last executing test programs:
1m4.461886997s ago: executing program 0 (id=236):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbba}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}]}}]}, 0xb0}}, 0x0)
50.569746998s ago: executing program 0 (id=236):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbba}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}]}}]}, 0xb0}}, 0x0)
37.726854084s ago: executing program 0 (id=236):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbba}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}]}}]}, 0xb0}}, 0x0)
23.882312043s ago: executing program 0 (id=236):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbba}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}]}}]}, 0xb0}}, 0x0)
16.841446416s ago: executing program 0 (id=236):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbba}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}]}}]}, 0xb0}}, 0x0)
6.97811684s ago: executing program 1 (id=1135):
r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000041c000980100002800c00018008000140000000020800014000000003"], 0x364}}, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ba", 0x1}], 0x1}, 0x48044)
sendmsg$inet(r2, &(0x7f0000000740)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000280)="c109000000000000001d1e080e7126", 0xf}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000001000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x1, 0xfd, 0x80000000, @vifc_lcl_addr=@multicast2, @initdev={0xac, 0x1e, 0x80, 0x0}}, 0x10)
connect$llc(r0, &(0x7f0000000080)={0x1a, 0x103, 0x3, 0xc, 0x4, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x10)
r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000ec0)={0x1, &(0x7f0000000e80)=[{0x3d}]}, 0x10)
6.460863747s ago: executing program 1 (id=1137):
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r1, &(0x7f0000004880)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000200)="c94f956115dd24f43e4add5d853cc166dc4df1846d07376f738eccefd058e9f2c87e4891ce937010b1862d6d25203b7f85b33767459dd93b1242ed05", 0x3c}, {0x0}], 0x2}}], 0x1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x1000, 0x0)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="9dbe44f632c72137820ca3215935b741b669af55cdc581eec182ea3d7fcf7232e02142cdc6c5d4acfffd36f914871683b533cdb42cf6be04643044d7991b2fd65403926c8787900e25311dec663a76601cefd1acd496bcc5d507e285d26bd817", 0x60}], 0x1}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x483, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'sed\x00'}, 0x2c)
bind$can_j1939(r3, 0x0, 0x0)
ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000080)='batadv_slave_0\x00')
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000002100200028bd7000fbdbdf250214200525000404080000000c0f00000000000000000a15050015000200000008000200ffffc66d3f98908c4421f6c3ffff14000300767863616e310000000000000000000008000100e00000020800020064010102f5f1ba1e9a54ab92c16dedb362498d6577ebd4d58d1b65d13702413032f5e00881d8893bcd0c17507e0161cd8629fd6215"], 0x5c}}, 0x4048844)
4.702563424s ago: executing program 4 (id=1151):
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000140)="d5e048107d49ec2ceed642a8c5481dcfd6c5405dd1380b076e6708e9efa70c40193b30a80b000000d4dfb68df3b5d5ad62064f78955574d2d1eff576ed47943db077e455e378c5e91ca3c928a81f42468c9a98f2ee8cad04ed7cffb02c", 0x5d}, {&(0x7f0000000540)="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", 0xfa}, {&(0x7f00000000c0)="d98d07f9f806ae001dd06c5cab84893fd41a56d81a5dd4db55b65521b2dbcceb989a80c9d5a1f574812d4d9bad4b", 0x2e}, {&(0x7f0000000240)="d687b99ee93d80716e04b75ef3fd683c43d7aad0da70efbbca13291915a72b0000008000000000a72c8a3d498be73ab73f382993ddd4c11520d76403f8fcbc339642d045e28521e2f0fd97d3fab3ba2aecb355ca46e9473502d984262e9fb2c55bf6c6c51828558b02e3d6b1ac33f492a4901e4f93e5100eab15e2849b56eafd7f", 0x81}, {&(0x7f0000000440)="76cfb11b75a5eb6e17bc41969c35fde9a965209ef171bb8ad70f2d9f4254dc73def57b64d4df8877fb00a92d902b092482991b5031ebb7eb6dcf6d3aa6aba46266914e4ed78b1907acb3484bf4990f9465f381f15d808d4c142aec0a44268492f698a69f01c3942a139b5a091d3d13b1064bbc7cf4c85acd46d49a72ebd023ad1f91ee1d4e15bb409dd052f1329011ba8f5cab9d843b8df7060625c4c30b3ca9ec4f7b6016be5b71ac069f9d180c57cfe7ad9855683d80980039ce5226d85a90b8c4c1a506d3138a9d6b8c", 0xcb}], 0x5}, 0x0)
4.646105727s ago: executing program 4 (id=1152):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x10, 0x7, 0x6, 0x4, {{0x9, 0x4, 0x2, 0x0, 0x24, 0x64, 0x0, 0x5, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp_prespec={0x44, 0x4, 0x5b, 0x3, 0xf}, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0xb3, [@empty]}, @noop]}}}}})
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000), 0x10)
bind$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10)
bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r3 = socket$tipc(0x1e, 0x4, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
sendmsg$tipc(r1, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000240)=0xfffffff9, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4)
pselect6(0x0, 0x0, &(0x7f00000003c0)={0x0, 0x5f, 0x0, 0x2, 0x5ef}, 0x0, &(0x7f0000000480), 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x1, @dev}, 0x10)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x9, 0x80000001, 0x4}, 0x10)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000000)={0x3f, 0x4, 0x6, 0x1f, 0xf4, 0x7f, 0x3f, 0x6, 0x2, 0x9, 0xff, 0x9, 0x0, 0x7f}, 0xe)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @private=0xa010101}}, 0x0, 0x0, 0x500, 0x0, 0x1d, 0x4}, 0x9c)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
4.270209741s ago: executing program 2 (id=1156):
r0 = socket(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
r1 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x3, 0x20}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x10, &(0x7f00000015c0)}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5}, @IFLA_BR_PRIORITY={0x6}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x4c}}, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x17, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x15}}, [@printk={@p, {}, {0x5, 0x1, 0xb, 0x9, 0xa, 0x0, 0xfa}, {0x7, 0x0, 0x3}, {}, {}, {0x14, 0x9}}], {{0x4, 0x1, 0x4, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r5, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0)
sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x38, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x38}}, 0x0)
4.062456596s ago: executing program 2 (id=1158):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) (async)
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x1c, 0x0)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x10001, @mcast1, 0xfff}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000000000000e0021001400000002800000121f", 0x2e}], 0x1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) (async)
close(r3) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="ec000000210001000047000000000000e0000001004000000000000000000000ff02200f0000000000000000000000010000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000009c00110000000000000000000000000000000001ffffffff000000000000000000000000640101010000000000000000000000000a010100000000000000000000000000000000000635000000000a0000000000000000000000000000000001ffffffff00000000000000000000000000000000000000000000000000000000fe88000000000000000000000000000100"/164], 0xec}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153}, 0x90) (async)
r7 = socket(0xa, 0x3, 0x4)
sendmmsg$unix(r7, &(0x7f0000001340)=[{{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="01aa43bc000000000100000041000000e9cc453f301b19"], 0x10, 0x4c10}}], 0x1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r8=>0x0}) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x44}}, 0x0) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r9) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff002, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x26c2}, 0x28) (async)
r10 = socket(0x0, 0x800, 0x2)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="3800070000000102000000000000f3ebdfb88100000afffd042498e45a81e53220a92a9cc7862d53edf04a262a3500000009000900020073797a3200cc445e9bca5958fb2b0fa37230f01c4164baf634217b22109e1eaee2fbc513974e082ee6b004300000000000000003851c860a467e5ba225886c84fcaff5ba70aeea13f5c58b62f13393eb0800000000000000c0af226ee899a5524e2e72bad3ab8b6a7cc583c7042c62992ecbb52d11bf95c477736e5ae8364f4020ec682abff1", @ANYRESOCT, @ANYRES64=r8], 0x38}, 0x1, 0x0, 0x0, 0x4008015}, 0x408a0)
3.976369139s ago: executing program 3 (id=1159):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x8100000000000000}, 0x0) (fail_nth: 2)
3.568802975s ago: executing program 3 (id=1160):
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', "0000000000000000000000000000000000000000000000000000000000eaff00"}}}}}}, 0x0)
3.568071729s ago: executing program 4 (id=1161):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x9, 0xffff, 0x800})
getpeername(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xffffffffffffff13, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x40}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r6)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x1, @fixed, 0x0, 0x1}, 0xe)
bind$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x1, @fixed, 0x0, 0x2}, 0xe)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001200030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000040000140012800a0092d66d616376bc616e0004"], 0x34}}, 0x0)
3.515839752s ago: executing program 3 (id=1162):
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000140)="d5e048107d49ec2ceed642a8c5481dcfd6c5405dd1380b076e6708e9efa70c40193b30a80b000000d4dfb68df3b5d5ad62064f78955574d2d1eff576ed47943db077e455e378c5e91ca3c928a81f42468c9a98f2ee8cad04ed7cffb02c", 0x5d}, {&(0x7f0000000540)="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", 0xfa}, {&(0x7f00000000c0)="d98d07f9f806ae001dd06c5cab84893fd41a56d81a5dd4db55b65521b2dbcceb989a80c9d5a1f574812d4d9bad4b", 0x2e}, {&(0x7f0000000240)="d687b99ee93d80716e04b75ef3fd683c43d7aad0da70efbbca13291915a72b0000008000000000a72c8a3d498be73ab73f382993ddd4c11520d76403f8fcbc339642d045e28521e2f0fd97d3fab3ba2aecb355ca46e9473502d984262e9fb2c55bf6c6c51828558b02e3d6b1ac33f492a4901e4f93e5100eab15e2849b56eafd7f", 0x81}, {&(0x7f0000000440)="76cfb11b75a5eb6e17bc41969c35fde9a965209ef171bb8ad70f2d9f4254dc73def57b64d4df8877fb00a92d902b092482991b5031ebb7eb6dcf6d3aa6aba46266914e4ed78b1907acb3484bf4990f9465f381f15d808d4c142aec0a44268492f698a69f01c3942a139b5a091d3d13b1064bbc7cf4c85acd46d49a72ebd023ad1f91ee1d4e15bb409dd052f1329011ba8f5cab9d843b8df7060625c4c30b3ca9ec4f7b6016be5b71ac069f9d180c57cfe7ad9855683d80980039ce5226d85a90b8c4c1a506d3138a9d6b8c", 0xcb}], 0x5}, 0x0)
3.437698264s ago: executing program 3 (id=1163):
unshare(0x20000400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x15, &(0x7f0000000500)=ANY=[@ANYBLOB="18280000", @ANYRES32, @ANYBLOB="00000000ff070000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000000800000085000000a5000000000095000000000000008510000008000000186b00000c000000000000000300000000000f0000000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x75, &(0x7f00000005c0)=""/117, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x2, 0x5, 0xe5, 0xfffff800}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f00000006c0)=[{0x5, 0x4, 0x5, 0xb}, {0x2, 0x1, 0xf, 0x1}, {0x4, 0x2, 0xd, 0x3}], 0x10, 0x8}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000004c0)='btrfs_add_block_group\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r2, 0x1) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000700000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703008008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
sendto$inet6(r5, &(0x7f00000007c0)="c4476b4435ccea3905ac8aa5cc9260da8fc7feb0678282988f9eadf6223f61dd9da413f20f2a16f9f29d782906b47202ae", 0xffffffffffffffbd, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty, 0x101}, 0x1c) (async)
shutdown(r5, 0x2) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$cgroup_type(r7, &(0x7f0000000040), 0x9) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) (async)
r8 = socket(0xa, 0x6, 0x0)
getsockopt$inet6_mreq(r8, 0x10d, 0xfb, 0x0, &(0x7f0000000000))
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x368, 0x98, 0x0, 0x1d0, 0x98, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'lo\x00', 'pim6reg1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r7, 0x58, &(0x7f0000000800)}, 0x10)
3.400232788s ago: executing program 1 (id=1164):
socket$tipc(0x1e, 0x2, 0x0) (async)
socket$tipc(0x1e, 0x5, 0x0) (async)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x54)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000180)={r3, @in={{0x2, 0x0, @empty}}}, 0x90)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
socket$alg(0x26, 0x5, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r7, 0x0, 0x0, 0x20010004, 0x0, 0x0) (async)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) (async)
write$binfmt_script(r6, &(0x7f0000000180), 0xfea7) (async)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
