan6: entered allmulticast mode [ 1084.906131][ T3801] bond9: (slave macvlan6): Error -98 calling set_mac_address [ 1085.198168][ T3839] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1085.213512][ T3840] netlink: 'syz.4.8484': attribute type 1 has an invalid length. [ 1085.242168][ T3840] __nla_validate_parse: 13 callbacks suppressed [ 1085.242189][ T3840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8484'. [ 1085.272267][ T3840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8484'. [ 1085.833227][ T3849] netlink: 'syz.2.8486': attribute type 10 has an invalid length. [ 1086.115269][ T3868] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1086.350470][ T3872] netlink: 'syz.0.8493': attribute type 30 has an invalid length. [ 1086.385147][ T3875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8494'. [ 1086.770722][ T3892] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1086.858389][ T3892] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1086.929870][ T3892] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1086.972427][ T3896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8499'. [ 1087.033091][ T3892] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1087.041688][ T3891] syzkaller0: entered promiscuous mode [ 1087.047212][ T3891] syzkaller0: entered allmulticast mode [ 1087.076065][ T3900] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1090.502299][ T3919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8506'. [ 1090.896760][ T3938] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8508'. [ 1091.253894][ T3947] netlink: 'syz.1.8510': attribute type 1 has an invalid length. [ 1091.261715][ T3947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1091.322732][ T3951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8511'. [ 1091.566758][ T3961] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8515'. [ 1091.622328][ T3966] IPVS: set_ctl: invalid protocol: 22 10.1.1.1:20001 [ 1092.100591][ T3978] x_tables: duplicate entry at hook 3 [ 1092.302674][ T3989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.371626][ T3990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8520'. [ 1092.626255][ T3996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8521'. [ 1092.933206][ T3996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8521'. [ 1093.010441][ T4003] netlink: 192 bytes leftover after parsing attributes in process `syz.3.8525'. [ 1093.646722][ T4025] netlink: 424 bytes leftover after parsing attributes in process `syz.0.8531'. [ 1093.656673][ T4025] netlink: 'syz.0.8531': attribute type 1 has an invalid length. [ 1093.847183][ T4031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8532'. [ 1094.393269][ T4041] bond10: option primary_reselect: invalid value (6) [ 1094.482177][ T4041] bond10 (unregistering): Released all slaves [ 1094.705275][ T4049] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1095.291271][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1096.428884][ T4104] gtp1: entered promiscuous mode [ 1096.433916][ T4104] gtp1: entered allmulticast mode [ 1096.585505][ T4112] __nla_validate_parse: 3 callbacks suppressed [ 1096.585526][ T4112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8567'. [ 1096.715370][ T4116] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8568'. [ 1096.724417][ T4116] tipc: Invalid UDP bearer configuration [ 1096.724474][ T4116] tipc: Enabling of bearer rejected, failed to enable media [ 1096.824475][ T4120] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1096.857588][ T4122] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8572'. [ 1097.043586][ T4133] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8575'. [ 1097.224693][ T4144] ipvlan1: Caught tx_queue_len zero misconfig [ 1097.247767][ T4144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8582'. [ 1097.271379][ T4147] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 1097.551236][ T4162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8590'. [ 1097.994775][ T4182] bridge_slave_0: left allmulticast mode [ 1098.012749][ T4182] bridge_slave_0: left promiscuous mode [ 1098.028948][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.047817][ T4182] bridge_slave_1: left allmulticast mode [ 1098.053728][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.067669][ T4182] bond0: (slave bond_slave_0): Releasing backup interface [ 1098.088217][ T4182] bond0: (slave bond_slave_1): Releasing backup interface [ 1098.109368][ T4182] team0: Port device team_slave_0 removed [ 1098.135448][ T4182] team0: Port device team_slave_1 removed [ 1098.141650][ T4182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1098.149640][ T4182] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1098.169518][ T4190] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8605'. [ 1098.395065][ T4200] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8610'. [ 1098.404193][ T4200] ksmbd: Unknown IPC event: 4, ignore. [ 1098.520616][ T4192] batadv_slave_1: left promiscuous mode [ 1098.529558][ T4192] ip6gre1: left promiscuous mode [ 1098.567852][ T4192] ip6gre1: left allmulticast mode [ 1098.645081][ T4212] syz_tun: entered allmulticast mode [ 1098.701298][ T4212] bond0: entered promiscuous mode [ 1098.706399][ T4212] bond_slave_0: entered promiscuous mode [ 1098.712271][ T4212] bond_slave_1: entered promiscuous mode [ 1100.034035][ T4285] batman_adv: batadv0: Adding interface: macsec2 [ 1100.040443][ T4285] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.065764][ T4285] batman_adv: batadv0: Interface activated: macsec2 [ 1100.473651][ T4304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8660'. [ 1100.967622][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8668'. [ 1102.623588][ T4385] __nla_validate_parse: 1 callbacks suppressed [ 1102.623611][ T4385] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8690'. [ 1103.134062][ T4411] hsr0: entered allmulticast mode [ 1103.158519][ T4412] xt_hashlimit: size too large, truncated to 1048576 [ 1103.176349][ T4411] hsr_slave_0: entered allmulticast mode [ 1103.182076][ T4411] hsr_slave_1: entered allmulticast mode [ 1103.429039][ T4426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8707'. [ 1104.863279][ T4465] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8723'. [ 1104.974662][ T4469] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8725'. [ 1106.207346][ T4528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8752'. [ 1106.292491][ T4532] tipc: Enabling of bearer rejected, failed to enable media [ 1107.070139][ T4560] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1108.084560][ T4601] dummy0: left allmulticast mode [ 1108.428059][ T4618] C: renamed from veth1_to_team (while UP) [ 1108.460390][ T4620] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8793'. [ 1108.474699][ T4618] netlink: 'syz.3.8792': attribute type 4 has an invalid length. [ 1108.482521][ T4618] netlink: 116 bytes leftover after parsing attributes in process `syz.3.8792'. [ 1108.532951][ T4618] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1108.555775][ T4620] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8793'. [ 1108.587760][ T4620] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8793'. [ 1109.681974][ T4680] netlink: 'syz.3.8819': attribute type 1 has an invalid length. [ 1109.812475][ T4680] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1109.916935][ T4680] veth9: entered allmulticast mode [ 1109.926257][ T4680] bond6: (slave veth9): Enslaving as an active interface with an up link [ 1110.177573][ T4703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8829'. [ 1110.306230][ T4709] bridge8: port 1(erspan0) entered blocking state [ 1110.343746][ T4709] bridge8: port 1(erspan0) entered disabled state [ 1110.350448][ T4709] erspan0: entered allmulticast mode [ 1110.360410][T30222] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1110.370176][T30222] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1110.379994][T30222] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1110.435451][T30222] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1110.444610][T30222] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1110.453106][ T4709] erspan0: entered promiscuous mode [ 1110.459215][ T4709] bridge8: port 1(erspan0) entered blocking state [ 1110.465758][ T4709] bridge8: port 1(erspan0) entered forwarding state [ 1110.565386][ T5641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1110.579302][ T5641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1110.589678][ T5641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1110.604428][ T4706] vlan4: entered allmulticast mode [ 1110.659044][ T5641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1110.669203][ T5641] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1110.692782][ T4706] bridge8: entered allmulticast mode [ 1110.995470][ T4731] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8834'. [ 1111.126754][ T4731] bond5: option arp_all_targets: invalid value (52027) [ 1111.157757][ T4731] bond5 (unregistering): Released all slaves [ 1112.205868][ T4772] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1112.725133][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.732445][T30222] Bluetooth: hci4: command tx timeout [ 1112.788876][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.796810][ T4710] bridge_slave_0: entered allmulticast mode [ 1112.827902][ T4710] bridge_slave_0: entered promiscuous mode [ 1112.840584][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.876986][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.897299][ T4710] bridge_slave_1: entered allmulticast mode [ 1112.913074][ T4710] bridge_slave_1: entered promiscuous mode [ 1112.978027][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.996128][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.045896][ T4814] syzkaller0: mtu greater than device maximum [ 1113.120379][ T4710] team0: Port device team_slave_0 added [ 1113.209691][ T4710] team0: Port device team_slave_1 added [ 1113.221365][ T4822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8869'. [ 1113.259369][ T4824] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 1113.310583][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1113.318248][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.345566][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1113.361499][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.374511][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.403473][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.493892][ T4710] hsr_slave_0: entered promiscuous mode [ 1113.501478][ T4710] hsr_slave_1: entered promiscuous mode [ 1113.695885][ T4841] netlink: 15 bytes leftover after parsing attributes in process `syz.2.8877'. [ 1114.106266][ T6128] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 1114.170287][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 1114.273305][ T4861] batman_adv: batadv0: Interface deactivated: macsec2 [ 1114.289672][ T4871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8890'. [ 1114.303031][ T4861] batman_adv: batadv0: Removing interface: macsec2 [ 1114.484123][ T6128] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 1114.520861][ T6128] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 1114.560754][ T81] batadv2: left allmulticast mode [ 1114.565913][ T81] batadv2: left promiscuous mode [ 1114.571097][ T81] bridge0: port 2(batadv2) entered disabled