r8 = socket$rxrpc(0x21, 0x2, 0xa) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000050000009500000000000000e6923b33b19a35d427f5e67496beeea639e2b7f2c14e7f99b7ecf39c93069d27164b045baa56262b38e43704f9b69a7a628f93ee62718c1331b374a2452f29c71f8e3e27cb5734add259f2c4045905f8a45ac0bcf54572565c58b6bc51b84b04df5211835b93aa87b5b652adc617b8d2831beec0b5c4bb871cdd0350b6121829a7e3576e9a0a486e0a97a0613343c8de3bec27990cdeb3bc92c681f68983ad2c81ef5a875b67598e7066cfd5b9a146c7204013ceb14c8297cd192f43aac1624b15d6a457d4dcf94f41e7526f1cf70961f9f3b48ca6de7b2fbc7a7f3e8f0d0924cb2f957bf60d51406d3a258af3d58e0380ae328a63434a74d406020076040044240835f3668a6896dbc8fcea250f4b0c297986b8acea238698844e0675d242a7d3acfd1ac46d85c8b23ad8279643d5e3e00a2d319882945b3d0aa8e9a54cbd1aeb90c55b295b9d6021217c70fc7cedba84dd598b53c8521f149b33cb95cae5df2ebf8b7103803aaaa8e7d68dcdfaa835bdb5a23bdbff8362d41a1126043b88f00fdc17ccd274999304c1dff6f4f4f8b219b418e09cf2c0e0cb2f9ad957fd859564f7ff6f28fb3b2d3a97df6f6f54c4ea794102494e1d56e88c1439ea086b1acc9fbc26c315246741cb722188846b1175178f6fa467be03e9f7cff922a1c78bbb28bdf7816bb27db7e86d988213dffd7f012721f2ec81ace497eeca313214f1d8c89ec824b5907e3ab7ec1d387cffbdb4d79ccb3c2e29275da223f5fa52525145684e10798d3de43fa175137b205fc7ccf3a4d0a237bf80bfd9acf1be2a56eecbbce4bc4708db946b1a1b989dc6b146853fea8deab55df9eaf759ffd08ff483103720ebfbc53be6a85fc1b610ba8e3ecb8a7351cf218073aecf3b631837846b703e7772626376aa84290a8b7b4f3472976f6688cb230ccd762d00fcf810ca0c3d20ccdcac10fe09cc5fccf31d9e16e899d32dee701d2b6fff95c1328f249878e6dde3ed840d4b5fb05cc1399dd151f59e53712285d5e9c4dba7e1eb9ff174487c74454f8f5e996e600c5740d21d7ac237d62bee06c1834b04e29c8ee7a5a56a386eca1b136904aeca3cbb85c7278fe202d286d45461d8c9e74654b95b8ebdfa7d9bbe7d5cc269d368efe9056060de9bcaa714bcc8429b623dd78d4fd6ebfaadb7bd35a3ff3da98e2164c8cc1d0d7017b8a7a0fef4f802d538e5bd40daba01aa97fa689d928a6e52e1b21c"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r9, 0x0, 0x0, 0xca, 0x0, &(0x7f0000000240)=""/202, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)="84", 0x2}, 0x50) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYBLOB="071b73a493544d851037f7407ad897c577b5c9d827d0e6a2e9ca1e950a010ad5834c34db895889c18646082c1f1765ce18cf5e81e649a4d66cd0a0fcb6303125326d7849b7f7d4577a34aa770267a342a52a0b47a348b1eb3e9e1145f5cc53"], 0x2c}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r10, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r8], 0x4}}, 0x0)
3.352545964s ago: executing program 0 (id=236):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbba}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}]}}]}, 0xb0}}, 0x0)
1.96217634s ago: executing program 1 (id=1165):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x39}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
unshare(0x2c060000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000711069000000000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x90)
unshare(0x24020400)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
unshare(0x22000000)
1.960611896s ago: executing program 3 (id=1166):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180072013200000000000000000000000000007950007cbf8e7a0ebd7ac3e80000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24004800, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x10}, 0x18)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x9, 0x8000, 0xe4, 0x214, r2, 0x11075e33, '\x00', r1, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r3 = socket$tipc(0x1e, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r5, 0x0, 0x0, &(0x7f00000000c0)=0x7e6, 0x4)
setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000180), 0x4)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r6 = accept4$tipc(r3, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x800)
bind$tipc(r6, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve1\x00'})
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r8, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
1.763733679s ago: executing program 1 (id=1167):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040), 0xc)
socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000000480)={&(0x7f0000000000)={0xa, 0x4e23, 0x7, @loopback, 0xfffffffa}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="b4f387ab6bbb09affa37a9b31d908d94", 0x10}, {&(0x7f00000000c0)="a07266c4c866b211bdcca2b57efe329389798549016c640f3c46d296d4be637823fa4970dfe780640233928e761239d0ecc7368d2170d5f1db605beccfc5a33ba703dd5ae47de1b99b87cfd2390e6342aac4e6b0ee998b0d82897ed2535c5ea726d28799157ffdb905d94c96415b4c36e76b44a8c31f382cde3374311006687db3", 0x81}, {&(0x7f0000000180)="a128a221c89decf2ff037466b3c3b5295be22d0d4bd6a1bcb5263ebd18a427691b11b65ae5cb79b1cf58456d0908385d71f2c1064a32179959b250927189eeb85a6dbf9b95c08f80aae7fa89df3a9467fc1cfa520162df50de0a8f77cbad047f5425c7851faa2605b54f454875", 0x6d}, {&(0x7f0000000200)="fd1be0413f05fdc8dc0255c93fdcdf7a74e39af582785c4a074ee60d71b31d7b8e9a750b6ba31b69886847d1d9534233087f308f41f907b2f83382a8f334e53f1ed5ee46336c10e4892fd9d4aa13e07f7d41835392dc8be08382535d1794b775067c520e62d4d501feb39de7a70722ec6c2a7b779f7f7ab7ff218df8e5fc13f8ff65af45f859516c46a6f6c8090669f188ba4ae0c4cae9", 0x97}, {&(0x7f00000002c0)="89f3f3d888a5b57307b9bad71f9b025e26307af99ea0", 0x16}, {&(0x7f0000000300)="16f32b3bd83f6a07fe29427e6e2c8d8fd5602ebb7282b230f35c980e8d435a73ab9f4b887ee8ef73d903966c7d039f2123f9b9eef563ed6fd0b0b017ac56ba1b2b4fc6b3645ea6f575fc44abc1baff9177066188d4e3a265b27dc1de48cbf4de0f04a9c4b23b5502465676803298cee9fde6a4d0f763017dd9309f9ab4c55706537574782333cd05f263cf04079126fdea6e3bb294cc31b2ccd367edf3e022c9274daf1720987d", 0xa7}], 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000000000000290000003e00000080000000000000001400001000000000290000000b0000000000020000000000"], 0x30}, 0x401)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0xba57, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x0, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0xc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x3, 0x16, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000017c0)='GPL\x00', 0x6, 0xa1, &(0x7f0000001800)=""/161, 0x40f00, 0x44, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x5, 0x10, 0x5, 0xdc5}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000001980)=[0x1, 0x1], &(0x7f00000019c0)=[{0x3, 0x3, 0x5, 0x7}, {0x2, 0x1, 0x6, 0x3}, {0x0, 0x2, 0x0, 0xa}, {0x2, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x4, 0x3}]}, 0x90)
r7 = openat$cgroup_ro(r6, &(0x7f0000000540)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8000})
close(r7)
r8 = openat$cgroup_ro(r6, &(0x7f00000005c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000140), 0x208e24b)
read(r8, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00e4000000000000140012808ee70100766c616ef045109905000000040002800800290011ec0600"], 0x3c}}, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40000021)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000700000000000000000000008500000041000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
1.706945332s ago: executing program 3 (id=1168):
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff44}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x9, 0x3}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x40e7, @rand_addr=' \x01\x00', 0x6}, 0x20)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000080)='GPL\x00'}, 0x90)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0)
setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10)
shutdown(r3, 0x1)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x40)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x4a, 0x0, &(0x7f00000001c0)=0x300)
sendto$inet6(r1, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x3}, 0x6e)
652.76986ms ago: executing program 2 (id=1169):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x6, &(0x7f0000000b00)=@framed={{}, [@alu={0x7, 0x1, 0x1, 0xa, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x40, 0x8, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x0, 0xc, 0x4}})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x8, 0x936, 0x3, 0x28, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xe46, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r7, @ANYBLOB="0800b70000000060404800830400f365080026006c090000"], 0x30}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r8, &(0x7f0000000540), 0x20000000}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r8, &(0x7f0000000100)}, 0x20)
sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, 0x0, 0xb00, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8001)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x11, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700), 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000004c0)}], 0x1}}], 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000cc0)=ANY=[], 0x0, 0x26}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2, 0x0, 0x3}, 0x10}, 0x90)
651.764952ms ago: executing program 4 (id=1170):
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x20000400)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f00000000c0)={0x8, 'dummy0\x00', {'virt_wifi0\x00'}, 0x9})
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000540500000e0002006e657464657673696d0000000f00020030000000000000000000"], 0x34}}, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000840)={@multicast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x48, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0xa, 0x0]}}}}}}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x38, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000400))
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r9, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
listen(r7, 0x8)
r10 = accept4(r7, 0x0, 0x0, 0x0)
setsockopt(r10, 0x84, 0x81, &(0x7f0000000480)="1a00000002000000", 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
416.303886ms ago: executing program 2 (id=1171):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x8100000000000000}, 0x0) (fail_nth: 3)
404.311094ms ago: executing program 1 (id=1172):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000400000000000000000000009500000000000000"], &(0x7f00000006c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x9, 0x10001, 0x7, 0x1}, 0x48)
socket(0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x100010, r1, 0xab713000)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffbfbbffb, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0xc001)
sendto$inet6(r1, &(0x7f0000002580)="b0", 0xfffffffffffffd57, 0x200000c1, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/211, 0xd3}], 0x1}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000480), 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000e8f9756985000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee6}, &(0x7f0000000000)=0x1d)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$int_in(r5, 0x5421, &(0x7f0000001100)=0x9)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00'})
connect$bt_sco(r5, &(0x7f0000000040)={0x1f, @fixed}, 0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc010000000000000000000000000000000000000d0001007564703a73"], 0x6c}}, 0x0)
244.454352ms ago: executing program 4 (id=1173):
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000140)="d5e048107d49ec2ceed642a8c5481dcfd6c5405dd1380b076e6708e9efa70c40193b30a80b000000d4dfb68df3b5d5ad62064f78955574d2d1eff576ed47943db077e455e378c5e91ca3c928a81f42468c9a98f2ee8cad04ed7cffb02c", 0x5d}, {&(0x7f0000000540)="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", 0xfa}, {&(0x7f00000000c0)="d98d07f9f806ae001dd06c5cab84893fd41a56d81a5dd4db55b65521b2dbcceb989a80c9d5a1f574812d4d9bad4b", 0x2e}, {&(0x7f0000000240)="d687b99ee93d80716e04b75ef3fd683c43d7aad0da70efbbca13291915a72b0000008000000000a72c8a3d498be73ab73f382993ddd4c11520d76403f8fcbc339642d045e28521e2f0fd97d3fab3ba2aecb355ca46e9473502d984262e9fb2c55bf6c6c51828558b02e3d6b1ac33f492a4901e4f93e5100eab15e2849b56eafd7f", 0x81}, {&(0x7f0000000440)="76cfb11b75a5eb6e17bc41969c35fde9a965209ef171bb8ad70f2d9f4254dc73def57b64d4df8877fb00a92d902b092482991b5031ebb7eb6dcf6d3aa6aba46266914e4ed78b1907acb3484bf4990f9465f381f15d808d4c142aec0a44268492f698a69f01c3942a139b5a091d3d13b1064bbc7cf4c85acd46d49a72ebd023ad1f91ee1d4e15bb409dd052f1329011ba8f5cab9d843b8df7060625c4c30b3ca9ec4f7b6016be5b71ac069f9d180c57cfe7ad9855683d80980039ce5226d85a90b8c4c1a506d3138a9d6b8c", 0xcb}], 0x5}, 0x0)
176.660577ms ago: executing program 2 (id=1174):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="620ac4ff000000007110860000000000950000009f726452440c944cd1464b58496ec703660e556b00a82691371a34ab3a079ee84715f4995ed1145073b3ba8cf973"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async)
r0 = socket(0x1000000010, 0x80002, 0x0) (async)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
132.811416ms ago: executing program 4 (id=1175):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000000) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) (async)
bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0x0, 0x1}, 0x6)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000022c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c) (async)
readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) (async)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800}, 0x20) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0) (async)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async)
bind$xdp(r4, 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'vlan0\x00', 0x400})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
0s ago: executing program 2 (id=1176):
r0 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000), 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x62) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
bind$bt_hci(r1, &(0x7f0000000180)={0x27}, 0x6)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r6, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000140001000000000000000000021f0000", @ANYRES32=r6, @ANYBLOB="08000200ac1414"], 0x28}}, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r8, &(0x7f0000000380)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0xffe4}, {0xfff3}}}, 0x24}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
kernel console output (not intermixed with test programs):
rectory
[ 147.717010][ T5240] Bluetooth: hci1: command tx timeout
[ 147.783152][ T7184] netlink: 'syz.2.474': attribute type 1 has an invalid length.
[ 147.960664][ T7188] No such timeout policy "syz0"
[ 148.105358][ T7197] netlink: 'syz.3.476': attribute type 1 has an invalid length.
[ 148.120827][ T7197] netlink: 'syz.3.476': attribute type 1 has an invalid length.
[ 148.183156][ T6999] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 148.222115][ T6999] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 148.296019][ T6999] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 148.320136][ T6999] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 148.553732][ T7208] netlink: 'syz.1.481': attribute type 2 has an invalid length.
[ 148.587219][ T7208] ipvlan0: entered allmulticast mode
[ 148.608728][ T7208] veth0_vlan: entered allmulticast mode
[ 148.682256][ T6999] 8021q: adding VLAN 0 to HW filter on device bond0
[ 148.782463][ T6999] 8021q: adding VLAN 0 to HW filter on device team0
[ 148.826700][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state
[ 148.834138][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 148.894516][ T2950] bridge0: port 2(bridge_slave_1) entered blocking state
[ 148.901879][ T2950] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 149.085312][ T7239] __nla_validate_parse: 12 callbacks suppressed
[ 149.085339][ T7239] netlink: 52 bytes leftover after parsing attributes in process `syz.3.486'.
[ 149.165959][ T7242] team0: Device gre1 is of different type
[ 149.732514][ T7261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.492'.
[ 149.796994][ T5240] Bluetooth: hci1: command tx timeout
[ 149.885014][ T6999] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 150.324342][ T7282] team0: Device gre3 is of different type
[ 150.403730][ T6999] veth0_vlan: entered promiscuous mode
[ 150.453307][ T6999] veth1_vlan: entered promiscuous mode
[ 150.628141][ T6999] veth0_macvtap: entered promiscuous mode
[ 150.764405][ T6999] veth1_macvtap: entered promiscuous mode
[ 150.852577][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 150.876981][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 150.902039][ T6999] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 150.946185][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 150.987332][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 150.998956][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 151.012151][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 151.024002][ T6999] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 151.081218][ T6999] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 151.096696][ T6999] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 151.110014][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.503'.
[ 151.121598][ T6999] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 151.132238][ T6999] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 151.154014][ T7305] lo speed is unknown, defaulting to 1000
[ 151.265186][ T7305] lo speed is unknown, defaulting to 1000
[ 151.315131][ T7305] lo speed is unknown, defaulting to 1000
[ 151.452891][ T2950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 151.509247][ T2950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 151.591924][ T2909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 151.626694][ T2909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 151.930867][ T5284] lo speed is unknown, defaulting to 1000
[ 151.938370][ T7305] infiniband syz0: set active
[ 151.943990][ T7305] infiniband syz0: added lo
[ 151.955133][ T7305] syz0: rxe_create_cq: returned err = -12
[ 151.962314][ T7305] infiniband syz0: Couldn't create ib_mad CQ
[ 151.968848][ T7305] infiniband syz0: Couldn't open port 1
[ 152.011253][ T7305] RDS/IB: syz0: added
[ 152.020810][ T7305] smc: adding ib device syz0 with port count 1
[ 152.030935][ T7305] smc: ib device syz0 port 1 has pnetid
[ 152.042679][ T7338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.513'.
[ 152.045606][ T25] lo speed is unknown, defaulting to 1000
[ 152.052640][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'.
[ 152.067248][ T7338] netlink: 224 bytes leftover after parsing attributes in process `syz.1.513'.
[ 152.075679][ T7305] lo speed is unknown, defaulting to 1000
[ 152.102167][ T7338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.513'.
[ 152.189291][ T7338] bond2: entered allmulticast mode
[ 152.212645][ T7338] bond2 (unregistering): left allmulticast mode
[ 152.233057][ T7338] bond2 (unregistering): Released all slaves
[ 152.285090][ T7340] pim6reg527: entered allmulticast mode
[ 152.312667][ T7305] lo speed is unknown, defaulting to 1000
[ 152.709227][ T7305] lo speed is unknown, defaulting to 1000
[ 153.006142][ T7363] team0: Device gre1 is of different type
[ 153.067175][ T7305] lo speed is unknown, defaulting to 1000
[ 153.271975][ T7361] sctp: [Deprecated]: syz.4.521 (pid 7361) Use of int in max_burst socket option.
[ 153.271975][ T7361] Use struct sctp_assoc_value instead
[ 153.331111][ T7376] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 153.550598][ T7376] syzkaller0: entered promiscuous mode
[ 153.566049][ T7385] netlink: 'syz.4.526': attribute type 2 has an invalid length.
[ 153.575681][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.526'.
[ 153.579352][ T7376] syzkaller0: entered allmulticast mode
[ 153.622259][ T7376] tipc: Resetting bearer <eth:syzkaller0>
[ 153.641228][ T7305] lo speed is unknown, defaulting to 1000
[ 153.735628][ T3026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 154.002475][ T2909] tipc: Resetting bearer <eth:syzkaller0>
[ 154.038609][ T7305] lo speed is unknown, defaulting to 1000
[ 154.059115][ T7375] tipc: Resetting bearer <eth:syzkaller0>
[ 154.359835][ T5284] tipc: Node number set to 4278190080
[ 154.824139][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 154.835795][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 154.848439][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 154.858907][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 154.875222][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 154.884951][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 156.343084][ T7375] tipc: Disabling bearer <eth:syzkaller0>
[ 156.421953][ T3026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 156.485106][ T7414] netlink: 'syz.1.532': attribute type 1 has an invalid length.
[ 156.512954][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.532'.
[ 156.530261][ T7417] bond2: (slave vcan1): The slave device specified does not support setting the MAC address
[ 156.540789][ T7417] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[ 156.571843][ T7417] bond2: (slave vcan1): making interface the new active one
[ 156.580890][ T7417] bond2: (slave vcan1): Enslaving as an active interface with an up link
[ 156.729819][ T3026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 156.797392][ T7428] netlink: 'syz.2.536': attribute type 10 has an invalid length.
[ 156.816729][ T7428] netlink: 2 bytes leftover after parsing attributes in process `syz.2.536'.
[ 156.851715][ T7428] team0: entered promiscuous mode
[ 156.862943][ T7428] team_slave_0: entered promiscuous mode
[ 156.874287][ T7428] team_slave_1: entered promiscuous mode
[ 156.887129][ T7428] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[ 156.895197][ T7428] bridge0: port 3(team0) entered blocking state
[ 156.904838][ T7428] bridge0: port 3(team0) entered disabled state
[ 156.911719][ T7428] team0: entered allmulticast mode
[ 156.922113][ T7428] team_slave_0: entered allmulticast mode
[ 156.929796][ T7428] team_slave_1: entered allmulticast mode
[ 156.937328][ T7428] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[ 156.948501][ T7428] bridge0: port 3(team0) entered blocking state
[ 156.954997][ T7428] bridge0: port 3(team0) entered listening state
[ 156.980009][ T7408] lo speed is unknown, defaulting to 1000
[ 156.992657][ T7426] netlink: 'syz.2.536': attribute type 10 has an invalid length.
[ 157.001552][ T5244] Bluetooth: hci1: command tx timeout
[ 157.066544][ T7426] bridge0: port 3(team0) entered disabled state
[ 157.119113][ T7426] team0: left allmulticast mode
[ 157.140426][ T7426] team_slave_0: left allmulticast mode
[ 157.147191][ T7426] team_slave_1: left allmulticast mode
[ 157.163201][ T7426] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[ 157.176930][ T7426] team0: left promiscuous mode
[ 157.193725][ T7426] team_slave_0: left promiscuous mode
[ 157.204168][ T7426] team_slave_1: left promiscuous mode
[ 157.217137][ T7426] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[ 157.235156][ T7426] bridge0: port 3(team0) entered disabled state
[ 157.264696][ T7426] batman_adv: batadv0: Adding interface: team0
[ 157.272963][ T7426] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 157.307187][ T7426] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[ 157.379763][ T3026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 157.400903][ T7431] team0: Device gre3 is of different type
[ 157.442584][ T7427] lo speed is unknown, defaulting to 1000
[ 157.579183][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.539'.
[ 158.461236][ T3026] bridge_slave_1: left allmulticast mode
[ 158.468910][ T3026] bridge_slave_1: left promiscuous mode
[ 158.474904][ T3026] bridge0: port 2(bridge_slave_1) entered disabled state
[ 158.492180][ T3026] bridge_slave_0: left allmulticast mode
[ 158.498539][ T3026] bridge_slave_0: left promiscuous mode
[ 158.504484][ T3026] bridge0: port 1(bridge_slave_0) entered disabled state
[ 158.958816][ T3026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 158.975297][ T3026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 158.992913][ T3026] bond0 (unregistering): Released all slaves
[ 159.011831][ T7475] netlink: 'syz.4.546': attribute type 1 has an invalid length.
[ 159.051027][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'.
[ 159.077140][ T5244] Bluetooth: hci1: command tx timeout
[ 159.122780][ T7477] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[ 159.144245][ T7477] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[ 159.178289][ T7477] bond1: (slave vcan1): making interface the new active one
[ 159.228141][ T7477] bond1: (slave vcan1): Enslaving as an active interface with an up link
[ 159.652861][ T7489] netlink: 'syz.4.550': attribute type 5 has an invalid length.
[ 159.674598][ T7495] netlink: 'syz.3.551': attribute type 5 has an invalid length.
[ 159.691535][ T7408] chnl_net:caif_netlink_parms(): no params data found
[ 159.706112][ T7495] tc_dump_action: action bad kind
[ 159.789433][ T7498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 159.920234][ T7507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.554'.
[ 159.934980][ T7506] netlink: 'syz.4.553': attribute type 2 has an invalid length.
[ 159.969488][ T7506] netlink: 'syz.4.553': attribute type 1 has an invalid length.
[ 159.978378][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'.
[ 159.990115][ T7506] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.553'.
[ 160.220333][ T7408] bridge0: port 1(bridge_slave_0) entered blocking state
[ 160.235512][ T7408] bridge0: port 1(bridge_slave_0) entered disabled state
[ 160.247140][ T7408] bridge_slave_0: entered allmulticast mode
[ 160.255072][ T7408] bridge_slave_0: entered promiscuous mode
[ 160.270777][ T3026] hsr_slave_0: left promiscuous mode
[ 160.287938][ T3026] hsr_slave_1: left promiscuous mode
[ 160.294586][ T3026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 160.302697][ T3026] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 160.320217][ T3026] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 160.335491][ T3026] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 160.369632][ T3026] veth1_macvtap: left promiscuous mode
[ 160.375259][ T3026] veth0_macvtap: left promiscuous mode
[ 160.381191][ T3026] veth1_vlan: left promiscuous mode
[ 160.386586][ T3026] veth0_vlan: left promiscuous mode
[ 161.002621][ T3026] team0 (unregistering): Port device team_slave_1 removed
[ 161.054890][ T3026] team0 (unregistering): Port device team_slave_0 removed
[ 161.157585][ T5244] Bluetooth: hci1: command tx timeout
[ 161.534581][ T7408] bridge0: port 2(bridge_slave_1) entered blocking state
[ 161.546651][ T7408] bridge0: port 2(bridge_slave_1) entered disabled state
[ 161.555318][ T7408] bridge_slave_1: entered allmulticast mode
[ 161.565708][ T7408] bridge_slave_1: entered promiscuous mode
[ 161.742263][ T7408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 161.779215][ T7408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 161.966704][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.561'.
[ 162.021826][ T7408] team0: Port device team_slave_0 added
[ 162.056075][ T7408] team0: Port device team_slave_1 added
[ 162.215511][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 162.232925][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 162.297648][ T7408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 162.328121][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 162.347099][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 162.362498][ T7552] netlink: 'syz.3.563': attribute type 4 has an invalid length.
[ 162.406417][ T7408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 162.661892][ T7567] x_tables: duplicate underflow at hook 2
[ 162.663172][ T7408] hsr_slave_0: entered promiscuous mode
[ 162.700294][ T7408] hsr_slave_1: entered promiscuous mode
[ 162.723682][ T7408] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 162.738769][ T7408] Cannot create hsr debugfs directory
[ 162.753521][ T7573] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000
[ 163.023392][ T7583] netlink: 60 bytes leftover after parsing attributes in process `syz.2.572'.
[ 163.060360][ T7583] ��: entered promiscuous mode
[ 163.239469][ T5244] Bluetooth: hci1: command tx timeout
[ 163.381091][ T7593] netlink: 76 bytes leftover after parsing attributes in process `syz.2.576'.
[ 163.650146][ T7610] netlink: 'syz.3.579': attribute type 2 has an invalid length.