state [ 1114.586467][ T81] batadv1: left allmulticast mode [ 1114.591560][ T81] batadv1: left promiscuous mode [ 1114.596738][ T81] bridge0: port 1(batadv1) entered disabled state [ 1114.811534][T30222] Bluetooth: hci4: command tx timeout [ 1114.957672][ T81] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1115.045669][ T81] batman_adv: batadv0: Removing interface: gretap2 [ 1115.423620][ T81] team0: Port device bridge1 removed [ 1115.564428][ T4919] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8914'. [ 1115.590829][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1115.604639][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1115.615122][ T81] bond0 (unregistering): Released all slaves [ 1115.628935][ T81] bond1 (unregistering): Released all slaves [ 1115.650948][ T81] bond2 (unregistering): (slave veth7): Removing an active aggregator [ 1115.701780][ T81] bond2 (unregistering): (slave veth7): Releasing backup interface [ 1115.711205][ T81] bond2 (unregistering): Released all slaves [ 1115.738855][ T81] bond3 (unregistering): Released all slaves [ 1115.765499][ T81] bond4 (unregistering): Released all slaves [ 1115.815192][ T81] bond5 (unregistering): (slave bond6): Releasing backup interface [ 1115.824585][ T81] bond5 (unregistering): Released all slaves [ 1115.844447][ T81] bond6 (unregistering): Released all slaves [ 1115.864339][ T81] bond7 (unregistering): Released all slaves [ 1115.909580][ T81] bond8 (unregistering): (slave veth9): Releasing backup interface [ 1115.918785][ T81] bond8 (unregistering): Released all slaves [ 1115.946115][ T81] bond9 (unregistering): (slave veth11): Releasing backup interface [ 1115.971354][ T81] bond9 (unregistering): Released all slaves [ 1116.053139][ T81] bond10 (unregistering): Released all slaves [ 1116.290366][ T4710] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1116.724634][ T81] tipc: Disabling bearer [ 1116.730285][ T81] tipc: Left network mode [ 1116.860975][ T4710] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1116.894448][T30222] Bluetooth: hci4: command tx timeout [ 1117.151609][ T81] IPVS: stopping master sync thread 30154 ... [ 1117.424290][ T4710] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1117.749781][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1118.122279][ T4710] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1118.187883][ T5027] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8944'. [ 1118.517873][ T5041] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8948'. [ 1118.598019][ T5041] ip6tnl2: entered promiscuous mode [ 1118.868401][ T4710] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1118.955682][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1118.974498][T30222] Bluetooth: hci4: command tx timeout [ 1118.990382][ T4710] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1119.126511][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1119.145479][ T4710] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1119.184561][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1119.336986][ T4710] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1119.382053][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1119.425336][ T5078] syzkaller0: entered promiscuous mode [ 1123.174341][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1123.302869][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 1123.364214][ T5148] syzkaller0: entered promiscuous mode [ 1123.371174][ T5148] syzkaller0: entered allmulticast mode [ 1123.393242][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.400456][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1123.457268][ T5150] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8979'. [ 1123.480618][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.487820][ T6128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1123.712709][ T5162] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 1124.402694][ T5194] FAULT_INJECTION: forcing a failure. [ 1124.402694][ T5194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1124.440204][ T5194] CPU: 1 UID: 0 PID: 5194 Comm: syz.3.8993 Not tainted syzkaller #0 PREEMPT(full) [ 1124.440236][ T5194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1124.440250][ T5194] Call Trace: [ 1124.440259][ T5194] [ 1124.440269][ T5194] dump_stack_lvl+0xe8/0x150 [ 1124.440303][ T5194] should_fail_ex+0x40c/0x560 [ 1124.440347][ T5194] _copy_from_iter+0x1d3/0x1660 [ 1124.440374][ T5194] ? rcu_is_watching+0x15/0xb0 [ 1124.440419][ T5194] ? __pfx__copy_from_iter+0x10/0x10 [ 1124.440440][ T5194] ? __kmalloc_node_track_caller_noprof+0x4f5/0x7b0 [ 1124.440482][ T5194] ? netlink_sendmsg+0x650/0xb40 [ 1124.440508][ T5194] ? skb_put+0x112/0x210 [ 1124.440532][ T5194] netlink_sendmsg+0x6c0/0xb40 [ 1124.440565][ T5194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1124.440594][ T5194] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1124.440628][ T5194] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1124.440656][ T5194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1124.440682][ T5194] ____sys_sendmsg+0x9b9/0xa20 [ 1124.440705][ T5194] ? __might_fault+0xaf/0x130 [ 1124.440747][ T5194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1124.440778][ T5194] ? import_iovec+0x73/0xa0 [ 1124.440806][ T5194] ___sys_sendmsg+0x2a5/0x360 [ 1124.440828][ T5194] ? __lock_acquire+0x683/0x2cd0 [ 1124.440855][ T5194] ? __pfx____sys_sendmsg+0x10/0x10 [ 1124.440917][ T5194] ? __fget_files+0x2a/0x420 [ 1124.440947][ T5194] ? __fget_files+0x3a2/0x420 [ 1124.440984][ T5194] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1124.441010][ T5194] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1124.441044][ T5194] ? __pfx_ksys_write+0x10/0x10 [ 1124.441085][ T5194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.441109][ T5194] do_syscall_64+0x174/0x580 [ 1124.441134][ T5194] ? trace_irq_disable+0x3b/0x140 [ 1124.441167][ T5194] ? clear_bhb_loop+0x40/0x90 [ 1124.441194][ T5194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.441214][ T5194] RIP: 0033:0x7f939a59ce59 [ 1124.441235][ T5194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1124.441254][ T5194] RSP: 002b:00007f939b405028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1124.441278][ T5194] RAX: ffffffffffffffda RBX: 00007f939a815fa0 RCX: 00007f939a59ce59 [ 1124.441293][ T5194] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1124.441306][ T5194] RBP: 00007f939b405090 R08: 0000000000000000 R09: 0000000000000000 [ 1124.441320][ T5194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.441332][ T5194] R13: 00007f939a816038 R14: 00007f939a815fa0 R15: 00007ffec1e6bfd8 [ 1124.441367][ T5194] [ 1124.749997][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.763890][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.076739][ T5211] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8997'. [ 1125.374879][ T81] team0 (unregistering): Port device team_slave_1 removed [ 1125.409827][ T81] team0 (unregistering): Port device team_slave_0 removed [ 1125.809855][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.992223][ T4710] veth0_vlan: entered promiscuous mode [ 1126.019368][ T4710] veth1_vlan: entered promiscuous mode [ 1126.306501][ T4710] veth0_macvtap: entered promiscuous mode [ 1126.335781][ T4710] veth1_macvtap: entered promiscuous mode [ 1126.398603][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1126.445833][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1126.517184][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.546309][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.631154][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.639965][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.794094][ T5290] netlink: 388 bytes leftover after parsing attributes in process `syz.4.9030'. [ 1126.880876][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.904233][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1127.009484][ T6653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1127.038968][ T6653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1127.279408][ T5308] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9039'. [ 1127.333233][T16827] IPVS: starting estimator thread 0... [ 1127.387191][ T5313] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 1127.612756][ T5314] IPVS: using max 31 ests per chain, 74400 per kthread [ 1127.984360][ T5340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9049'. [ 1127.993629][ T5340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9049'. [ 1128.002856][ T5340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9049'. [ 1128.077691][ T5340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9049'. [ 1128.087181][ T5340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9049'. [ 1128.096464][ T5340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9049'. [ 1128.252846][ T5641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1128.302847][ T5641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1128.313654][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1128.334713][ T5641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1128.348687][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1128.363035][ T81] IPVS: stop unused estimator thread 0... [ 1128.375243][ T5348] netlink: 'syz.1.9052': attribute type 6 has an invalid length. [ 1128.650431][ T5361] __nla_validate_parse: 27 callbacks suppressed [ 1128.650456][ T5361] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9056'. [ 1129.863404][ T5422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9076'. [ 1130.078565][ T5436] netlink: 'syz.1.9081': attribute type 13 has an invalid length. [ 1130.121672][ T5439] netlink: 'syz.1.9081': attribute type 13 has an invalid length. [ 1130.493387][ T5641] Bluetooth: hci1: command tx timeout [ 1130.557698][ T81] bond0: (slave netdevsim1): Releasing backup interface [ 1130.682599][ T5345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.689779][ T5345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.697510][ T5345] bridge_slave_0: entered allmulticast mode [ 1130.704862][ T5345] bridge_slave_0: entered promiscuous mode [ 1130.713137][ T5345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.734005][ T5345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.742382][ T5345] bridge_slave_1: entered allmulticast mode [ 1130.749804][ T5345] bridge_slave_1: entered promiscuous mode [ 1130.779255][ T5345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1130.791822][ T5345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1130.824971][ T5345] team0: Port device team_slave_0 added [ 1130.834418][ T5345] team0: Port device team_slave_1 added [ 1130.866476][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.873769][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.900429][ T5345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.913386][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.920359][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.948707][ T5345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1131.003326][ T5345] hsr_slave_0: entered promiscuous mode [ 1131.009810][ T5345] hsr_slave_1: entered promiscuous mode [ 1131.016729][ T5345] debugfs: 'hsr0' already exists in 'hsr' [ 1131.022749][ T5345] Cannot create hsr debugfs directory [ 1131.098688][ T35] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 1131.161975][ T6653] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 