[ 163.877013][ T7624] x_tables: unsorted underflow at hook 3
[ 163.948793][ T7408] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 163.967488][ T7408] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 163.990388][ T7630] FAULT_INJECTION: forcing a failure.
[ 163.990388][ T7630] name failslab, interval 1, probability 0, space 0, times 0
[ 164.026105][ T7630] CPU: 0 UID: 0 PID: 7630 Comm: syz.4.586 Not tainted 6.11.0-rc2-syzkaller-00277-g600a91931057 #0
[ 164.036791][ T7630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 164.046901][ T7630] Call Trace:
[ 164.050214][ T7630] <TASK>
[ 164.053180][ T7630] dump_stack_lvl+0x241/0x360
[ 164.057927][ T7630] ? __pfx_dump_stack_lvl+0x10/0x10
[ 164.063180][ T7630] ? __pfx__printk+0x10/0x10
[ 164.067829][ T7630] ? __kmalloc_node_noprof+0xb7/0x440
[ 164.073253][ T7630] ? __pfx___might_resched+0x10/0x10
[ 164.079041][ T7630] should_fail_ex+0x3b0/0x4e0
[ 164.083782][ T7630] should_failslab+0xac/0x100
[ 164.088532][ T7630] __kmalloc_node_noprof+0xdf/0x440
[ 164.093790][ T7630] ? __kvmalloc_node_noprof+0x72/0x190
[ 164.099321][ T7630] ? __pfx_ipgre_tunnel_setup+0x10/0x10
[ 164.105057][ T7630] __kvmalloc_node_noprof+0x72/0x190
[ 164.110414][ T7630] alloc_netdev_mqs+0x9b/0x1000
[ 164.115325][ T7630] ? __pfx_ipgre_tunnel_setup+0x10/0x10
[ 164.120940][ T7630] ? bpf_lsm_capable+0x9/0x10
[ 164.125674][ T7630] ? security_capable+0x90/0xb0
[ 164.130587][ T7630] rtnl_create_link+0x2f9/0xc20
[ 164.135504][ T7630] rtnl_newlink+0x1423/0x20a0
[ 164.140242][ T7630] ? rtnl_newlink+0xb01/0x20a0
[ 164.145540][ T7630] ? __pfx_rtnl_newlink+0x10/0x10
[ 164.148433][ T7635] sctp: [Deprecated]: syz.1.589 (pid 7635) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 164.148433][ T7635] Use struct sctp_sack_info instead
[ 164.150644][ T7630] ? do_raw_spin_unlock+0x13c/0x8b0
[ 164.150690][ T7630] ? __mutex_lock+0x9a5/0xd70
[ 164.176841][ T7630] ? __mutex_lock+0x527/0xd70
[ 164.181615][ T7630] ? __pfx_rtnl_newlink+0x10/0x10
[ 164.186707][ T7630] rtnetlink_rcv_msg+0x73f/0xcf0
[ 164.191709][ T7630] ? rtnetlink_rcv_msg+0x1a7/0xcf0
[ 164.196894][ T7630] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 164.202433][ T7630] ? ref_tracker_free+0x643/0x7e0
[ 164.207525][ T7630] netlink_rcv_skb+0x1e3/0x430
[ 164.212349][ T7630] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 164.217864][ T7630] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 164.223231][ T7630] ? netlink_deliver_tap+0x2e/0x1b0
[ 164.228462][ T7630] netlink_unicast+0x7f0/0x990
[ 164.233265][ T7630] ? __pfx_netlink_unicast+0x10/0x10
[ 164.238642][ T7630] ? __virt_addr_valid+0x183/0x530
[ 164.243782][ T7630] ? __check_object_size+0x49c/0x900
[ 164.249121][ T7630] ? bpf_lsm_netlink_send+0x9/0x10
[ 164.254282][ T7630] netlink_sendmsg+0x8e4/0xcb0
[ 164.259108][ T7630] ? __pfx_netlink_sendmsg+0x10/0x10
[ 164.264441][ T7630] ? __import_iovec+0x536/0x820
[ 164.269345][ T7630] ? aa_sock_msg_perm+0x91/0x160
[ 164.274482][ T7630] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 164.279818][ T7630] ? security_socket_sendmsg+0x87/0xb0
[ 164.285308][ T7630] ? __pfx_netlink_sendmsg+0x10/0x10
[ 164.290708][ T7630] __sock_sendmsg+0x221/0x270
[ 164.295417][ T7630] ____sys_sendmsg+0x525/0x7d0
[ 164.300214][ T7630] ? __pfx_____sys_sendmsg+0x10/0x10
[ 164.305541][ T7630] __sys_sendmsg+0x2b0/0x3a0
[ 164.310198][ T7630] ? __pfx___sys_sendmsg+0x10/0x10
[ 164.315342][ T7630] ? vfs_write+0x7c4/0xc90
[ 164.319853][ T7630] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 164.326239][ T7630] ? do_syscall_64+0x100/0x230
[ 164.331156][ T7630] ? do_syscall_64+0xb6/0x230
[ 164.335861][ T7630] do_syscall_64+0xf3/0x230
[ 164.340391][ T7630] ? clear_bhb_loop+0x35/0x90
[ 164.345086][ T7630] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 164.351020][ T7630] RIP: 0033:0x7fb21c7779f9
[ 164.355479][ T7630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 164.375135][ T7630] RSP: 002b:00007fb21d4b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 164.383598][ T7630] RAX: ffffffffffffffda RBX: 00007fb21c905f80 RCX: 00007fb21c7779f9
[ 164.391618][ T7630] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003
[ 164.399633][ T7630] RBP: 00007fb21d4b2090 R08: 0000000000000000 R09: 0000000000000000
[ 164.407643][ T7630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 164.415675][ T7630] R13: 0000000000000000 R14: 00007fb21c905f80 R15: 00007ffc1824daa8
[ 164.423804][ T7630] </TASK>
[ 164.431529][ T7408] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 164.484140][ T7632] tc_dump_action: action bad kind
[ 164.493786][ T7408] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 164.654637][ T7650] xt_hashlimit: invalid interval
[ 164.743188][ T7656] netlink: 'syz.3.593': attribute type 13 has an invalid length.
[ 164.822731][ T7408] 8021q: adding VLAN 0 to HW filter on device bond0
[ 164.889501][ T7408] 8021q: adding VLAN 0 to HW filter on device team0
[ 164.923260][ T6695] bridge0: port 1(bridge_slave_0) entered blocking state
[ 164.930539][ T6695] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 164.993224][ T6695] bridge0: port 2(bridge_slave_1) entered blocking state
[ 165.000500][ T6695] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 165.224973][ T7679] sctp: [Deprecated]: syz.4.598 (pid 7679) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 165.224973][ T7679] Use struct sctp_sack_info instead
[ 165.420090][ T7691] FAULT_INJECTION: forcing a failure.
[ 165.420090][ T7691] name failslab, interval 1, probability 0, space 0, times 0
[ 165.442322][ T7691] CPU: 1 UID: 0 PID: 7691 Comm: syz.1.602 Not tainted 6.11.0-rc2-syzkaller-00277-g600a91931057 #0
[ 165.452994][ T7691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 165.463077][ T7691] Call Trace:
[ 165.466374][ T7691] <TASK>
[ 165.469323][ T7691] dump_stack_lvl+0x241/0x360
[ 165.474035][ T7691] ? __pfx_dump_stack_lvl+0x10/0x10
[ 165.479265][ T7691] ? __pfx__printk+0x10/0x10
[ 165.483888][ T7691] should_fail_ex+0x3b0/0x4e0
[ 165.488589][ T7691] should_failslab+0xac/0x100
[ 165.493296][ T7691] ? __hw_addr_add_ex+0x1a8/0x610
[ 165.498358][ T7691] __kmalloc_cache_noprof+0x6c/0x2c0
[ 165.503705][ T7691] __hw_addr_add_ex+0x1a8/0x610
[ 165.508595][ T7691] dev_addr_init+0x143/0x230
[ 165.513214][ T7691] ? __pfx_dev_addr_init+0x10/0x10
[ 165.518371][ T7691] alloc_netdev_mqs+0x2a1/0x1000
[ 165.523329][ T7691] ? __pfx_ipgre_tunnel_setup+0x10/0x10
[ 165.528898][ T7691] ? security_capable+0x90/0xb0
[ 165.533794][ T7691] rtnl_create_link+0x2f9/0xc20
[ 165.538671][ T7691] rtnl_newlink+0x1423/0x20a0
[ 165.543369][ T7691] ? rtnl_newlink+0xb01/0x20a0
[ 165.548171][ T7691] ? __pfx_rtnl_newlink+0x10/0x10
[ 165.553218][ T7691] ? __pfx___mutex_trylock_common+0x10/0x10
[ 165.559135][ T7691] ? rcu_is_watching+0x15/0xb0
[ 165.563925][ T7691] ? trace_contention_end+0x3c/0x120
[ 165.569229][ T7691] ? __mutex_lock+0x2ef/0xd70
[ 165.573945][ T7691] ? __pfx_lock_release+0x10/0x10
[ 165.579014][ T7691] ? __pfx_rtnl_newlink+0x10/0x10
[ 165.584061][ T7691] rtnetlink_rcv_msg+0x73f/0xcf0
[ 165.589111][ T7691] ? rtnetlink_rcv_msg+0x1a7/0xcf0
[ 165.594255][ T7691] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 165.599744][ T7691] ? ref_tracker_free+0x643/0x7e0
[ 165.604805][ T7691] netlink_rcv_skb+0x1e3/0x430
[ 165.609595][ T7691] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 165.615081][ T7691] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 165.620410][ T7691] ? netlink_deliver_tap+0x2e/0x1b0
[ 165.625640][ T7691] netlink_unicast+0x7f0/0x990
[ 165.630435][ T7691] ? __pfx_netlink_unicast+0x10/0x10
[ 165.635741][ T7691] ? __virt_addr_valid+0x183/0x530
[ 165.640985][ T7691] ? __check_object_size+0x49c/0x900
[ 165.646286][ T7691] ? bpf_lsm_netlink_send+0x9/0x10
[ 165.651421][ T7691] netlink_sendmsg+0x8e4/0xcb0
[ 165.656227][ T7691] ? __pfx_netlink_sendmsg+0x10/0x10
[ 165.661543][ T7691] ? __import_iovec+0x536/0x820
[ 165.666413][ T7691] ? aa_sock_msg_perm+0x91/0x160
[ 165.671372][ T7691] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 165.676677][ T7691] ? security_socket_sendmsg+0x87/0xb0
[ 165.682169][ T7691] ? __pfx_netlink_sendmsg+0x10/0x10
[ 165.687483][ T7691] __sock_sendmsg+0x221/0x270
[ 165.692186][ T7691] ____sys_sendmsg+0x525/0x7d0
[ 165.696987][ T7691] ? __pfx_____sys_sendmsg+0x10/0x10
[ 165.702317][ T7691] __sys_sendmsg+0x2b0/0x3a0
[ 165.706930][ T7691] ? __pfx___sys_sendmsg+0x10/0x10
[ 165.712061][ T7691] ? vfs_write+0x7c4/0xc90
[ 165.716539][ T7691] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 165.722898][ T7691] ? do_syscall_64+0x100/0x230
[ 165.727695][ T7691] ? do_syscall_64+0xb6/0x230
[ 165.732408][ T7691] do_syscall_64+0xf3/0x230
[ 165.736939][ T7691] ? clear_bhb_loop+0x35/0x90
[ 165.741637][ T7691] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 165.747548][ T7691] RIP: 0033:0x7f76cfb779f9
[ 165.751986][ T7691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 165.771610][ T7691] RSP: 002b:00007f76d08a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 165.780044][ T7691] RAX: ffffffffffffffda RBX: 00007f76cfd05f80 RCX: 00007f76cfb779f9
[ 165.788031][ T7691] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003
[ 165.796016][ T7691] RBP: 00007f76d08a3090 R08: 0000000000000000 R09: 0000000000000000
[ 165.804005][ T7691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 165.812001][ T7691] R13: 0000000000000000 R14: 00007f76cfd05f80 R15: 00007ffea7809358
[ 165.820009][ T7691] </TASK>
[ 165.985597][ T7408] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 166.144816][ T7697] lo speed is unknown, defaulting to 1000
[ 166.148699][ T7702] netlink: 'syz.2.606': attribute type 9 has an invalid length.
[ 166.168786][ T7702] netlink: 'syz.2.606': attribute type 7 has an invalid length.
[ 166.176510][ T7702] netlink: 'syz.2.606': attribute type 8 has an invalid length.
[ 166.192671][ T7408] veth0_vlan: entered promiscuous mode
[ 166.249545][ T7408] veth1_vlan: entered promiscuous mode
[ 166.260161][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.603'.
[ 166.311708][ T7707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.603'.