1131.217961][ T35] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 1131.280593][ T1030] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 1131.660876][ T81] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 1131.669084][ T81] bridge2 (unregistering): left promiscuous mode [ 1131.676002][ T81] bridge2 (unregistering): left allmulticast mode [ 1131.725075][ T81] bond0 (unregistering): Released all slaves [ 1131.758870][ T81] bond1 (unregistering): Released all slaves [ 1131.777101][ T81] bond2 (unregistering): Released all slaves [ 1131.793133][ T81] bond3 (unregistering): Released all slaves [ 1131.808423][ T81] bond4 (unregistering): Released all slaves [ 1131.870163][ T5345] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1132.042026][ T81] tipc: Disabling bearer [ 1132.049805][ T81] tipc: Disabling bearer [ 1132.057127][ T81] tipc: Left network mode [ 1132.110306][ T5345] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1132.205541][ T5345] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1132.428580][ T5345] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1132.571159][ T5641] Bluetooth: hci1: command tx timeout [ 1132.957972][ T5345] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1132.985929][ T5345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1132.999062][ T5345] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1133.026991][ T5345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1133.047070][ T5345] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1133.061440][ T5345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1133.069630][ T5345] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1133.090505][ T5345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1133.196583][ T5345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.225887][ T5345] 8021q: adding VLAN 0 to HW filter on device team0 [ 1133.242635][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.249789][ T6653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.270240][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.277430][ T6128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.798153][ T5345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1133.899176][ T81] hsr_slave_0: left promiscuous mode [ 1133.906742][ T81] hsr_slave_1: left promiscuous mode [ 1134.360366][ T5345] veth0_vlan: entered promiscuous mode [ 1134.375337][ T5345] veth1_vlan: entered promiscuous mode [ 1134.420415][ T5345] veth0_macvtap: entered promiscuous mode [ 1134.432597][ T5345] veth1_macvtap: entered promiscuous mode [ 1134.449864][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.469570][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.482988][ T6128] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.494118][ T6128] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.505398][ T6128] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.516934][ T6128] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.651248][ T5641] Bluetooth: hci1: command tx timeout [ 1134.659490][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.673869][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.723445][ T6128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.738418][ T6128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.809598][ T5514] FAULT_INJECTION: forcing a failure. [ 1134.809598][ T5514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1134.823604][ T5514] CPU: 0 UID: 0 PID: 5514 Comm: syz.4.9048 Not tainted syzkaller #0 PREEMPT(full) [ 1134.823632][ T5514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1134.823646][ T5514] Call Trace: [ 1134.823654][ T5514] [ 1134.823663][ T5514] dump_stack_lvl+0xe8/0x150 [ 1134.823711][ T5514] should_fail_ex+0x40c/0x560 [ 1134.823751][ T5514] _copy_from_user+0x2d/0xb0 [ 1134.823782][ T5514] sock_do_ioctl+0x195/0x320 [ 1134.823804][ T5514] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1134.823821][ T5514] ? hook_file_ioctl+0x1f0/0x5c0 [ 1134.823854][ T5514] sock_ioctl+0x57a/0x7e0 [ 1134.823873][ T5514] ? __pfx_sock_ioctl+0x10/0x10 [ 1134.823892][ T5514] ? __fget_files+0x2a/0x420 [ 1134.823909][ T5514] ? __fget_files+0x3a2/0x420 [ 1134.823926][ T5514] ? __fget_files+0x2a/0x420 [ 1134.823946][ T5514] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1134.823968][ T5514] ? __pfx_sock_ioctl+0x10/0x10 [ 1134.823986][ T5514] __se_sys_ioctl+0xfc/0x170 [ 1134.824008][ T5514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.824025][ T5514] do_syscall_64+0x174/0x580 [ 1134.824041][ T5514] ? trace_irq_disable+0x3b/0x140 [ 1134.824062][ T5514] ? clear_bhb_loop+0x40/0x90 [ 1134.824081][ T5514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.824095][ T5514] RIP: 0033:0x7f68e499ce59 [ 1134.824110][ T5514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.824123][ T5514] RSP: 002b:00007f68e5780028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1134.824139][ T5514] RAX: ffffffffffffffda RBX: 00007f68e4c15fa0 RCX: 00007f68e499ce59 [ 1134.824169][ T5514] RDX: 0000200000000180 RSI: 0000000000008946 RDI: 0000000000000003 [ 1134.824180][ T5514] RBP: 00007f68e5780090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.824190][ T5514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1134.824201][ T5514] R13: 00007f68e4c16038 R14: 00007f68e4c15fa0 R15: 00007ffc1799aef8 [ 1134.824226][ T5514] [ 1136.731152][ T5641] Bluetooth: hci1: command tx timeout [ 1156.637209][T30222] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1156.653637][T30222] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1156.667237][T30222] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1156.676848][T30222] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1156.684958][T30222] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1157.010545][ T46] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1157.168416][ T5554] FAULT_INJECTION: forcing a failure. [ 1157.168416][ T5554] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.220088][ T5554] CPU: 0 UID: 0 PID: 5554 Comm: syz.3.9100 Not tainted syzkaller #0 PREEMPT(full) [ 1157.220119][ T5554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1157.220134][ T5554] Call Trace: [ 1157.220143][ T5554] [ 1157.220154][ T5554] dump_stack_lvl+0xe8/0x150 [ 1157.220187][ T5554] should_fail_ex+0x40c/0x560 [ 1157.220229][ T5554] should_failslab+0xa8/0x100 [ 1157.220268][ T5554] __kmalloc_cache_noprof+0x88/0x660 [ 1157.220300][ T5554] ? lockdep_hardirqs_on+0x7a/0x110 [ 1157.220326][ T5554] ? __request_module+0x2d0/0x630 [ 1157.220358][ T5554] __request_module+0x2d0/0x630 [ 1157.220391][ T5554] ? __pfx___request_module+0x10/0x10 [ 1157.220416][ T5554] ? kasan_quarantine_put+0xbb/0x1f0 [ 1157.220461][ T5554] ? security_capable+0x7e/0x2c0 [ 1157.220499][ T5554] ? dev_load+0x21/0x1f0 [ 1157.220649][ T5554] dev_load+0x190/0x1f0 [ 1157.220684][ T5554] dev_ioctl+0x384/0x1150 [ 1157.220721][ T5554] sock_do_ioctl+0x23e/0x320 [ 1157.220755][ T5554] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1157.220782][ T5554] ? hook_file_ioctl+0x1f0/0x5c0 [ 1157.220831][ T5554] sock_ioctl+0x57a/0x7e0 [ 1157.220862][ T5554] ? __pfx_sock_ioctl+0x10/0x10 [ 1157.220891][ T5554] ? __fget_files+0x2a/0x420 [ 1157.220918][ T5554] ? __fget_files+0x3a2/0x420 [ 1157.220943][ T5554] ? __fget_files+0x2a/0x420 [ 1157.220980][ T5554] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1157.221013][ T5554] ? __pfx_sock_ioctl+0x10/0x10 [ 1157.221042][ T5554] __se_sys_ioctl+0xfc/0x170 [ 1157.221075][ T5554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.221100][ T5554] do_syscall_64+0x174/0x580 [ 1157.221124][ T5554] ? trace_irq_disable+0x3b/0x140 [ 1157.221157][ T5554] ? clear_bhb_loop+0x40/0x90 [ 1157.221185][ T5554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.221209][ T5554] RIP: 0033:0x7f939a59ce59 [ 1157.221230][ T5554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.221251][ T5554] RSP: 002b:00007f939b405028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1157.221276][ T5554] RAX: ffffffffffffffda RBX: 00007f939a815fa0 RCX: 00007f939a59ce59 [ 1157.221293][ T5554] RDX: 0000200000000180 RSI: 0000000000008946 RDI: 0000000000000003 [ 1157.221308][ T5554] RBP: 00007f939b405090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.221323][ T5554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1157.221337][ T5554] R13: 00007f939a816038 R14: 00007f939a815fa0 R15: 00007ffec1e6bfd8 [ 1157.221373][ T5554] [ 1157.604112][T26904] syz_tun (unregistering): left allmulticast mode [ 1157.621292][ T46] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1157.696829][ T1132] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1157.992359][ T5576] syzkaller0: entered promiscuous mode [ 1158.005716][ T5576] syzkaller0: entered allmulticast mode [ 1158.522912][ T5603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9112'. [ 1158.668610][ T5609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9115'. [ 1158.678674][ T5609] netlink: 'syz.4.9115': attribute type 30 has an invalid length. [ 1158.721418][ T5611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9115'. [ 1158.748106][ T5611] netlink: 'syz.4.9115': attribute type 30 has an invalid length. [ 1158.799749][ T6128] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1158.808942][ T6653] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1158.826947][ T6653] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1158.876279][T30222] Bluetooth: hci5: command tx timeout [ 1158.919497][ T6128] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1158.928293][ T6128] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1158.937032][ T6128] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1159.034752][ T5626] netlink: 'syz.4.9119': attribute type 4 has an invalid length. [ 1159.169410][ T5534] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.178432][ T5534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.185714][ T5534] bridge_slave_0: entered allmulticast mode [ 1159.213294][ T5534] bridge_slave_0: entered promiscuous mode [ 1159.254763][ T5534] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.261960][ T5534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.269241][ T5534] bridge_slave_1: entered allmulticast mode [ 1159.277064][ T5534] bridge_slave_1: entered promiscuous mode [ 1159.411373][ T5534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1159.456094][ T5534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.498015][ T5534] team0: Port device team_slave_0 added [ 1159.506745][ T5534] team0: Port device team_slave_1 added [ 1159.649449][ T5534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1159.677875][ T5534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.733805][ T5534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1159.772945][T16836] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1159.865487][ T5534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.872497][ T5534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.900796][ T5656] FAULT_INJECTION: forcing a failure. [ 1159.900796][ T5656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1159.950833][ T5534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.961749][ T5656] CPU: 0 UID: 0 PID: 5656 Comm: syz.2.9128 Not tainted syzkaller #0 PREEMPT(full) [ 1159.961779][ T5656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1159.961792][ T5656] Call Trace: [ 1159.961800][ T5656] [ 1159.961809][ T5656] dump_stack_lvl+0xe8/0x150 [ 1159.961841][ T5656] should_fail_ex+0x40c/0x560 [ 1159.961880][ T5656] _copy_to_user+0x31/0xb0 [ 1159.961917][ T5656] simple_read_from_buffer+0xe1/0x170 [ 1159.961953][ T5656] proc_fail_nth_read+0x1bb/0x230 [ 1159.962000][ T5656] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1159.962033][ T5656] ? rw_verify_area+0x24a/0x4c0 [ 1159.962062][ T5656] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1159.962088][ T5656] vfs_read+0x213/0xa80 [ 1159.962121][ T5656] ? __pfx___mutex_lock+0x10/0x10 [ 1159.962147][ T5656] ? __pfx_vfs_read+0x10/0x10 [ 1159.962179][ T5656] ? __fget_files+0x2a/0x420 [ 1159.962207][ T5656] ? __fget_files+0x3a2/0x420 [ 1159.962233][ T5656] ? __fget_files+0x2a/0x420 [ 1159.962269][ T5656] ksys_read+0x150/0x270 [ 1159.962303][ T5656] ? __pfx_ksys_read+0x10/0x10 [ 1159.962343][ T5656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.962367][ T5656] do_syscall_64+0x174/0x580 [ 1159.962390][ T5656] ? trace_irq_disable+0x3b/0x140 [ 1159.962422][ T5656] ? clear_bhb_loop+0x40/0x90 [ 1159.962450][ T5656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.962471][ T5656] RIP: 0033:0x7f397e95d68e [ 1159.962491][ T5656] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1159.962511][ T5656] RSP: 002b:00007f397f8ecfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1159.962533][ T5656] RAX: ffffffffffffffda RBX: 00007f397f8ed6c0 RCX: 00007f397e95d68e [ 1159.962549][ T5656] RDX: 000000000000000f RSI: 00007f397f8ed0a0 RDI: 0000000000000004 [ 1159.962564][ T5656] RBP: 00007f397f8ed090 R08: 0000000000000000 R09: 0000000000000000 [ 1159.962577][ T5656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1159.962590][ T5656] R13: 00007f397ec16038 R14: 00007f397ec15fa0 R15: 00007ffd3b6db568 [ 1159.962624][ T5656] [ 1160.389580][ T5534] hsr_slave_0: entered promiscuous mode [ 1160.396448][ T5534] hsr_slave_1: entered promiscuous mode [ 1160.402887][ T5534] debugfs: 'hsr0' already exists in 'hsr' [ 1160.408661][ T5534] Cannot create hsr debugfs directory [ 1160.577982][ T6653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.595458][ T6653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.634081][ T5675] FAULT_INJECTION: forcing a failure. [ 1160.634081][ T5675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1160.649344][ T5675] CPU: 1 UID: 0 PID: 5675 Comm: syz.2.9136 Not tainted syzkaller #0 PREEMPT(full) [ 1160.649379][ T5675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1160.649393][ T5675] Call Trace: [ 1160.649402][ T5675] [ 1160.649412][ T5675] dump_stack_lvl+0xe8/0x150 [ 1160.649444][ T5675] should_fail_ex+0x40c/0x560 [ 1160.649487][ T5675] _copy_from_iter+0x1d3/0x1660 [ 1160.649515][ T5675] ? rcu_is_watching+0x15/0xb0 [ 1160.649547][ T5675] ? __pfx__copy_from_iter+0x10/0x10 [ 1160.649567][ T5675] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 1160.649613][ T5675] ? netlink_sendmsg+0x650/0xb40 [ 1160.649638][ T5675] ? skb_put+0x112/0x210 [ 1160.649663][ T5675] netlink_sendmsg+0x6c0/0xb40 [ 1160.649699][ T5675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1160.649728][ T5675] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1160.649763][ T5675] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1160.649792][ T5675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1160.649819][ T5675] ____sys_sendmsg+0x9b9/0xa20 [ 1160.649844][ T5675] ? __might_fault+0xaf/0x130 [ 1160.649879][ T5675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1160.649913][ T5675] ? import_iovec+0x73/0xa0 [ 1160.649943][ T5675] ___sys_sendmsg+0x2a5/0x360 [ 1160.649965][ T5675] ? __lock_acquire+0x683/0x2cd0 [ 1160.649994][ T5675] ? __pfx____sys_sendmsg+0x10/0x10 [ 1160.650060][ T5675] ? __fget_files+0x2a/0x420 [ 1160.650087][ T5675] ? __fget_files+0x3a2/0x420 [ 1160.650126][ T5675] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1160.650153][ T5675] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1160.650188][ T5675] ? __pfx_ksys_write+0x10/0x10 [ 1160.650230][ T5675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.650254][ T5675] do_syscall_64+0x174/0x580 [ 1160.650278][ T5675] ? trace_irq_disable+0x3b/0x140 [ 1160.650311][ T5675] ? clear_bhb_loop+0x40/0x90 [ 1160.650344][ T5675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.650367][ T5675] RIP: 0033:0x7f397e99ce59 [ 1160.650387][ T5675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.650407][ T5675] RSP: 002b:00007f397f8ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1160.650430][ T5675] RAX: ffffffffffffffda RBX: 00007f397ec15fa0 RCX: 00007f397e99ce59 [ 1160.650446][ T5675] RDX: 0000000000024000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1160.650461][ T5675] RBP: 00007f397f8ed090 R08: 0000000000000000 R09: 0000000000000000 [ 1160.650475][ T5675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1160.650488][ T5675] R13: 00007f397ec16038 R14: 00007f397ec15fa0 R15: 00007ffd3b6db568 [ 1160.650524][ T5675] [ 1160.928926][T30222] Bluetooth: hci5: command tx timeout [ 1160.965721][ T5672] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9135'. [ 1161.073042][ T5534] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1161.096342][ T5534] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.106144][ T5534] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 57084 - 0 [ 1161.487469][ T5534] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1161.528782][ T5534] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.569250][ T5534] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 57084 - 0 [ 1161.638596][ T5706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9143'. [ 1161.647626][ T5706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9143'. [ 1161.726812][ T5534] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1161.736592][ T5534] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.746417][ T5534] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 57084 - 0 [ 1161.944927][ T5534] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1161.955247][ T5534] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.965455][ T5534] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 57084 - 0 [ 1162.098953][ T5718] tipc: Enabling of bearer rejected, already enabled [ 1162.109464][ T5718] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 1162.526916][ T5534] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1162.540605][ T5534] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1162.558838][ T5534] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1162.571197][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1162.598186][ T5534] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1162.640078][ T5534] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1162.663454][ T5534] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1162.674375][ T5741] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 1162.684595][ T5534] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1162.758137][ T5534] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1162.966375][ T5756] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9159'. [ 1162.978868][ T5756] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9159'. [ 1162.988492][ T5756] netlink: 'syz.2.9159': attribute type 4 has an invalid length. [ 1163.071525][T30222] Bluetooth: hci5: command tx timeout [ 1163.088254][ T5534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1163.222266][ T5534] 8021q: adding VLAN 0 to HW filter on device team0 [ 1163.269955][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.277172][ T6653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1163.313586][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.320781][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1163.634887][ T5784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9170'. [ 1163.977958][ T5807] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 1164.867197][ T5534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.022670][ T5534] veth0_vlan: entered promiscuous mode [ 1165.057937][ T5534] veth1_vlan: entered promiscuous mode [ 1165.147766][ T5534] veth0_macvtap: entered promiscuous mode [ 1165.167310][T30222] Bluetooth: hci5: command tx timeout [ 1165.198792][ T5534] veth1_macvtap: entered promiscuous mode [ 1165.271193][ T5534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1165.323986][ T5534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1165.378769][ T81] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.411730][ T5841] FAULT_INJECTION: forcing a failure. [ 1165.411730][ T5841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1165.466997][ T81] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.484449][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: syz.2.9187 Not tainted syzkaller #0 PREEMPT(full) [ 1165.484481][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1165.484495][ T5841] Call Trace: [ 1165.484505][ T5841] [ 1165.484516][ T5841] dump_stack_lvl+0xe8/0x150 [ 1165.484547][ T5841] should_fail_ex+0x40c/0x560 [ 1165.484588][ T5841] _copy_from_user+0x2d/0xb0 [ 1165.484613][ T5841] __sys_sendto+0x2b0/0x710 [ 1165.484723][ T5841] ? __pfx___sys_sendto+0x10/0x10 [ 1165.484753][ T5841] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1165.484792][ T5841] ? __fget_files+0x3a2/0x420 [ 1165.484828][ T5841] ? ksys_write+0x242/0x270 [ 1165.484860][ T5841] ? __pfx_ksys_write+0x10/0x10 [ 1165.484895][ T5841] __x64_sys_sendto+0xde/0x100 [ 1165.484927][ T5841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.484949][ T5841] do_syscall_64+0x174/0x580 [ 1165.484970][ T5841] ? trace_irq_disable+0x3b/0x140 [ 1165.485000][ T5841] ? clear_bhb_loop+0x40/0x90 [ 1165.485025][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.485049][ T5841] RIP: 0033:0x7f397e99ce59 [ 1165.485068][ T5841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1165.485086][ T5841] RSP: 002b:00007f397f8ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1165.485108][ T5841] RAX: ffffffffffffffda RBX: 00007f397ec15fa0 RCX: 00007f397e99ce59 [ 1165.485123][ T5841] RDX: 000000000000e955 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1165.485136][ T5841] RBP: 00007f397f8ed090 R08: 0000200000000540 R09: 0000000000000014 [ 1165.485150][ T5841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1165.485163][ T5841] R13: 00007f397ec16038 R14: 00007f397ec15fa0 R15: 00007ffd3b6db568 [ 1165.485195][ T5841] [ 1165.809809][T19015] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.833440][T19015] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.850683][ T1030] tipc: Subscription rejected, illegal request [ 1166.138359][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.146984][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.527013][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.535015][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.268240][T30222] Bluetooth: hci5: command tx timeout [ 1167.532226][ T5641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1167.544364][ T5641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1167.552494][ T5641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1167.600452][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1167.610534][ T5641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1167.614970][ T5876] netlink: 'syz.0.9199': attribute type 21 has an invalid length. [ 1168.320944][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.997892][ T5915] FAULT_INJECTION: forcing a failure. [ 1168.997892][ T5915] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.071188][ T5915] CPU: 1 UID: 0 PID: 5915 Comm: syz.1.9210 Not tainted syzkaller #0 PREEMPT(full) [ 1169.071220][ T5915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1169.071235][ T5915] Call Trace: [ 1169.071244][ T5915] [ 1169.071254][ T5915] dump_stack_lvl+0xe8/0x150 [ 1169.071288][ T5915] should_fail_ex+0x40c/0x560 [ 1169.071329][ T5915] should_failslab+0xa8/0x100 [ 1169.071368][ T5915] __kvmalloc_node_noprof+0x16e/0x890 [ 1169.071404][ T5915] ? xp_create_and_assign_umem+0xab/0xd10 [ 1169.071529][ T5915] ? xsk_bind+0x331/0x1290 [ 1169.071592][ T5915] xp_create_and_assign_umem+0xab/0xd10 [ 1169.071625][ T5915] ? dev_get_by_index+0x22/0x2d0 [ 1169.071654][ T5915] ? dev_get_by_index+0x22/0x2d0 [ 1169.071680][ T5915] ? dev_get_by_index+0x22/0x2d0 [ 1169.071714][ T5915] xsk_bind+0x47a/0x1290 [ 1169.071759][ T5915] __sys_bind+0x2e3/0x410 [ 1169.071795][ T5915] ? __pfx___sys_bind+0x10/0x10 [ 1169.071842][ T5915] ? __pfx_ksys_write+0x10/0x10 [ 1169.071881][ T5915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.071907][ T5915] __x64_sys_bind+0x7a/0x90 [ 1169.071942][ T5915] do_syscall_64+0x174/0x580 [ 1169.071966][ T5915] ? trace_irq_disable+0x3b/0x140 [ 1169.072000][ T5915] ? clear_bhb_loop+0x40/0x90 [ 1169.072029][ T5915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.072051][ T5915] RIP: 0033:0x7fea4a99ce59 [ 1169.072073][ T5915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1169.072093][ T5915] RSP: 002b:00007fea4b85c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1169.072116][ T5915] RAX: ffffffffffffffda RBX: 00007fea4ac15fa0 RCX: 00007fea4a99ce59 [ 1169.072133][ T5915] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1169.072147][ T5915] RBP: 00007fea4b85c090 R08: 0000000000000000 R09: 0000000000000000 [ 1169.072161][ T5915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.072174][ T5915] R13: 00007fea4ac16038 R14: 00007fea4ac15fa0 R15: 00007fff3c8ffb78 [ 1169.072212][ T5915] [ 1169.528458][ T5924] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9214'. [ 1169.691112][T30222] Bluetooth: hci3: command tx timeout [ 1169.902532][ T5937] batadv0: entered promiscuous mode [ 1169.944420][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9219'. [ 1169.967128][ T5937] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1170.387434][ T5959] batadv_slave_0: entered promiscuous mode [ 1170.507963][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.516748][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.524395][ T5877] bridge_slave_0: entered allmulticast mode [ 1170.532898][ T5877] bridge_slave_0: entered promiscuous mode [ 1170.548049][ T5975] FAULT_INJECTION: forcing a failure. [ 1170.548049][ T5975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1170.562650][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.570440][ T5975] CPU: 1 UID: 0 PID: 5975 Comm: syz.1.9227 Not tainted syzkaller #0 PREEMPT(full) [ 1170.570469][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1170.570482][ T5975] Call Trace: [ 1170.570490][ T5975] [ 1170.570499][ T5975] dump_stack_lvl+0xe8/0x150 [ 1170.570530][ T5975] should_fail_ex+0x40c/0x560 [ 1170.570570][ T5975] _copy_to_user+0x31/0xb0 [ 1170.570598][ T5975] simple_read_from_buffer+0xe1/0x170 [ 1170.570631][ T5975] proc_fail_nth_read+0x1bb/0x230 [ 1170.570663][ T5975] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1170.570712][ T5975] ? rw_verify_area+0x24a/0x4c0 [ 1170.570755][ T5975] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1170.570783][ T5975] vfs_read+0x213/0xa80 [ 1170.570821][ T5975] ? __pfx___mutex_lock+0x10/0x10 [ 1170.570848][ T5975] ? __pfx_vfs_read+0x10/0x10 [ 1170.570882][ T5975] ? __fget_files+0x2a/0x420 [ 1170.570918][ T5975] ? __fget_files+0x3a2/0x420 [ 1170.570944][ T5975] ? __fget_files+0x2a/0x420 [ 1170.570982][ T5975] ksys_read+0x150/0x270 [ 1170.571015][ T5975] ? __pfx_ksys_read+0x10/0x10 [ 1170.571056][ T5975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.571079][ T5975] do_syscall_64+0x174/0x580 [ 1170.571102][ T5975] ? trace_irq_disable+0x3b/0x140 [ 1170.571133][ T5975] ? clear_bhb_loop+0x40/0x90 [ 1170.571160][ T5975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.571183][ T5975] RIP: 0033:0x7fea4a95d68e [ 1170.571203][ T5975] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1170.571223][ T5975] RSP: 002b:00007fea4b85bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1170.571246][ T5975] RAX: ffffffffffffffda RBX: 00007fea4b85c6c0 RCX: 00007fea4a95d68e [ 1170.571263][ T5975] RDX: 000000000000000f RSI: 00007fea4b85c0a0 RDI: 0000000000000004 [ 1170.571277][ T5975] RBP: 00007fea4b85c090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.571291][ T5975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.571304][ T5975] R13: 00007fea4ac16038 R14: 00007fea4ac15fa0 R15: 00007fff3c8ffb78 [ 1170.571340][ T5975] [ 1170.781915][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.789247][ T5877] bridge_slave_1: entered allmulticast mode [ 1170.797165][ T5877] bridge_slave_1: entered promiscuous mode [ 1170.811561][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1170.857301][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1170.870460][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1170.912830][ T5877] team0: Port device team_slave_0 added [ 1170.922022][ T5877] team0: Port device team_slave_1 added [ 1170.967199][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1170.974505][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1171.001638][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1171.015549][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1171.022947][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1171.049141][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1171.125458][ T5877] hsr_slave_0: entered promiscuous mode [ 1171.138322][ T5877] hsr_slave_1: entered promiscuous mode [ 1171.155726][ T5877] debugfs: 'hsr0' already exists in 'hsr' [ 1171.167139][ T5877] Cannot create hsr debugfs directory [ 1171.182770][ T5956] batadv_slave_0: left promiscuous mode [ 1171.521053][ T5992] netlink: 17 bytes leftover after parsing attributes in process `syz.1.9234'. [ 1171.851776][T30222] Bluetooth: hci3: command tx timeout [ 1171.909043][ T5998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9237'. [ 1172.310341][ T46] IPVS: starting estimator thread 0... [ 1172.401809][ T6017] IPVS: using max 30 ests per chain, 72000 per kthread [ 1172.664531][ T6032] geneve2: entered promiscuous mode [ 1173.931702][T30222] Bluetooth: hci3: command tx timeout [ 1173.975122][ T6068] netlink: 'syz.3.9269': attribute type 11 has an invalid length. [ 1174.039008][ T5877] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1174.061390][ T5877] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1174.122994][ T5877] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1174.156751][ T5877] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1174.211616][ T5877] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1174.254683][ T5877] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1174.278243][ T5877] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1174.333182][ T5877] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1174.541281][ T6083] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9272'. [ 1174.561879][ T6078] syzkaller0: entered promiscuous mode [ 1174.567416][ T6078] syzkaller0: entered allmulticast mode [ 1174.973424][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1175.223484][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 1175.236159][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.243519][ T6653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1175.344945][ T6111] netlink: 'syz.3.9277': attribute type 1 has an invalid length. [ 1175.393551][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.400768][ T6653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1175.682584][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9279'. [ 1175.691530][ T6119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1175.929961][T16836] IPVS: starting estimator thread 0... [ 1176.011164][T30222] Bluetooth: hci3: command tx timeout [ 1176.021483][ T6125] IPVS: using max 25 ests per chain, 60000 per kthread [ 1177.344184][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1177.405740][ T5877] veth0_vlan: entered promiscuous mode [ 1177.424104][ T5877] veth1_vlan: entered promiscuous mode [ 1177.500423][ T5877] veth0_macvtap: entered promiscuous mode [ 1177.518185][ T5877] veth1_macvtap: entered promiscuous mode [ 1177.567381][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1177.609291][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1177.656424][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.707618][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.718773][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.728281][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.770843][ T6154] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9287'. [ 1177.809889][ T6155] bridge0: entered allmulticast mode [ 1178.137842][ T6128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.150841][ T6128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.228132][ T6165] netlink: 'syz.4.9292': attribute type 3 has an invalid length. [ 1178.259132][ T6653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.267115][ T6653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.607986][ T6180] netlink: 196 bytes leftover after parsing attributes in process `syz.0.9297'. [ 1178.954240][ T5641] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1179.013733][ T5641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1179.022568][ T5641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1179.032134][ T5641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1179.040668][ T5641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1179.457439][ T6198] team0: No ports can be present during mode change [ 1179.623286][ T6205] syzkaller0: entered promiscuous mode [ 1179.797190][ T6128] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1179.825311][ T6128] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.903044][ T6216] netlink: 196 bytes leftover after parsing attributes in process `syz.1.9309'. [ 1180.004033][ T6213] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9306'. [ 1180.156272][ T6128] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1180.199754][ T6128] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.506083][ T6223] tipc: Started in network mode [ 1180.519061][ T6223] tipc: Node identity 7ef01adec3a7, cluster identity 4711 [ 1180.530811][ T6223] tipc: Enabled bearer , priority 0 [ 1180.567225][ T6128] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1180.578047][ T6128] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.619554][ T6230] syzkaller0: entered promiscuous mode [ 1180.625086][ T6230] syzkaller0: entered allmulticast mode [ 1180.827470][ T6128] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1180.837625][ T6128] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.957684][ T6230] tipc: Resetting bearer [ 1181.031863][ T6222] tipc: Resetting bearer [ 1181.056542][ T6222] tipc: Disabling bearer [ 1181.131919][T30222] Bluetooth: hci0: command tx timeout [ 1181.145694][ T6244] syzkaller0: entered promiscuous mode [ 1181.337690][ T35] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 1181.453148][ T1132] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 