[ 166.352779][ T7408] veth0_macvtap: entered promiscuous mode
[ 166.395151][ T7408] veth1_macvtap: entered promiscuous mode
[ 166.491241][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 166.502256][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 166.517262][ T7408] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 166.572977][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 166.606617][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 166.636200][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 166.654401][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 166.667667][ T7408] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 166.704264][ T7408] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 166.723863][ T7408] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 166.743070][ T7408] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 166.756807][ T7408] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 166.852088][ T7715] netlink: 'syz.1.609': attribute type 10 has an invalid length.
[ 166.890791][ T7715] team0: Port device netdevsim0 added
[ 167.020115][ T7724] lo speed is unknown, defaulting to 1000
[ 167.201053][ T7734] FAULT_INJECTION: forcing a failure.
[ 167.201053][ T7734] name failslab, interval 1, probability 0, space 0, times 0
[ 167.244398][ T7734] CPU: 1 UID: 0 PID: 7734 Comm: syz.2.614 Not tainted 6.11.0-rc2-syzkaller-00277-g600a91931057 #0
[ 167.255163][ T7734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 167.265258][ T7734] Call Trace:
[ 167.268648][ T7734] <TASK>
[ 167.271609][ T7734] dump_stack_lvl+0x241/0x360
[ 167.276342][ T7734] ? __pfx_dump_stack_lvl+0x10/0x10
[ 167.281604][ T7734] ? __pfx__printk+0x10/0x10
[ 167.286280][ T7734] should_fail_ex+0x3b0/0x4e0
[ 167.291111][ T7734] should_failslab+0xac/0x100
[ 167.295849][ T7734] ? __hw_addr_add_ex+0x1a8/0x610
[ 167.300920][ T7734] __kmalloc_cache_noprof+0x6c/0x2c0
[ 167.306238][ T7734] __hw_addr_add_ex+0x1a8/0x610
[ 167.311153][ T7734] dev_addr_init+0x143/0x230
[ 167.315769][ T7734] ? __pfx_dev_addr_init+0x10/0x10
[ 167.320923][ T7734] alloc_netdev_mqs+0x2a1/0x1000
[ 167.325882][ T7734] ? __pfx_ipgre_tunnel_setup+0x10/0x10
[ 167.331460][ T7734] ? security_capable+0x90/0xb0
[ 167.336339][ T7734] rtnl_create_link+0x2f9/0xc20
[ 167.341223][ T7734] rtnl_newlink+0x1423/0x20a0
[ 167.345931][ T7734] ? rtnl_newlink+0xb01/0x20a0
[ 167.350821][ T7734] ? __pfx_rtnl_newlink+0x10/0x10
[ 167.355867][ T7734] ? do_raw_spin_unlock+0x13c/0x8b0
[ 167.361100][ T7734] ? __mutex_lock+0x9a5/0xd70
[ 167.365815][ T7734] ? __mutex_lock+0x527/0xd70
[ 167.370547][ T7734] ? __pfx_rtnl_newlink+0x10/0x10
[ 167.375594][ T7734] rtnetlink_rcv_msg+0x73f/0xcf0
[ 167.380572][ T7734] ? rtnetlink_rcv_msg+0x1a7/0xcf0
[ 167.385717][ T7734] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 167.391210][ T7734] ? ref_tracker_free+0x643/0x7e0
[ 167.396257][ T7734] netlink_rcv_skb+0x1e3/0x430
[ 167.401052][ T7734] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 167.406543][ T7734] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 167.411891][ T7734] ? netlink_deliver_tap+0x2e/0x1b0
[ 167.417122][ T7734] netlink_unicast+0x7f0/0x990
[ 167.421926][ T7734] ? __pfx_netlink_unicast+0x10/0x10
[ 167.427320][ T7734] ? __virt_addr_valid+0x183/0x530
[ 167.432448][ T7734] ? __check_object_size+0x49c/0x900
[ 167.437752][ T7734] ? bpf_lsm_netlink_send+0x9/0x10
[ 167.442890][ T7734] netlink_sendmsg+0x8e4/0xcb0
[ 167.447699][ T7734] ? __pfx_netlink_sendmsg+0x10/0x10
[ 167.453014][ T7734] ? __import_iovec+0x536/0x820
[ 167.457890][ T7734] ? aa_sock_msg_perm+0x91/0x160
[ 167.462854][ T7734] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 167.468163][ T7734] ? security_socket_sendmsg+0x87/0xb0
[ 167.473653][ T7734] ? __pfx_netlink_sendmsg+0x10/0x10
[ 167.478965][ T7734] __sock_sendmsg+0x221/0x270
[ 167.483712][ T7734] ____sys_sendmsg+0x525/0x7d0
[ 167.488506][ T7734] ? __pfx_____sys_sendmsg+0x10/0x10
[ 167.493828][ T7734] __sys_sendmsg+0x2b0/0x3a0
[ 167.498441][ T7734] ? __pfx___sys_sendmsg+0x10/0x10
[ 167.503570][ T7734] ? vfs_write+0x7c4/0xc90
[ 167.508047][ T7734] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 167.514489][ T7734] ? do_syscall_64+0x100/0x230
[ 167.519279][ T7734] ? do_syscall_64+0xb6/0x230
[ 167.523986][ T7734] do_syscall_64+0xf3/0x230
[ 167.528521][ T7734] ? clear_bhb_loop+0x35/0x90
[ 167.533219][ T7734] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 167.539132][ T7734] RIP: 0033:0x7f86bc9779f9
[ 167.543566][ T7734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 167.563195][ T7734] RSP: 002b:00007f86bd6bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 167.571649][ T7734] RAX: ffffffffffffffda RBX: 00007f86bcb05f80 RCX: 00007f86bc9779f9
[ 167.579659][ T7734] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003
[ 167.587654][ T7734] RBP: 00007f86bd6bd090 R08: 0000000000000000 R09: 0000000000000000
[ 167.595731][ T7734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 167.603749][ T7734] R13: 0000000000000000 R14: 00007f86bcb05f80 R15: 00007ffc803bef38
[ 167.611753][ T7734] </TASK>
[ 167.721338][ T7736] netlink: 'syz.1.615': attribute type 1 has an invalid length.
[ 167.729263][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 167.769735][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 167.935781][ T6700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 167.969487][ T6700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 168.415035][ T7751] netlink: 'syz.1.619': attribute type 2 has an invalid length.
[ 168.479185][ T7755] syz_tun: entered promiscuous mode
[ 168.506396][ T7755] syz_tun: left promiscuous mode
[ 168.615162][ T7761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.623'.
[ 169.110504][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'.
[ 169.135670][ T7780] netlink: 32 bytes leftover after parsing attributes in process `syz.2.627'.
[ 169.155276][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.629'.
[ 169.165275][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'.
[ 169.182415][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.629'.
[ 169.234309][ T7791] netlink: 'syz.4.629': attribute type 4 has an invalid length.
[ 169.619435][ T7813] netlink: 'syz.1.634': attribute type 10 has an invalid length.
[ 169.633921][ T7814] netlink: 76 bytes leftover after parsing attributes in process `syz.4.635'.
[ 170.066676][ T7838] netlink: 'syz.4.642': attribute type 7 has an invalid length.
[ 170.088957][ T7838] netlink: 892 bytes leftover after parsing attributes in process `syz.4.642'.
[ 170.329423][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'.
[ 170.432581][ T7855] netlink: 32 bytes leftover after parsing attributes in process `syz.4.648'.
[ 170.455967][ T7857] veth1_macvtap: entered allmulticast mode
[ 170.573467][ T7864] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[ 170.594542][ T7856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 170.622671][ T7856] veth1_macvtap: left allmulticast mode
[ 170.680550][ T7866] lo speed is unknown, defaulting to 1000
[ 171.209915][ T7874] lo speed is unknown, defaulting to 1000
[ 171.237429][ T7878] netlink: 'syz.1.653': attribute type 1 has an invalid length.
[ 171.371870][ T7882] bridge0: entered promiscuous mode
[ 171.491901][ T3026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 171.694622][ T3026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 171.843609][ T3026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 171.993717][ T3026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 172.113683][ T7880] bridge0: left promiscuous mode
[ 172.242241][ T3026] bridge_slave_1: left allmulticast mode
[ 172.250299][ T3026] bridge_slave_1: left promiscuous mode
[ 172.260613][ T3026] bridge0: port 2(bridge_slave_1) entered disabled state
[ 172.272262][ T3026] bridge_slave_0: left allmulticast mode
[ 172.285864][ T3026] bridge_slave_0: left promiscuous mode
[ 172.305612][ T3026] bridge0: port 1(bridge_slave_0) entered disabled state
[ 172.734419][ T7908] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma?
[ 172.961295][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 172.972795][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 172.990230][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 173.002494][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 173.025178][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 173.033855][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 173.286506][ T3026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 173.303920][ T3026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 173.323986][ T3026] bond0 (unregistering): Released all slaves
[ 173.347103][ T7904] FAULT_INJECTION: forcing a failure.
[ 173.347103][ T7904] name failslab, interval 1, probability 0, space 0, times 0
[ 173.360090][ T7904] CPU: 0 UID: 0 PID: 7904 Comm: syz.1.660 Not tainted 6.11.0-rc2-syzkaller-00277-g600a91931057 #0
[ 173.370734][ T7904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 173.380835][ T7904] Call Trace:
[ 173.384158][ T7904] <TASK>
[ 173.387136][ T7904] dump_stack_lvl+0x241/0x360
[ 173.391885][ T7904] ? __pfx_dump_stack_lvl+0x10/0x10
[ 173.397149][ T7904] ? __pfx__printk+0x10/0x10
[ 173.401806][ T7904] ? __kmalloc_cache_noprof+0x44/0x2c0
[ 173.407321][ T7904] ? __pfx___might_resched+0x10/0x10
[ 173.412845][ T7904] should_fail_ex+0x3b0/0x4e0
[ 173.417583][ T7904] should_failslab+0xac/0x100
[ 173.422333][ T7904] ? alloc_netdev_mqs+0xb9d/0x1000
[ 173.427525][ T7904] __kmalloc_cache_noprof+0x6c/0x2c0
[ 173.432869][ T7904] ? __xdp_rxq_info_reg+0x142/0x290
[ 173.438133][ T7904] alloc_netdev_mqs+0xb9d/0x1000
[ 173.443140][ T7904] rtnl_create_link+0x2f9/0xc20
[ 173.448062][ T7904] rtnl_newlink+0x1423/0x20a0
[ 173.452785][ T7904] ? rtnl_newlink+0xb01/0x20a0
[ 173.457619][ T7904] ? __pfx_rtnl_newlink+0x10/0x10
[ 173.462714][ T7904] ? do_raw_spin_unlock+0x13c/0x8b0
[ 173.467984][ T7904] ? __mutex_lock+0x9a5/0xd70
[ 173.472727][ T7904] ? __mutex_lock+0x527/0xd70
[ 173.477486][ T7904] ? __pfx_rtnl_newlink+0x10/0x10
[ 173.482578][ T7904] rtnetlink_rcv_msg+0x73f/0xcf0
[ 173.487582][ T7904] ? rtnetlink_rcv_msg+0x1a7/0xcf0
[ 173.492769][ T7904] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 173.498313][ T7904] ? ref_tracker_free+0x643/0x7e0
[ 173.503390][ T7904] netlink_rcv_skb+0x1e3/0x430
[ 173.508301][ T7904] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 173.513835][ T7904] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 173.519221][ T7904] ? netlink_deliver_tap+0x2e/0x1b0
[ 173.524503][ T7904] netlink_unicast+0x7f0/0x990
[ 173.529325][ T7904] ? __pfx_netlink_unicast+0x10/0x10
[ 173.534639][ T7904] ? __virt_addr_valid+0x183/0x530
[ 173.539812][ T7904] ? __check_object_size+0x49c/0x900
[ 173.545134][ T7904] ? bpf_lsm_netlink_send+0x9/0x10
[ 173.550309][ T7904] netlink_sendmsg+0x8e4/0xcb0
[ 173.555182][ T7904] ? __pfx_netlink_sendmsg+0x10/0x10
[ 173.560549][ T7904] ? __import_iovec+0x536/0x820
[ 173.565470][ T7904] ? aa_sock_msg_perm+0x91/0x160
[ 173.570550][ T7904] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 173.575888][ T7904] ? security_socket_sendmsg+0x87/0xb0
[ 173.581408][ T7904] ? __pfx_netlink_sendmsg+0x10/0x10
[ 173.586752][ T7904] __sock_sendmsg+0x221/0x270
[ 173.591496][ T7904] ____sys_sendmsg+0x525/0x7d0
[ 173.596314][ T7904] ? __pfx_____sys_sendmsg+0x10/0x10
[ 173.601656][ T7904] __sys_sendmsg+0x2b0/0x3a0
[ 173.606420][ T7904] ? __pfx___sys_sendmsg+0x10/0x10
[ 173.611572][ T7904] ? vfs_write+0x7c4/0xc90
[ 173.616093][ T7904] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 173.622476][ T7904] ? do_syscall_64+0x100/0x230
[ 173.627318][ T7904] ? do_syscall_64+0xb6/0x230
[ 173.632048][ T7904] do_syscall_64+0xf3/0x230
[ 173.636662][ T7904] ? clear_bhb_loop+0x35/0x90
[ 173.641381][ T7904] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 173.647331][ T7904] RIP: 0033:0x7f76cfb779f9
[ 173.651787][ T7904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 173.671535][ T7904] RSP: 002b:00007f76d08a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 173.680019][ T7904] RAX: ffffffffffffffda RBX: 00007f76cfd05f80 RCX: 00007f76cfb779f9
[ 173.688137][ T7904] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003
[ 173.696127][ T7904] RBP: 00007f76d08a3090 R08: 0000000000000000 R09: 0000000000000000
[ 173.704118][ T7904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 173.712107][ T7904] R13: 0000000000000000 R14: 00007f76cfd05f80 R15: 00007ffea7809358
[ 173.720121][ T7904] </TASK>
[ 173.735071][ T7911] netlink: 'syz.4.663': attribute type 15 has an invalid length.
[ 173.745107][ T7911] __nla_validate_parse: 5 callbacks suppressed
[ 173.745122][ T7911] netlink: 24 bytes leftover after parsing attributes in process `syz.4.663'.
[ 173.885594][ T7927] netlink: 32 bytes leftover after parsing attributes in process `syz.2.667'.
[ 174.027262][ T7936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.667'.
[ 174.224147][ T7927] team0: Port device team_slave_0 removed
[ 174.246365][ T7933] netlink: 112 bytes leftover after parsing attributes in process `syz.2.667'.
[ 174.260059][ T7933] tipc: Enabled bearer <eth:bridge0>, priority 16
[ 174.295984][ T7910] lo speed is unknown, defaulting to 1000
[ 174.627930][ T7960] netlink: 44 bytes leftover after parsing attributes in process `syz.2.676'.
[ 175.055234][ T3026] hsr_slave_0: left promiscuous mode
[ 175.077118][ T5244] Bluetooth: hci1: command tx timeout
[ 175.078613][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'.
[ 175.083868][ T3026] hsr_slave_1: left promiscuous mode
[ 175.200385][ T3026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 175.209342][ T3026] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 175.224150][ T3026] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 175.234034][ T3026] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 175.304842][ T3026] veth1_macvtap: left promiscuous mode
[ 175.318522][ T3026] veth0_macvtap: left promiscuous mode
[ 175.332512][ T3026] veth1_vlan: left promiscuous mode
[ 175.342918][ T3026] veth0_vlan: left promiscuous mode
[ 175.371182][ T7996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.682'.
[ 175.390926][ T7996] netlink: 'syz.4.682': attribute type 3 has an invalid length.
[ 176.256074][ T3026] team0 (unregistering): Port device team_slave_1 removed
[ 176.332777][ T3026] team0 (unregistering): Port device team_slave_0 removed
[ 176.929776][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.678'.
[ 176.944805][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.678'.
[ 177.012700][ T7991] syz_tun: entered promiscuous mode
[ 177.052064][ T7991] syz_tun: left promiscuous mode
[ 177.153915][ T8015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.688'.
[ 177.160161][ T5244] Bluetooth: hci1: command tx timeout
[ 177.511108][ T7910] chnl_net:caif_netlink_parms(): no params data found
[ 177.779955][ T7910] bridge0: port 1(bridge_slave_0) entered blocking state
[ 177.812007][ T7910] bridge0: port 1(bridge_slave_0) entered disabled state
[ 177.827146][ T7910] bridge_slave_0: entered allmulticast mode
[ 177.834889][ T7910] bridge_slave_0: entered promiscuous mode
[ 177.854819][ T7910] bridge0: port 2(bridge_slave_1) entered blocking state
[ 177.865739][ T7910] bridge0: port 2(bridge_slave_1) entered disabled state
[ 177.878945][ T7910] bridge_slave_1: entered allmulticast mode
[ 177.889256][ T7910] bridge_slave_1: entered promiscuous mode
[ 177.953317][ T8054] bond0: entered promiscuous mode
[ 178.074773][ T8047] lo speed is unknown, defaulting to 1000
[ 178.119540][ T8054] team0: Port device bond0 removed
[ 178.227796][ T8054] team0: Port device geneve1 removed
[ 178.264226][ T8054] bond1: (slave vcan1): Releasing backup interface
[ 178.342191][ T7910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 178.377293][ T8065] bond0: left promiscuous mode
[ 178.383303][ T8065] 8021q: adding VLAN 0 to HW filter on device bond0
[ 178.413383][ T8065] team0: Port device bond0 added
[ 178.680685][ T7910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 178.811082][ T8087] veth0_vlan: entered allmulticast mode
[ 178.900730][ T7910] team0: Port device team_slave_0 added
[ 178.958709][ T7910] team0: Port device team_slave_1 added
[ 179.107671][ T7910] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 179.130783][ T7910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 179.228214][ T7910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 179.238981][ T5244] Bluetooth: hci1: command tx timeout
[ 179.373546][ T7910] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 179.397793][ T7910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 179.470450][ T7910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 179.759152][ T7910] hsr_slave_0: entered promiscuous mode
[ 179.822607][ T7910] hsr_slave_1: entered promiscuous mode
[ 179.862079][ T7910] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 179.877321][ T7910] Cannot create hsr debugfs directory
[ 180.140109][ T8114] netlink: 'syz.3.716': attribute type 4 has an invalid length.
[ 180.410534][ T8122] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 180.458524][ T8126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 180.603975][ T8130] __nla_validate_parse: 5 callbacks suppressed
[ 180.603997][ T8130] netlink: 60 bytes leftover after parsing attributes in process `syz.2.721'.
[ 180.634494][ T8131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.720'.
[ 180.804346][ T8138] netlink: 48 bytes leftover after parsing attributes in process `syz.1.720'.
[ 180.907473][ T7910] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 180.930690][ T7910] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 180.955618][ T7910] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 180.981432][ T7910] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 181.114778][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'.
[ 181.317320][ T7910] 8021q: adding VLAN 0 to HW filter on device bond0
[ 181.327108][ T5244] Bluetooth: hci1: command tx timeout
[ 181.376111][ T7910] 8021q: adding VLAN 0 to HW filter on device team0
[ 181.394031][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state
[ 181.401309][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 181.527880][ T6695] bridge0: port 2(bridge_slave_1) entered blocking state
[ 181.535088][ T6695] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 181.682536][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.731'.
[ 181.984259][ T7910] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 182.031298][ T8185] bond0: option mode: unable to set because the bond device is up
[ 182.109085][ T7910] veth0_vlan: entered promiscuous mode
[ 182.140961][ T7910] veth1_vlan: entered promiscuous mode
[ 182.249440][ T7910] veth0_macvtap: entered promiscuous mode
[ 182.266435][ T7910] veth1_macvtap: entered promiscuous mode
[ 182.310151][ T7910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 182.324847][ T7910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 182.355777][ T7910] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 182.468839][ T7910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 182.491467][ T7910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 182.508591][ T7910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 182.521611][ T7910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 182.548784][ T7910] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 182.692889][ T7910] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 182.721740][ T7910] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 182.731314][ T7910] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 182.740281][ T7910] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 182.981463][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 183.004784][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 183.016595][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'.
[ 183.136598][ T2950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 183.163341][ T2950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 183.505409][ T8233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 183.754871][ T8248] trusted_key: syz.3.754 sent an empty control message without MSG_MORE.
[ 183.946227][ T8259] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 184.110055][ T8263] netlink: 72 bytes leftover after parsing attributes in process `syz.1.758'.
[ 184.443617][ T8282] netlink: 36 bytes leftover after parsing attributes in process `syz.4.765'.
[ 184.540793][ T8281] netlink: 168 bytes leftover after parsing attributes in process `syz.1.766'.
[ 184.554262][ T8281] netlink: 'syz.1.766': attribute type 2 has an invalid length.
[ 184.562349][ T8284] bond0: entered promiscuous mode
[ 184.573061][ T8281] netlink: 60 bytes leftover after parsing attributes in process `syz.1.766'.
[ 184.671010][ T8289] pim6reg1: entered promiscuous mode
[ 184.694899][ T8289] pim6reg1: entered allmulticast mode
[ 184.987986][ T8305] bond0: entered promiscuous mode
[ 185.001217][ T8305] bond_slave_0: entered promiscuous mode
[ 185.015612][ T8305] bond_slave_1: entered promiscuous mode
[ 185.056991][ T8310] bond0: entered promiscuous mode
[ 185.139857][ T8318] batman_adv: batadv0: Removing interface: team0
[ 185.164496][ T8318] bridge_slave_0: left allmulticast mode
[ 185.188654][ T8318] bridge_slave_0: left promiscuous mode
[ 185.202306][ T8318] bridge0: port 1(bridge_slave_0) entered disabled state
[ 185.203173][ T8324] IPVS: set_ctl: invalid protocol: 32 127.0.0.1:20001
[ 185.228570][ T8318] bridge_slave_1: left allmulticast mode
[ 185.234293][ T8326] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma?
[ 185.251396][ T8318] bridge_slave_1: left promiscuous mode
[ 185.264651][ T8318] bridge0: port 2(bridge_slave_1) entered disabled state
[ 185.292714][ T8318] bond0: (slave bond_slave_0): Releasing backup interface
[ 185.304182][ T8318] bond_slave_0: left promiscuous mode
[ 185.328863][ T8331] netlink: 'syz.3.780': attribute type 11 has an invalid length.
[ 185.353129][ T8318] bond0: (slave bond_slave_1): Releasing backup interface
[ 185.362788][ T8318] bond_slave_1: left promiscuous mode
[ 185.422545][ T8318] team0: Port device team_slave_1 removed
[ 185.437936][ T8318] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 185.451255][ T8318] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 185.459192][ T8318] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 185.490037][ T8318] team0: Port device netdevsim0 removed
[ 185.515846][ T8319] team0: Port device bond0 removed
[ 185.544837][ T8319] team0: Port device netdevsim0 removed
[ 185.559294][ T8319] bond2: (slave vcan1): Releasing backup interface
[ 185.588030][ T8305] bond0: left promiscuous mode
[ 185.595113][ T8305] 8021q: adding VLAN 0 to HW filter on device bond0
[ 185.620521][ T8305] team0: Port device bond0 added
[ 185.625984][ T8310] bond0: left promiscuous mode
[ 185.636246][ T8310] 8021q: adding VLAN 0 to HW filter on device bond0
[ 185.666340][ T8310] team0: Port device bond0 added
[ 185.872416][ T3026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 185.892045][ T8342] __nla_validate_parse: 8 callbacks suppressed
[ 185.892069][ T8342] netlink: 68 bytes leftover after parsing attributes in process `syz.2.781'.
[ 185.958311][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.781'.
[ 186.008808][ T1126] tipc: Resetting bearer <eth:bridge0>
[ 186.847615][ T8362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.785'.
[ 187.029262][ T8369] set match dimension is over the limit!
[ 187.041384][ T3026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 187.092047][ T8371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.787'.
[ 187.207458][ T3026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 187.226508][ T8372] netlink: 'syz.3.786': attribute type 4 has an invalid length.
[ 187.255298][ T8378] netlink: 156 bytes leftover after parsing attributes in process `syz.2.788'.
[ 187.276376][ T8372] infiniband syz0: set down
[ 187.282525][ T8371] netlink: 201400 bytes leftover after parsing attributes in process `syz.1.787'.
[ 187.355931][ T8381] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.789'.