1181.482539][ T35] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 1181.526104][ T35] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 1181.558015][ T6253] FAULT_INJECTION: forcing a failure. [ 1181.558015][ T6253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1181.571567][ T6253] CPU: 1 UID: 0 PID: 6253 Comm: syz.0.9320 Not tainted syzkaller #0 PREEMPT(full) [ 1181.571596][ T6253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1181.571610][ T6253] Call Trace: [ 1181.571620][ T6253] [ 1181.571631][ T6253] dump_stack_lvl+0xe8/0x150 [ 1181.571670][ T6253] should_fail_ex+0x40c/0x560 [ 1181.571713][ T6253] _copy_from_iter+0x1d3/0x1660 [ 1181.571741][ T6253] ? rcu_is_watching+0x15/0xb0 [ 1181.571774][ T6253] ? __pfx__copy_from_iter+0x10/0x10 [ 1181.571794][ T6253] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 1181.571835][ T6253] ? netlink_sendmsg+0x650/0xb40 [ 1181.571860][ T6253] ? skb_put+0x112/0x210 [ 1181.571884][ T6253] netlink_sendmsg+0x6c0/0xb40 [ 1181.571916][ T6253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1181.571944][ T6253] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1181.571978][ T6253] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1181.572006][ T6253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1181.572032][ T6253] ____sys_sendmsg+0x9b9/0xa20 [ 1181.572054][ T6253] ? __might_fault+0xaf/0x130 [ 1181.572087][ T6253] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1181.572118][ T6253] ? import_iovec+0x73/0xa0 [ 1181.572147][ T6253] ___sys_sendmsg+0x2a5/0x360 [ 1181.572170][ T6253] ? __lock_acquire+0x683/0x2cd0 [ 1181.572197][ T6253] ? __pfx____sys_sendmsg+0x10/0x10 [ 1181.572257][ T6253] ? __fget_files+0x2a/0x420 [ 1181.572284][ T6253] ? __fget_files+0x3a2/0x420 [ 1181.572322][ T6253] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1181.572348][ T6253] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1181.572382][ T6253] ? __pfx_ksys_write+0x10/0x10 [ 1181.572423][ T6253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.572448][ T6253] do_syscall_64+0x174/0x580 [ 1181.572473][ T6253] ? trace_irq_disable+0x3b/0x140 [ 1181.572504][ T6253] ? clear_bhb_loop+0x40/0x90 [ 1181.572529][ T6253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.572551][ T6253] RIP: 0033:0x7f1122b9ce59 [ 1181.572571][ T6253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1181.572591][ T6253] RSP: 002b:00007f1123a60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1181.572615][ T6253] RAX: ffffffffffffffda RBX: 00007f1122e15fa0 RCX: 00007f1122b9ce59 [ 1181.572632][ T6253] RDX: 00000000200088c2 RSI: 0000200000000340 RDI: 0000000000000003 [ 1181.572654][ T6253] RBP: 00007f1123a60090 R08: 0000000000000000 R09: 0000000000000000 [ 1181.572672][ T6253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1181.572684][ T6253] R13: 00007f1122e16038 R14: 00007f1122e15fa0 R15: 00007ffea5757868 [ 1181.572720][ T6253] [ 1182.234901][ T6128] erspan0: left allmulticast mode [ 1182.261475][ T6128] erspan0: left promiscuous mode [ 1182.276689][ T6128] bridge8: port 1(erspan0) entered disabled state [ 1182.418128][ T6289] netlink: 'syz.4.9328': attribute type 1 has an invalid length. [ 1183.284675][T30222] Bluetooth: hci0: command tx timeout [ 1183.443016][ T6128] bond5 (unregistering): (slave geneve3): Releasing active interface [ 1183.460682][ T6128] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1183.552317][ T6128] team0: Port device bridge4 removed [ 1183.597190][ T6128] bond0 (unregistering): Released all slaves [ 1183.610276][ T6128] bond1 (unregistering): Released all slaves [ 1183.635726][ T6128] bond2 (unregistering): Released all slaves [ 1183.651275][ T6128] bond3 (unregistering): Released all slaves [ 1183.682416][ T6128] bond4 (unregistering): Released all slaves [ 1183.701772][ T6128] bond5 (unregistering): Released all slaves [ 1183.718314][ T6128] bond6 (unregistering): (slave veth9): Releasing backup interface [ 1183.742520][ T6128] bond6 (unregistering): Released all slaves [ 1183.778605][ T6289] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1183.826754][ T6318] FAULT_INJECTION: forcing a failure. [ 1183.826754][ T6318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1183.914702][ T6309] netlink: 260 bytes leftover after parsing attributes in process `syz.1.9329'. [ 1183.924213][ T6318] CPU: 0 UID: 0 PID: 6318 Comm: syz.0.9330 Not tainted syzkaller #0 PREEMPT(full) [ 1183.924245][ T6318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1183.924259][ T6318] Call Trace: [ 1183.924268][ T6318] [ 1183.924279][ T6318] dump_stack_lvl+0xe8/0x150 [ 1183.924311][ T6318] should_fail_ex+0x40c/0x560 [ 1183.924352][ T6318] _copy_from_iter+0x1d3/0x1660 [ 1183.924380][ T6318] ? rcu_is_watching+0x15/0xb0 [ 1183.924412][ T6318] ? __pfx__copy_from_iter+0x10/0x10 [ 1183.924432][ T6318] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 1183.924473][ T6318] ? netlink_sendmsg+0x650/0xb40 [ 1183.924497][ T6318] ? skb_put+0x112/0x210 [ 1183.924521][ T6318] netlink_sendmsg+0x6c0/0xb40 [ 1183.924555][ T6318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1183.924583][ T6318] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1183.924617][ T6318] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1183.924644][ T6318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1183.924670][ T6318] ____sys_sendmsg+0x9b9/0xa20 [ 1183.924693][ T6318] ? __might_fault+0xaf/0x130 [ 1183.924727][ T6318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1183.924759][ T6318] ? import_iovec+0x73/0xa0 [ 1183.924787][ T6318] ___sys_sendmsg+0x2a5/0x360 [ 1183.924809][ T6318] ? __lock_acquire+0x683/0x2cd0 [ 1183.924836][ T6318] ? __pfx____sys_sendmsg+0x10/0x10 [ 1183.924895][ T6318] ? __fget_files+0x2a/0x420 [ 1183.924921][ T6318] ? __fget_files+0x3a2/0x420 [ 1183.924964][ T6318] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1183.924992][ T6318] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1183.925025][ T6318] ? __pfx_ksys_write+0x10/0x10 [ 1183.925065][ T6318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.925089][ T6318] do_syscall_64+0x174/0x580 [ 1183.925121][ T6318] ? trace_irq_disable+0x3b/0x140 [ 1183.925152][ T6318] ? clear_bhb_loop+0x40/0x90 [ 1183.925180][ T6318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.925202][ T6318] RIP: 0033:0x7f1122b9ce59 [ 1183.925222][ T6318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1183.925241][ T6318] RSP: 002b:00007f1123a60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1183.925282][ T6318] RAX: ffffffffffffffda RBX: 00007f1122e15fa0 RCX: 00007f1122b9ce59 [ 1183.925299][ T6318] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 1183.925313][ T6318] RBP: 00007f1123a60090 R08: 0000000000000000 R09: 0000000000000000 [ 1183.925327][ T6318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.925340][ T6318] R13: 00007f1122e16038 R14: 00007f1122e15fa0 R15: 00007ffea5757868 [ 1183.925375][ T6318] [ 1183.949267][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1184.257619][ T6320] FAULT_INJECTION: forcing a failure. [ 1184.257619][ T6320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1184.271341][ T6320] CPU: 1 UID: 0 PID: 6320 Comm: syz.0.9331 Not tainted syzkaller #0 PREEMPT(full) [ 1184.271369][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1184.271384][ T6320] Call Trace: [ 1184.271393][ T6320] [ 1184.271403][ T6320] dump_stack_lvl+0xe8/0x150 [ 1184.271442][ T6320] should_fail_ex+0x40c/0x560 [ 1184.271483][ T6320] _copy_from_user+0x2d/0xb0 [ 1184.271509][ T6320] ___sys_sendmsg+0x1c6/0x360 [ 1184.271532][ T6320] ? __lock_acquire+0x683/0x2cd0 [ 1184.271558][ T6320] ? __pfx____sys_sendmsg+0x10/0x10 [ 1184.271586][ T6320] ? kstrtouint+0x6e/0xe0 [ 1184.271645][ T6320] ? __fget_files+0x2a/0x420 [ 1184.271673][ T6320] ? __fget_files+0x3a2/0x420 [ 1184.271709][ T6320] __sys_sendmmsg+0x27c/0x4e0 [ 1184.271736][ T6320] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1184.271757][ T6320] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1184.271807][ T6320] ? ksys_write+0x242/0x270 [ 1184.271841][ T6320] ? __pfx_ksys_write+0x10/0x10 [ 1184.271880][ T6320] __x64_sys_sendmmsg+0xa0/0xc0 [ 1184.271904][ T6320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.271929][ T6320] do_syscall_64+0x174/0x580 [ 1184.271953][ T6320] ? trace_irq_disable+0x3b/0x140 [ 1184.271985][ T6320] ? clear_bhb_loop+0x40/0x90 [ 1184.272012][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.272033][ T6320] RIP: 0033:0x7f1122b9ce59 [ 1184.272054][ T6320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.272074][ T6320] RSP: 002b:00007f1123a60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1184.272098][ T6320] RAX: ffffffffffffffda RBX: 00007f1122e15fa0 RCX: 00007f1122b9ce59 [ 1184.272114][ T6320] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000004 [ 1184.272129][ T6320] RBP: 00007f1123a60090 R08: 0000000000000000 R09: 0000000000000000 [ 1184.272143][ T6320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1184.272156][ T6320] R13: 00007f1122e16038 R14: 00007f1122e15fa0 R15: 00007ffea5757868 [ 1184.272192][ T6320] [ 1184.446028][ T6128] hmac(sha2: left promiscuous mode [ 1184.691250][ T6188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.698442][ T6188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.705820][ T6188] bridge_slave_0: entered allmulticast mode [ 1184.752489][ T6188] bridge_slave_0: entered promiscuous mode [ 1184.872883][ T6323] syzkaller0: entered promiscuous mode [ 1184.885801][ T6188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.903668][ T6188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.911263][ T6188] bridge_slave_1: entered allmulticast mode [ 1184.921763][ T6188] bridge_slave_1: entered promiscuous mode [ 1185.113605][ T6343] netlink: 'syz.2.9335': attribute type 1 has an invalid length. [ 1185.313307][T30222] Bluetooth: hci0: command tx timeout [ 1186.171357][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1187.459608][T30222] Bluetooth: hci0: command tx timeout [ 1188.015595][ T6128] : left promiscuous mode [ 1188.055181][ T6355] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1188.074179][ T6355] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1188.095821][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1188.136681][ T6188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1188.195825][ T6188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1188.258780][ T6188] team0: Port device team_slave_0 added [ 1188.277976][ T6188] team0: Port device team_slave_1 added [ 1188.358149][ T6188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1188.378556][ T6188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1188.407036][ T6188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1188.422662][ T6188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1188.429873][ T6188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1188.457329][ T6374] netlink: 'syz.0.9342': attribute type 10 has an invalid length. [ 1188.473383][ T6188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1188.617393][ T6188] hsr_slave_0: entered promiscuous mode [ 1188.625274][ T6188] hsr_slave_1: entered promiscuous mode [ 1188.633110][ T6188] debugfs: 'hsr0' already exists in 'hsr' [ 1188.639065][ T6188] Cannot create hsr debugfs directory [ 1188.807268][ T6128] tipc: Disabling bearer [ 1188.821240][ T6128] tipc: Left network mode [ 1189.668636][ T6188] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1190.203424][ T6188] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1190.386556][ T6438] ip6gre1: entered promiscuous mode [ 1190.391833][ T6438] ip6gre1: entered allmulticast mode [ 1190.664023][ T6451] netlink: 79 bytes leftover after parsing attributes in process `syz.0.9362'. [ 1190.865719][ T6460] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9365'. [ 1191.023586][ T6188] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1191.663895][ T6495] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9374'. [ 1192.002180][ T6188] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1192.093634][ T6485] smc: net device lo applied user defined pnetid SYZ2 [ 1192.104729][ T6491] smc: net device lo erased user defined pnetid SYZ2 [ 1192.843248][ T6536] FAULT_INJECTION: forcing a failure. [ 1192.843248][ T6536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1192.882975][ T6536] CPU: 1 UID: 0 PID: 6536 Comm: syz.2.9384 Not tainted syzkaller #0 PREEMPT(full) [ 1192.883007][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1192.883021][ T6536] Call Trace: [ 1192.883030][ T6536] [ 1192.883040][ T6536] dump_stack_lvl+0xe8/0x150 [ 1192.883072][ T6536] should_fail_ex+0x40c/0x560 [ 1192.883114][ T6536] _copy_from_iter+0x1d3/0x1660 [ 1192.883142][ T6536] ? rcu_is_watching+0x15/0xb0 [ 1192.883175][ T6536] ? __pfx__copy_from_iter+0x10/0x10 [ 1192.883195][ T6536] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 1192.883235][ T6536] ? netlink_sendmsg+0x650/0xb40 [ 1192.883260][ T6536] ? skb_put+0x112/0x210 [ 1192.883285][ T6536] netlink_sendmsg+0x6c0/0xb40 [ 1192.883321][ T6536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1192.883349][ T6536] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1192.883383][ T6536] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1192.883418][ T6536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1192.883445][ T6536] ____sys_sendmsg+0x9b9/0xa20 [ 1192.883472][ T6536] ? __might_fault+0xaf/0x130 [ 1192.883508][ T6536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1192.883541][ T6536] ? import_iovec+0x73/0xa0 [ 1192.883571][ T6536] ___sys_sendmsg+0x2a5/0x360 [ 1192.883600][ T6536] ? __lock_acquire+0x683/0x2cd0 [ 1192.883629][ T6536] ? __pfx____sys_sendmsg+0x10/0x10 [ 1192.883690][ T6536] ? __fget_files+0x2a/0x420 [ 1192.883717][ T6536] ? __fget_files+0x3a2/0x420 [ 1192.883756][ T6536] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1192.883783][ T6536] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1192.883818][ T6536] ? __pfx_ksys_write+0x10/0x10 [ 1192.883860][ T6536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.883884][ T6536] do_syscall_64+0x174/0x580 [ 1192.883909][ T6536] ? trace_irq_disable+0x3b/0x140 [ 1192.883942][ T6536] ? clear_bhb_loop+0x40/0x90 [ 1192.883969][ T6536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.883991][ T6536] RIP: 0033:0x7f09a499ce59 [ 1192.884012][ T6536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.884032][ T6536] RSP: 002b:00007f09a5847028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1192.884055][ T6536] RAX: ffffffffffffffda RBX: 00007f09a4c15fa0 RCX: 00007f09a499ce59 [ 1192.884072][ T6536] RDX: 000000000c000802 RSI: 0000200000000000 RDI: 0000000000000004 [ 1192.884087][ T6536] RBP: 00007f09a5847090 R08: 0000000000000000 R09: 0000000000000000 [ 1192.884102][ T6536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1192.884115][ T6536] R13: 00007f09a4c16038 R14: 00007f09a4c15fa0 R15: 00007ffc52176908 [ 1192.884150][ T6536] [ 1193.198746][ T6188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1193.249903][ T6531] nbd: nbd1 already in use [ 1193.268594][ T6531] block nbd1: NBD_DISCONNECT [ 1193.273277][ T6531] block nbd1: Send disconnect failed -32 [ 1193.278955][ T6531] block nbd1: Send disconnect failed -32 [ 1193.284636][ T6531] block nbd1: shutting down sockets [ 1193.312769][ T6188] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1193.406204][ T6128] hsr_slave_0: left promiscuous mode [ 1193.482613][ T6128] hsr_slave_1: left promiscuous mode [ 1193.534530][ T6128] veth1_macvtap: left promiscuous mode [ 1193.557826][ T6128] veth0_macvtap: left promiscuous mode [ 1193.574348][ T6128] veth1_vlan: left promiscuous mode [ 1194.053998][ T6128] team0 (unregistering): Port device vlan0 removed [ 1194.486117][ T6188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1194.515978][ T6188] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1194.664036][ T6537] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1194.684182][ T6537] geneve2: left promiscuous mode [ 1194.739674][ T6555] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1194.753512][T25576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.760766][T25576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.805694][ T6188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1194.867640][ T6188] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1194.908079][ T6188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1194.955777][ T6188] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1195.016222][ T6602] netlink: 'syz.1.9393': attribute type 4 has an invalid length. [ 1195.282901][ T6612] netlink: 87 bytes leftover after parsing attributes in process `syz.4.9396'. [ 1195.308288][ T6615] netlink: 196 bytes leftover after parsing attributes in process `syz.0.9397'. [ 1195.534150][ T6128] IPVS: stop unused estimator thread 0... [ 1195.578581][ T6188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1195.718390][ T6634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9399'. [ 1195.748988][ T6617] nbd2: detected capacity change from 0 to 63 [ 1195.787894][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9395'. [ 1195.831404][ T6614] nbd: must specify an index to disconnect [ 1195.897895][T30222] block nbd2: Receive control failed (result -104) [ 1196.030106][ T6188] 8021q: adding VLAN 0 to HW filter on device team0 [ 1196.097157][ T1030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.104408][ T1030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1196.136218][ T6646] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 1196.164133][ T1030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.171386][ T1030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1196.274416][ T6651] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1196.430636][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9404'. [ 1196.526583][ T6666] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9408'. [ 1196.570887][ T6670] netlink: 188 bytes leftover after parsing attributes in process `syz.1.9409'. [ 1196.582585][ T6669] netlink: 'syz.0.9407': attribute type 29 has an invalid length. [ 1196.619577][ T6666] [ 1196.621971][ T6666] ====================================================== [ 1196.629078][ T6666] WARNING: possible circular locking dependency detected [ 1196.636198][ T6666] syzkaller #0 Not tainted [ 1196.640666][ T6666] ------------------------------------------------------ [ 1196.647764][ T6666] syz.4.9408/6666 is trying to acquire lock: [ 1196.653777][ T6666] ffff88809fff4198 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 1196.662780][ T6666] [ 1196.662780][ T6666] but task is already holding lock: [ 1196.670171][ T6666] ffff88802aa91828 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1196.679750][ T6666] [ 1196.679750][ T6666] which lock already depends on the new lock. [ 1196.679750][ T6666] [ 1196.690180][ T6666] [ 1196.690180][ T6666] the existing dependency chain (in reverse order) is: [ 1196.699232][ T6666] [ 1196.699232][ T6666] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 1196.707198][ T6666] __mutex_lock+0x19d/0x1590 [ 1196.712351][ T6666] elevator_change+0x1af/0x480 [ 1196.717674][ T6666] elevator_set_none+0xb5/0x140 [ 1196.723084][ T6666] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1196.729541][ T6666] nbd_start_device+0x189/0xb30 [ 1196.735043][ T6666] nbd_genl_connect+0x1597/0x1c10 [ 1196.740614][ T6666] genl_family_rcv_msg_doit+0x233/0x340 [ 1196.746714][ T6666] genl_rcv_msg+0x614/0x7a0 [ 1196.751766][ T6666] netlink_rcv_skb+0x226/0x4a0 [ 1196.757071][ T6666] genl_rcv+0x28/0x40 [ 1196.761595][ T6666] netlink_unicast+0x7bb/0x940 [ 1196.766910][ T6666] netlink_sendmsg+0x813/0xb40 [ 1196.772212][ T6666] ____sys_sendmsg+0x9b9/0xa20 [ 1196.777511][ T6666] ___sys_sendmsg+0x2a5/0x360 [ 1196.782721][ T6666] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1196.788199][ T6666] do_syscall_64+0x174/0x580 [ 1196.793328][ T6666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.799789][ T6666] [ 1196.799789][ T6666] -> #5 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1196.808419][ T6666] blk_alloc_queue+0x544/0x690 [ 1196.813725][ T6666] __blk_mq_alloc_disk+0x194/0x390 [ 1196.819382][ T6666] nbd_dev_add+0x494/0xb60 [ 1196.824343][ T6666] nbd_init+0x15f/0x1e0 [ 1196.829141][ T6666] do_one_initcall+0x250/0x870 [ 1196.834447][ T6666] do_initcall_level+0x10a/0x1a0 [ 1196.840015][ T6666] do_initcalls+0x59/0xa0 [ 1196.844888][ T6666] kernel_init_freeable+0x29d/0x3e0 [ 1196.850630][ T6666] kernel_init+0x1d/0x1d0 [ 1196.855500][ T6666] ret_from_fork+0x514/0xb70 [ 1196.860641][ T6666] ret_from_fork_asm+0x1a/0x30 [ 1196.865942][ T6666] [ 1196.865942][ T6666] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 1196.873177][ T6666] fs_reclaim_acquire+0x71/0x100 [ 1196.878666][ T6666] kmem_cache_alloc_node_noprof+0x4a/0x680 [ 1196.885011][ T6666] __alloc_skb+0x1d7/0x7a0 [ 1196.889970][ T6666] __ip6_append_data+0x2ea3/0x4080 [ 1196.895685][ T6666] ip6_append_data+0x108/0x270 [ 1196.901004][ T6666] rawv6_sendmsg+0x1298/0x18c0 [ 1196.906367][ T6666] ____sys_sendmsg+0x853/0xa20 [ 1196.911680][ T6666] ___sys_sendmsg+0x2a5/0x360 [ 1196.916893][ T6666] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1196.922367][ T6666] do_syscall_64+0x174/0x580 [ 1196.927496][ T6666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.933929][ T6666] [ 1196.933929][ T6666] -> #3 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1196.941715][ T6666] lock_sock_nested+0x41/0x100 [ 1196.947026][ T6666] inet_shutdown+0x6a/0x390 [ 1196.952157][ T6666] nbd_mark_nsock_dead+0x2cb/0x550 [ 1196.957823][ T6666] recv_work+0x1cef/0x1e10 [ 1196.962781][ T6666] process_scheduled_works+0xa8e/0x14e0 [ 1196.968873][ T6666] worker_thread+0xa47/0xfb0 [ 1196.974000][ T6666] kthread+0x389/0x470 [ 1196.978609][ T6666] ret_from_fork+0x514/0xb70 [ 1196.983730][ T6666] ret_from_fork_asm+0x1a/0x30 [ 1196.989032][ T6666] [ 1196.989032][ T6666] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 1196.996700][ T6666] __mutex_lock+0x19d/0x1590 [ 1197.001831][ T6666] nbd_queue_rq+0x373/0x1150 [ 1197.006967][ T6666] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1197.013222][ T6666] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1197.020184][ T6666] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1197.026708][ T6666] blk_mq_run_hw_queue+0x348/0x4f0 [ 1197.032365][ T6666] blk_mq_dispatch_list+0xd11/0xe10 [ 1197.038109][ T6666] blk_mq_flush_plug_list+0x45f/0x540 [ 1197.044024][ T6666] __blk_flush_plug+0x3ed/0x4d0 [ 1197.049486][ T6666] __submit_bio+0x465/0x560 [ 1197.054539][ T6666] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1197.060710][ T6666] block_read_full_folio+0x599/0x830 [ 1197.066531][ T6666] filemap_read_folio+0x12c/0x3a0 [ 1197.072128][ T6666] do_read_cache_folio+0x354/0x590 [ 1197.077803][ T6666] read_part_sector+0xb6/0x2b0 [ 1197.083130][ T6666] adfspart_check_ICS+0xb1/0x960 [ 