[ 187.388198][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 187.401898][ T8381] netlink: zone id is out of range
[ 187.403230][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 187.417373][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 187.428372][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 187.432251][ T3026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 187.450194][ T8381] netlink: zone id is out of range
[ 187.455382][ T8381] netlink: zone id is out of range
[ 187.461950][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 187.472305][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 187.476414][ T8381] netlink: zone id is out of range
[ 187.494569][ T8381] netlink: zone id is out of range
[ 187.501064][ T8381] netlink: zone id is out of range
[ 187.506240][ T8381] netlink: zone id is out of range
[ 187.512273][ T8381] netlink: zone id is out of range
[ 187.577090][ T58] lo speed is unknown, defaulting to 1000
[ 187.698170][ T58] lo speed is unknown, defaulting to 1000
[ 187.704035][ T8382] lo speed is unknown, defaulting to 1000
[ 187.816656][ T3026] bridge_slave_1: left allmulticast mode
[ 187.834747][ T3026] bridge_slave_1: left promiscuous mode
[ 187.848985][ T3026] bridge0: port 2(bridge_slave_1) entered disabled state
[ 187.913759][ T3026] bridge_slave_0: left allmulticast mode
[ 187.924991][ T3026] bridge_slave_0: left promiscuous mode
[ 187.947948][ T3026] bridge0: port 1(bridge_slave_0) entered disabled state
[ 188.598076][ T3026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 188.610471][ T3026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 188.624906][ T3026] bond0 (unregistering): Released all slaves
[ 188.647836][ T8408] tipc: Started in network mode
[ 188.654629][ T8408] tipc: Node identity , cluster identity 4711
[ 188.663904][ T8408] tipc: Failed to set node id, please configure manually
[ 188.671456][ T8408] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 188.768287][ T8422] IPVS: set_ctl: invalid protocol: 92 10.1.1.2:20004
[ 188.846145][ T8424] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[ 188.854815][ T8424] macsec1: entered allmulticast mode
[ 188.860418][ T8424] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[ 188.875255][ T8424] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[ 188.889301][ T8424] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[ 189.547955][ T8460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 189.567653][ T5244] Bluetooth: hci1: command tx timeout
[ 189.677769][ T8460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 189.726677][ T8460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 189.882664][ T8473] netlink: 56 bytes leftover after parsing attributes in process `syz.3.809'.
[ 189.956556][ T3026] hsr_slave_0: left promiscuous mode
[ 189.969664][ T3026] hsr_slave_1: left promiscuous mode
[ 189.984367][ T3026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 189.992935][ T3026] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 190.001750][ T3026] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 190.009875][ T3026] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 190.037607][ T3026] veth1_macvtap: left promiscuous mode
[ 190.043621][ T3026] veth0_macvtap: left promiscuous mode
[ 190.049428][ T3026] veth1_vlan: left promiscuous mode
[ 190.054941][ T3026] veth0_vlan: left promiscuous mode
[ 190.713813][ T3026] team0 (unregistering): Port device team_slave_1 removed
[ 190.765499][ T3026] team0 (unregistering): Port device team_slave_0 removed
[ 191.023345][ T8494] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:20004
[ 191.320893][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'.
[ 191.454467][ T8382] chnl_net:caif_netlink_parms(): no params data found
[ 191.464254][ T8498] netlink: 32 bytes leftover after parsing attributes in process `syz.3.816'.
[ 191.597324][ T8508] netlink: 'syz.3.816': attribute type 8 has an invalid length.
[ 191.630998][ T8505] netlink: 40 bytes leftover after parsing attributes in process `syz.1.819'.
[ 191.647485][ T5244] Bluetooth: hci1: command tx timeout
[ 191.744275][ T8382] bridge0: port 1(bridge_slave_0) entered blocking state
[ 191.751805][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state
[ 191.759594][ T8382] bridge_slave_0: entered allmulticast mode
[ 191.767216][ T8382] bridge_slave_0: entered promiscuous mode
[ 191.779261][ T8382] bridge0: port 2(bridge_slave_1) entered blocking state
[ 191.786665][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state
[ 191.794042][ T8382] bridge_slave_1: entered allmulticast mode
[ 191.801741][ T8382] bridge_slave_1: entered promiscuous mode
[ 191.906285][ T8513] netlink: 'syz.4.818': attribute type 12 has an invalid length.
[ 191.933635][ T8382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 191.969769][ T8382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 192.068061][ T8382] team0: Port device team_slave_0 added
[ 192.088974][ T8382] team0: Port device team_slave_1 added
[ 192.126603][ T8529] netlink: 'syz.2.822': attribute type 1 has an invalid length.
[ 192.137962][ T8529] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.822'.
[ 192.174593][ T8529] netlink: 'syz.2.822': attribute type 1 has an invalid length.
[ 192.193221][ T8382] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 192.201056][ T8382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 192.228489][ T8382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 192.242320][ T8382] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 192.249581][ T8382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 192.285569][ T8382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 192.308816][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.822'.
[ 192.360903][ T8531] bond2: entered allmulticast mode
[ 192.383714][ T8534] bond2 (unregistering): left allmulticast mode
[ 192.438835][ T8534] bond2 (unregistering): Released all slaves
[ 192.671482][ T8382] hsr_slave_0: entered promiscuous mode
[ 192.698510][ T8382] hsr_slave_1: entered promiscuous mode
[ 192.737023][ T8382] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 192.756703][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.826'.
[ 192.760121][ T8382] Cannot create hsr debugfs directory
[ 192.924549][ T8554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.828'.
[ 192.958235][ T8554] vlan2: entered promiscuous mode
[ 193.006984][ T8558] x_tables: duplicate underflow at hook 2
[ 193.030758][ T8558] netlink: 194076 bytes leftover after parsing attributes in process `syz.2.831'.
[ 193.131554][ T8561] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.831'.
[ 193.720631][ T5244] Bluetooth: hci1: command tx timeout
[ 193.815644][ T8590] syz.1.843[8590] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 193.815769][ T8590] syz.1.843[8590] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 193.992334][ T8382] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 194.015639][ T8597] xt_TCPMSS: Only works on TCP SYN packets
[ 194.016523][ T8382] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 194.027812][ T8597] netlink: 92 bytes leftover after parsing attributes in process `syz.1.844'.
[ 194.049287][ T8382] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 194.063243][ T8382] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 194.213858][ T8382] 8021q: adding VLAN 0 to HW filter on device bond0
[ 194.248592][ T8382] 8021q: adding VLAN 0 to HW filter on device team0
[ 194.273493][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state
[ 194.280795][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 194.308626][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state
[ 194.316296][ T3026] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 194.431910][ T8382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 194.679803][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[ 194.776273][ T8619] Bluetooth: hci3: unsupported parameter 64512
[ 194.790906][ T8382] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 194.817496][ T8619] Bluetooth: hci3: invalid length 0, exp 2 for type 2
[ 194.858747][ T8619] net_ratelimit: 330 callbacks suppressed
[ 194.858774][ T8619] netlink: zone id is out of range
[ 194.975404][ T8624] lo speed is unknown, defaulting to 1000
[ 194.984408][ T8382] veth0_vlan: entered promiscuous mode
[ 195.024479][ T8382] veth1_vlan: entered promiscuous mode
[ 195.296632][ T8638] sctp: [Deprecated]: syz.3.856 (pid 8638) Use of int in maxseg socket option.
[ 195.296632][ T8638] Use struct sctp_assoc_value instead
[ 195.326124][ T8382] veth0_macvtap: entered promiscuous mode
[ 195.368800][ T8382] veth1_macvtap: entered promiscuous mode
[ 195.425174][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 195.444407][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 195.476545][ T8382] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 195.547997][ T8644] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[ 195.566483][ T8646] hsr_slave_0: left promiscuous mode
[ 195.579173][ T8646] hsr_slave_1: left promiscuous mode
[ 195.611129][ T8650] x_tables: duplicate underflow at hook 2
[ 195.658118][ T8649] netlink: 'syz.4.858': attribute type 10 has an invalid length.
[ 195.666106][ T8649] bond0: (slave netdevsim0): no link monitoring support
[ 195.675387][ T8649] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details
[ 195.703608][ T8649] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 195.714653][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 195.730892][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 195.744358][ T8382] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 195.797953][ T5244] Bluetooth: hci1: command tx timeout
[ 195.813570][ T8644] netlink: 'syz.4.858': attribute type 29 has an invalid length.
[ 195.924101][ T8654] : renamed from veth0_vlan
[ 195.950254][ T3026] bond0: (slave netdevsim0): link status definitely up, 0 Mbps full duplex
[ 195.989346][ T3026] bond0: active interface up!
[ 196.000203][ T8653] netlink: 'syz.4.858': attribute type 29 has an invalid length.
[ 196.051291][ T8382] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 196.078781][ T8382] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 196.107164][ T8382] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 196.126166][ T8382] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 196.146241][ T8661] netlink: 'syz.1.863': attribute type 10 has an invalid length.
[ 196.217487][ T8661] team0: Port device netdevsim0 added
[ 196.229278][ T8666] netlink: 'syz.1.863': attribute type 1 has an invalid length.
[ 196.265756][ T8668] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 196.370770][ T8668] tunl0: Caught tx_queue_len zero misconfig
[ 196.402686][ T8661] netlink: 'syz.1.863': attribute type 10 has an invalid length.
[ 196.438084][ T8673] FAULT_INJECTION: forcing a failure.
[ 196.438084][ T8673] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 196.452352][ T8673] CPU: 0 UID: 0 PID: 8673 Comm: syz.3.866 Not tainted 6.11.0-rc2-syzkaller-00277-g600a91931057 #0
[ 196.452948][ T8661] team0: Failed to send options change via netlink (err -105)
[ 196.463065][ T8673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 196.463089][ T8673] Call Trace:
[ 196.463100][ T8673] <TASK>
[ 196.463111][ T8673] dump_stack_lvl+0x241/0x360
[ 196.463154][ T8673] ? __pfx_dump_stack_lvl+0x10/0x10
[ 196.463187][ T8673] ? __pfx__printk+0x10/0x10
[ 196.463219][ T8673] ? __pfx_lock_release+0x10/0x10
[ 196.463259][ T8673] should_fail_ex+0x3b0/0x4e0
[ 196.463290][ T8673] _copy_from_user+0x2f/0xe0
[ 196.463322][ T8673] copy_msghdr_from_user+0xae/0x680
[ 196.463361][ T8673] ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 196.463409][ T8673] __sys_sendmsg+0x23d/0x3a0
[ 196.463436][ T8673] ? __pfx___sys_sendmsg+0x10/0x10
[ 196.463460][ T8673] ? vfs_write+0x7c4/0xc90
[ 196.463533][ T8673] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 196.463566][ T8673] ? do_syscall_64+0x100/0x230
[ 196.463602][ T8673] ? do_syscall_64+0xb6/0x230
[ 196.463637][ T8673] do_syscall_64+0xf3/0x230
[ 196.463671][ T8673] ? clear_bhb_loop+0x35/0x90
[ 196.463700][ T8673] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 196.463725][ T8673] RIP: 0033:0x7fccf23779f9
[ 196.463833][ T8673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 196.463854][ T8673] RSP: 002b:00007fccf315b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 196.463882][ T8673] RAX: ffffffffffffffda RBX: 00007fccf2505f80 RCX: 00007fccf23779f9
[ 196.463900][ T8673] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003
[ 196.463916][ T8673] RBP: 00007fccf315b090 R08: 0000000000000000 R09: 0000000000000000
[ 196.463931][ T8673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 196.463946][ T8673] R13: 0000000000000000 R14: 00007fccf2505f80 R15: 00007fff54c11238
[ 196.463981][ T8673] </TASK>
[ 196.658339][ T8661] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[ 196.670072][ T8661] team0: Port device netdevsim0 removed
[ 196.682051][ T8661] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 196.714521][ T6695] team0: Failed to send port change of device bond0 via netlink (err -105)
[ 196.950513][ T8683] __nla_validate_parse: 4 callbacks suppressed
[ 196.950535][ T8683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.869'.
[ 197.018395][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 197.036586][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 197.120394][ T6695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 197.146053][ T6695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 197.254187][ T8692] tipc: Started in network mode
[ 197.267014][ T8692] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711
[ 197.288586][ T8692] tipc: Enabled bearer <eth:batadv0>, priority 10
[ 198.331334][ T8740] netlink: 40 bytes leftover after parsing attributes in process `syz.3.884'.
[ 198.363716][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'.
[ 198.373934][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'.
[ 198.417029][ T5287] tipc: Node number set to 8432298
[ 198.742387][ T8756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 198.759886][ T8756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 198.776273][ T8756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 198.814959][ T8756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 198.831616][ T8756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 199.110071][ T8767] netlink: 1 bytes leftover after parsing attributes in process `syz.4.892'.
[ 199.275321][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.895'.
[ 199.784571][ T3026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 199.880155][ T8784] lo speed is unknown, defaulting to 1000
[ 200.078359][ T3026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 200.163567][ T3026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 200.267718][ T3026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 200.375022][ T3026] bridge_slave_1: left allmulticast mode
[ 200.380912][ T3026] bridge_slave_1: left promiscuous mode
[ 200.386668][ T3026] bridge0: port 2(bridge_slave_1) entered disabled state
[ 200.397531][ T3026] bridge_slave_0: left allmulticast mode
[ 200.403213][ T3026] bridge_slave_0: left promiscuous mode
[ 200.409354][ T3026] bridge0: port 1(bridge_slave_0) entered disabled state
[ 201.207979][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 201.219663][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 201.229141][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 201.244153][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 201.272223][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 201.281819][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 201.297714][ T3026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 201.321338][ T3026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 201.344317][ T3026] bond0 (unregistering): Released all slaves
[ 201.423372][ T8806] netlink: 'syz.3.902': attribute type 10 has an invalid length.