1197.088607][ T6666] bdev_disk_changed+0x82b/0x1780 [ 1197.094169][ T6666] blkdev_get_whole+0x372/0x510 [ 1197.099562][ T6666] bdev_open+0x324/0xd70 [ 1197.104356][ T6666] blkdev_open+0x461/0x600 [ 1197.109314][ T6666] do_dentry_open+0x816/0x1380 [ 1197.114616][ T6666] vfs_open+0x3b/0x340 [ 1197.119241][ T6666] path_openat+0x2e3b/0x3890 [ 1197.124380][ T6666] do_file_open+0x23e/0x4a0 [ 1197.129434][ T6666] do_sys_openat2+0x113/0x200 [ 1197.134660][ T6666] __x64_sys_openat+0x138/0x170 [ 1197.140054][ T6666] do_syscall_64+0x174/0x580 [ 1197.145186][ T6666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.151617][ T6666] [ 1197.151617][ T6666] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 1197.158859][ T6666] __mutex_lock+0x19d/0x1590 [ 1197.164004][ T6666] nbd_queue_rq+0xc1/0x1150 [ 1197.169064][ T6666] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1197.175155][ T6666] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1197.182038][ T6666] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1197.188569][ T6666] blk_mq_run_hw_queue+0x348/0x4f0 [ 1197.194250][ T6666] blk_mq_dispatch_list+0xd11/0xe10 [ 1197.199993][ T6666] blk_mq_flush_plug_list+0x45f/0x540 [ 1197.205917][ T6666] __blk_flush_plug+0x3ed/0x4d0 [ 1197.211315][ T6666] __submit_bio+0x465/0x560 [ 1197.216360][ T6666] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1197.222531][ T6666] block_read_full_folio+0x599/0x830 [ 1197.228369][ T6666] filemap_read_folio+0x12c/0x3a0 [ 1197.233939][ T6666] do_read_cache_folio+0x354/0x590 [ 1197.239596][ T6666] read_part_sector+0xb6/0x2b0 [ 1197.244907][ T6666] adfspart_check_ICS+0xb1/0x960 [ 1197.250395][ T6666] bdev_disk_changed+0x82b/0x1780 [ 1197.255977][ T6666] blkdev_get_whole+0x372/0x510 [ 1197.261372][ T6666] bdev_open+0x324/0xd70 [ 1197.266162][ T6666] blkdev_open+0x461/0x600 [ 1197.271126][ T6666] do_dentry_open+0x816/0x1380 [ 1197.276445][ T6666] vfs_open+0x3b/0x340 [ 1197.281074][ T6666] path_openat+0x2e3b/0x3890 [ 1197.286234][ T6666] do_file_open+0x23e/0x4a0 [ 1197.291292][ T6666] do_sys_openat2+0x113/0x200 [ 1197.296551][ T6666] __x64_sys_openat+0x138/0x170 [ 1197.301953][ T6666] do_syscall_64+0x174/0x580 [ 1197.307112][ T6666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.313549][ T6666] [ 1197.313549][ T6666] -> #0 (set->srcu){.+.+}-{0:0}: [ 1197.320703][ T6666] __lock_acquire+0x1520/0x2cd0 [ 1197.326104][ T6666] lock_sync+0x9d/0x120 [ 1197.330802][ T6666] __synchronize_srcu+0xc9/0x2f0 [ 1197.336277][ T6666] elevator_switch+0x1e8/0x7b0 [ 1197.341586][ T6666] elevator_change+0x2fa/0x480 [ 1197.346889][ T6666] elevator_set_default+0x375/0x440 [ 1197.352623][ T6666] blk_register_queue+0x3f3/0x4e0 [ 1197.358187][ T6666] __add_disk+0x6cb/0xe30 [ 1197.363066][ T6666] add_disk_fwnode+0xfb/0x4b0 [ 1197.368293][ T6666] nbd_dev_add+0x733/0xb60 [ 1197.373260][ T6666] nbd_genl_connect+0x992/0x1c10 [ 1197.378746][ T6666] genl_family_rcv_msg_doit+0x233/0x340 [ 1197.384840][ T6666] genl_rcv_msg+0x614/0x7a0 [ 1197.389893][ T6666] netlink_rcv_skb+0x226/0x4a0 [ 1197.395199][ T6666] genl_rcv+0x28/0x40 [ 1197.399732][ T6666] netlink_unicast+0x7bb/0x940 [ 1197.405048][ T6666] netlink_sendmsg+0x813/0xb40 [ 1197.410384][ T6666] ____sys_sendmsg+0x9b9/0xa20 [ 1197.415688][ T6666] ___sys_sendmsg+0x2a5/0x360 [ 1197.420909][ T6666] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1197.426392][ T6666] do_syscall_64+0x174/0x580 [ 1197.431524][ T6666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.437954][ T6666] [ 1197.437954][ T6666] other info that might help us debug this: [ 1197.437954][ T6666] [ 1197.448191][ T6666] Chain exists of: [ 1197.448191][ T6666] set->srcu --> &q->q_usage_counter(io)#50 --> &q->elevator_lock [ 1197.448191][ T6666] [ 1197.461870][ T6666] Possible unsafe locking scenario: [ 1197.461870][ T6666] [ 1197.469355][ T6666] CPU0 CPU1 [ 1197.474785][ T6666] ---- ---- [ 1197.480174][ T6666] lock(&q->elevator_lock); [ 1197.484785][ T6666] lock(&q->q_usage_counter(io)#50); [ 1197.492708][ T6666] lock(&q->elevator_lock); [ 1197.499836][ T6666] sync(set->srcu); [ 1197.503759][ T6666] [ 1197.503759][ T6666] *** DEADLOCK *** [ 1197.503759][ T6666] [ 1197.511928][ T6666] 6 locks held by syz.4.9408/6666: [ 1197.517057][ T6666] #0: ffffffff8fe31848 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1197.525351][ T6666] #1: ffffffff8fe31680 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1197.534354][ T6666] #2: ffff8880562561c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x4b0 [ 1197.544749][ T6666] #3: ffff88802aa918b0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 1197.554621][ T6666] #4: ffff88802aa91338 (&q->q_usage_counter(queue)#54){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 1197.565534][ T6666] #5: ffff88802aa91828 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1197.575395][ T6666] [ 1197.575395][ T6666] stack backtrace: [ 1197.581297][ T6666] CPU: 1 UID: 0 PID: 6666 Comm: syz.4.9408 Not tainted syzkaller #0 PREEMPT(full) [ 1197.581319][ T6666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1197.581331][ T6666] Call Trace: [ 1197.581338][ T6666] [ 1197.581347][ T6666] dump_stack_lvl+0xe8/0x150 [ 1197.581370][ T6666] print_circular_bug+0x2e1/0x300 [ 1197.581396][ T6666] check_noncircular+0x12e/0x150 [ 1197.581421][ T6666] __lock_acquire+0x1520/0x2cd0 [ 1197.581440][ T6666] ? check_noncircular+0xda/0x150 [ 1197.581465][ T6666] ? lockdep_unlock+0x5d/0xd0 [ 1197.581480][ T6666] ? __lock_acquire+0x13e8/0x2cd0 [ 1197.581502][ T6666] ? __synchronize_srcu+0xb5/0x2f0 [ 1197.581518][ T6666] lock_sync+0x9d/0x120 [ 1197.581535][ T6666] ? __synchronize_srcu+0xb5/0x2f0 [ 1197.581554][ T6666] __synchronize_srcu+0xc9/0x2f0 [ 1197.581574][ T6666] ? __pfx___synchronize_srcu+0x10/0x10 [ 1197.581596][ T6666] ? do_raw_spin_lock+0x12b/0x2f0 [ 1197.581626][ T6666] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1197.581644][ T6666] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1197.581673][ T6666] ? synchronize_srcu+0x20a/0x260 [ 1197.581691][ T6666] elevator_switch+0x1e8/0x7b0 [ 1197.581710][ T6666] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1197.581735][ T6666] elevator_change+0x2fa/0x480 [ 1197.581755][ T6666] ? do_raw_spin_unlock+0xf5/0x210 [ 1197.581782][ T6666] elevator_set_default+0x375/0x440 [ 1197.581804][ T6666] ? __pfx_elevator_set_default+0x10/0x10 [ 1197.581829][ T6666] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 1197.581919][ T6666] ? blk_crypto_sysfs_register+0x11c/0x170 [ 1197.581976][ T6666] blk_register_queue+0x3f3/0x4e0 [ 1197.582002][ T6666] __add_disk+0x6cb/0xe30 [ 1197.582031][ T6666] add_disk_fwnode+0xfb/0x4b0 [ 1197.582065][ T6666] nbd_dev_add+0x733/0xb60 [ 1197.582094][ T6666] ? __pfx_nbd_dev_add+0x10/0x10 [ 1197.582127][ T6666] ? bpf_lsm_capable+0x9/0x20 [ 1197.582144][ T6666] ? security_capable+0x7e/0x2c0 [ 1197.582171][ T6666] ? radix_tree_lookup+0x25c/0x290 [ 1197.582250][ T6666] nbd_genl_connect+0x992/0x1c10 [ 1197.582278][ T6666] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1197.582306][ T6666] ? rcu_is_watching+0x15/0xb0 [ 1197.582327][ T6666] ? trace_kmalloc+0x2a/0xf0 [ 1197.582354][ T6666] ? __nla_parse+0x40/0x60 [ 1197.582376][ T6666] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1197.582405][ T6666] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1197.582435][ T6666] genl_family_rcv_msg_doit+0x233/0x340 [ 1197.582464][ T6666] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1197.582495][ T6666] ? __lock_acquire+0x683/0x2cd0 [ 1197.582517][ T6666] genl_rcv_msg+0x614/0x7a0 [ 1197.582545][ T6666] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1197.582570][ T6666] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1197.582601][ T6666] netlink_rcv_skb+0x226/0x4a0 [ 1197.582625][ T6666] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1197.582650][ T6666] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1197.582675][ T6666] ? down_read+0x270/0x2e0 [ 1197.582697][ T6666] ? genl_rcv+0xd/0x40 [ 1197.582720][ T6666] genl_rcv+0x28/0x40 [ 1197.582743][ T6666] netlink_unicast+0x7bb/0x940 [ 1197.582776][ T6666] netlink_sendmsg+0x813/0xb40 [ 1197.582799][ T6666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1197.582821][ T6666] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1197.582848][ T6666] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1197.582872][ T6666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1197.582892][ T6666] ____sys_sendmsg+0x9b9/0xa20 [ 1197.582911][ T6666] ? __might_fault+0xaf/0x130 [ 1197.582937][ T6666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1197.582960][ T6666] ? import_iovec+0x73/0xa0 [ 1197.582981][ T6666] ___sys_sendmsg+0x2a5/0x360 [ 1197.582999][ T6666] ? __lock_acquire+0x683/0x2cd0 [ 1197.583019][ T6666] ? __pfx____sys_sendmsg+0x10/0x10 [ 1197.583040][ T6666] ? futex_wait+0x2a2/0x390 [ 1197.583083][ T6666] ? __fget_files+0x2a/0x420 [ 1197.583105][ T6666] ? __fget_files+0x3a2/0x420 [ 1197.583131][ T6666] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1197.583151][ T6666] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1197.583174][ T6666] ? rcu_is_watching+0x15/0xb0 [ 1197.583198][ T6666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.583216][ T6666] do_syscall_64+0x174/0x580 [ 1197.583236][ T6666] ? trace_irq_disable+0x3b/0x140 [ 1197.583263][ T6666] ? clear_bhb_loop+0x40/0x90 [ 1197.583283][ T6666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.583302][ T6666] RIP: 0033:0x7f68e499ce59 [ 1197.583320][ T6666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1197.583336][ T6666] RSP: 002b:00007f68e5780028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1197.583356][ T6666] RAX: ffffffffffffffda RBX: 00007f68e4c15fa0 RCX: 00007f68e499ce59 [ 1197.583370][ T6666] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 1197.583383][ T6666] RBP: 00007f68e4a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1197.583394][ T6666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1197.583406][ T6666] R13: 00007f68e4c16038 R14: 00007f68e4c15fa0 R15: 00007ffc1799aef8 [ 1197.583427][ T6666] [ 1198.346220][ T6420] udevd[6420]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1198.385891][ T6666] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9408'. [ 1198.571211][ T6420] udevd[6420]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1198.659641][ T6188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1198.697633][ T6188] veth0_vlan: entered promiscuous mode [ 1198.708778][ T6188] veth1_vlan: entered promiscuous mode [ 1198.737074][ T6188] veth0_macvtap: entered promiscuous mode [ 1198.745526][ T6188] veth1_macvtap: entered promiscuous mode [ 1198.763157][ T6188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1198.777334][ T6188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1198.790045][ T81] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.799294][ T81] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.815715][ T81] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.824731][ T81] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.845776][ T6188] ieee80211 phy109: Selected rate control algorithm 'minstrel_ht' [ 1198.870204][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.876023][ T6188] ieee80211 phy110: Selected rate control algorithm 'minstrel_ht' [ 1198.890743][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.913223][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.921784][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50