[ 201.751709][ T8816] lo speed is unknown, defaulting to 1000
[ 201.891085][ T54] Bluetooth: hci4: command 0x0406 tx timeout
[ 201.891115][ T5234] Bluetooth: hci0: command 0x0406 tx timeout
[ 201.897195][ T5250] Bluetooth: hci2: command 0x0406 tx timeout
[ 201.897248][ T5250] Bluetooth: hci3: command 0x0406 tx timeout
[ 202.046912][ T8834] macvlan0: entered allmulticast mode
[ 202.069627][ T8834] veth1_vlan: entered allmulticast mode
[ 202.141353][ T8834] veth1_vlan: left allmulticast mode
[ 202.248266][ T8834] macvlan0 (unregistering): left allmulticast mode
[ 202.397212][ T8848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.912'.
[ 202.442703][ T8851] netlink: 632 bytes leftover after parsing attributes in process `syz.1.912'.
[ 202.571468][ T3026] hsr_slave_0: left promiscuous mode
[ 202.591776][ T3026] hsr_slave_1: left promiscuous mode
[ 202.611478][ T3026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 202.629530][ T3026] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 202.650932][ T3026] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 202.666925][ T3026] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 202.728362][ T3026] veth1_macvtap: left promiscuous mode
[ 202.733999][ T3026] veth0_macvtap: left promiscuous mode
[ 202.760761][ T3026] veth1_vlan: left promiscuous mode
[ 202.766203][ T3026] veth0_vlan: left promiscuous mode
[ 203.327555][ T5242] Bluetooth: hci1: command tx timeout
[ 203.339060][ T29] audit: type=1107 audit(1723284778.913:2): pid=8867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 203.782380][ T3026] team0 (unregistering): Port device team_slave_1 removed
[ 203.838916][ T3026] team0 (unregistering): Port device team_slave_0 removed
[ 204.414454][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'.
[ 204.454667][ T8860] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 204.479236][ T8877] netlink: 'syz.1.926': attribute type 16 has an invalid length.
[ 204.753587][ T8889] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 204.794527][ T8889] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 204.863380][ T8887] netlink: 2 bytes leftover after parsing attributes in process `syz.1.928'.
[ 204.887721][ T8816] chnl_net:caif_netlink_parms(): no params data found
[ 205.080624][ T8896] ip6tnl0: Caught tx_queue_len zero misconfig
[ 205.116426][ T8816] bridge0: port 1(bridge_slave_0) entered blocking state
[ 205.127322][ T8816] bridge0: port 1(bridge_slave_0) entered disabled state
[ 205.144305][ T8816] bridge_slave_0: entered allmulticast mode
[ 205.152227][ T8816] bridge_slave_0: entered promiscuous mode
[ 205.166210][ T8816] bridge0: port 2(bridge_slave_1) entered blocking state
[ 205.175420][ T8816] bridge0: port 2(bridge_slave_1) entered disabled state
[ 205.195573][ T8816] bridge_slave_1: entered allmulticast mode
[ 205.204650][ T8906] netlink: 80 bytes leftover after parsing attributes in process `syz.4.932'.
[ 205.208048][ T8816] bridge_slave_1: entered promiscuous mode
[ 205.248995][ T8906] bond0: entered promiscuous mode
[ 205.254304][ T8906] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[ 205.303501][ T8816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 205.341323][ T8908] team0: Port device bond0 removed
[ 205.360820][ T8908] bond0: (slave netdevsim0): Releasing backup interface
[ 205.369013][ T8908] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[ 205.396255][ T8816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 205.407043][ T5242] Bluetooth: hci1: command tx timeout
[ 205.465533][ T8906] bond0: left promiscuous mode
[ 205.473539][ T8906] 8021q: adding VLAN 0 to HW filter on device bond0
[ 205.483024][ T8906] team0: Port device bond0 added
[ 205.582400][ T8816] team0: Port device team_slave_0 added
[ 205.624188][ T8816] team0: Port device team_slave_1 added
[ 205.814468][ T8914] netlink: 24 bytes leftover after parsing attributes in process `syz.4.933'.
[ 205.886473][ T8816] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 205.893867][ T8816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 205.920685][ T8816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 205.951930][ T8918] netlink: 16 bytes leftover after parsing attributes in process `syz.3.934'.
[ 205.952801][ T8816] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 206.003385][ T8816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 206.079457][ T8816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 206.085073][ T8918] netlink: 32 bytes leftover after parsing attributes in process `syz.3.934'.
[ 206.225646][ T8816] hsr_slave_0: entered promiscuous mode
[ 206.259026][ T8816] hsr_slave_1: entered promiscuous mode
[ 206.267517][ T8816] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 206.275157][ T8816] Cannot create hsr debugfs directory
[ 206.544049][ T8939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.939'.
[ 206.594622][ T8939] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 206.604249][ T8939] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 206.613261][ T8939] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 206.622231][ T8939] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 206.646545][ T8939] vxlan0: entered promiscuous mode
[ 206.654241][ T8943] netlink: 80 bytes leftover after parsing attributes in process `syz.2.943'.
[ 206.702283][ T8943] bond0: entered promiscuous mode
[ 206.727979][ T8943] tipc: Resetting bearer <eth:bridge0>
[ 206.739750][ T8943] team0: Port device bond0 removed
[ 206.771231][ T8946] netlink: 'syz.4.944': attribute type 30 has an invalid length.
[ 206.779804][ T8946] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[ 206.789184][ T8946] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[ 206.799274][ T8943] bond0: left promiscuous mode
[ 206.811259][ T8943] 8021q: adding VLAN 0 to HW filter on device bond0
[ 206.822159][ T8943] team0: Port device bond0 added
[ 206.868869][ T8945] vlan0: entered allmulticast mode
[ 206.876476][ T8945] bond0: entered allmulticast mode
[ 206.902388][ T8945] bond0: left allmulticast mode
[ 207.221259][ T8816] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 207.257588][ T8816] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 207.281791][ T8816] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 207.300206][ T8816] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 207.361104][ T8957] netlink: 'syz.1.947': attribute type 12 has an invalid length.
[ 207.378751][ T8956] netlink: 'syz.1.947': attribute type 12 has an invalid length.
[ 207.477910][ T5242] Bluetooth: hci1: command tx timeout
[ 207.509125][ T8959] netlink: 'syz.3.948': attribute type 10 has an invalid length.
[ 207.533322][ T8959] 8021q: adding VLAN 0 to HW filter on device team0
[ 207.781488][ T8816] 8021q: adding VLAN 0 to HW filter on device bond0
[ 207.855398][ T8816] 8021q: adding VLAN 0 to HW filter on device team0
[ 207.894441][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state
[ 207.901727][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 207.962961][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state
[ 207.970232][ T3026] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 208.073990][ T8971] netlink: 'syz.1.954': attribute type 2 has an invalid length.
[ 208.083074][ T8977] __nla_validate_parse: 3 callbacks suppressed
[ 208.083096][ T8977] netlink: 80 bytes leftover after parsing attributes in process `syz.4.955'.
[ 208.173626][ T8977] bond0: entered promiscuous mode
[ 208.293679][ T8977] team0: Port device bond0 removed
[ 208.352722][ T8986] bond0: left promiscuous mode
[ 208.358994][ T8986] 8021q: adding VLAN 0 to HW filter on device bond0
[ 208.363169][ T8988] netlink: 80 bytes leftover after parsing attributes in process `syz.2.958'.
[ 208.368055][ T8986] team0: Port device bond0 added
[ 208.433860][ T8988] bond0: entered promiscuous mode
[ 208.504482][ T8988] tipc: Resetting bearer <eth:bridge0>
[ 208.540378][ T8988] team0: Port device bond0 removed
[ 208.588413][ T8995] bond0: left promiscuous mode
[ 208.594672][ T8995] 8021q: adding VLAN 0 to HW filter on device bond0
[ 208.608311][ T8995] team0: Port device bond0 added
[ 208.683209][ T8816] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 208.870369][ T8816] veth0_vlan: entered promiscuous mode
[ 208.945265][ T8816] veth1_vlan: entered promiscuous mode
[ 209.062184][ T8816] veth0_macvtap: entered promiscuous mode
[ 209.111533][ T8816] veth1_macvtap: entered promiscuous mode
[ 209.155995][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 209.167911][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 209.180380][ T8816] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 209.209498][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 209.224660][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 209.237781][ T8816] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 209.260954][ T8816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 209.270375][ T8816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 209.279385][ T8816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 209.288649][ T8816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 209.475618][ T6695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 209.500759][ T6695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 209.557191][ T5242] Bluetooth: hci1: command tx timeout
[ 209.615549][ T2950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 209.625773][ T2950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 209.988742][ T9041] netlink: 32 bytes leftover after parsing attributes in process `syz.1.971'.
[ 210.317969][ T9058] SET target dimension over the limit!
[ 210.335226][ T9059] Cannot find set identified by id 0 to match
[ 210.338114][ T9058] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.974'.
[ 210.344484][ T9060] netlink: 596 bytes leftover after parsing attributes in process `syz.2.975'.
[ 210.504153][ T9056] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 210.513048][ T9056] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 210.522070][ T9056] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 210.530909][ T9056] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 210.621033][ T9068] FAULT_INJECTION: forcing a failure.
[ 210.621033][ T9068] name failslab, interval 1, probability 0, space 0, times 0
[ 210.647899][ T9068] CPU: 1 UID: 0 PID: 9068 Comm: syz.1.977 Not tainted 6.11.0-rc2-syzkaller-00277-g600a91931057 #0
[ 210.658577][ T9068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 210.668681][ T9068] Call Trace:
[ 210.672007][ T9068] <TASK>
[ 210.674980][ T9068] dump_stack_lvl+0x241/0x360
[ 210.679723][ T9068] ? __pfx_dump_stack_lvl+0x10/0x10
[ 210.684992][ T9068] ? __pfx__printk+0x10/0x10
[ 210.689648][ T9068] ? __kmalloc_node_noprof+0xb7/0x440
[ 210.695067][ T9068] ? __pfx___might_resched+0x10/0x10
[ 210.700415][ T9068] ? __asan_memset+0x23/0x50
[ 210.705058][ T9068] should_fail_ex+0x3b0/0x4e0
[ 210.709793][ T9068] should_failslab+0xac/0x100
[ 210.714550][ T9068] __kmalloc_node_noprof+0xdf/0x440
[ 210.719793][ T9068] ? __kvmalloc_node_noprof+0x72/0x190
[ 210.725322][ T9068] __kvmalloc_node_noprof+0x72/0x190
[ 210.730668][ T9068] alloc_netdev_mqs+0xa49/0x1000
[ 210.735663][ T9068] rtnl_create_link+0x2f9/0xc20
[ 210.740570][ T9068] rtnl_newlink+0x1423/0x20a0
[ 210.745301][ T9068] ? rtnl_newlink+0xb01/0x20a0
[ 210.750140][ T9068] ? __pfx_rtnl_newlink+0x10/0x10
[ 210.755213][ T9068] ? __pfx___mutex_trylock_common+0x10/0x10
[ 210.761173][ T9068] ? rcu_is_watching+0x15/0xb0
[ 210.765987][ T9068] ? trace_contention_end+0x3c/0x120
[ 210.771421][ T9068] ? __mutex_lock+0x2ef/0xd70
[ 210.776160][ T9068] ? __pfx_lock_release+0x10/0x10
[ 210.781254][ T9068] ? __pfx_rtnl_newlink+0x10/0x10
[ 210.786338][ T9068] rtnetlink_rcv_msg+0x73f/0xcf0
[ 210.791338][ T9068] ? rtnetlink_rcv_msg+0x1a7/0xcf0
[ 210.796526][ T9068] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 210.802053][ T9068] ? ref_tracker_free+0x643/0x7e0
[ 210.807135][ T9068] netlink_rcv_skb+0x1e3/0x430
[ 210.811943][ T9068] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 210.817456][ T9068] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 210.822834][ T9068] ? netlink_deliver_tap+0x2e/0x1b0
[ 210.828095][ T9068] netlink_unicast+0x7f0/0x990
[ 210.832923][ T9068] ? __pfx_netlink_unicast+0x10/0x10
[ 210.838427][ T9068] ? __virt_addr_valid+0x183/0x530
[ 210.843588][ T9068] ? __check_object_size+0x49c/0x900
[ 210.848914][ T9068] ? bpf_lsm_netlink_send+0x9/0x10
[ 210.854073][ T9068] netlink_sendmsg+0x8e4/0xcb0
[ 210.858913][ T9068] ? __pfx_netlink_sendmsg+0x10/0x10
[ 210.864345][ T9068] ? __import_iovec+0x536/0x820
[ 210.869264][ T9068] ? aa_sock_msg_perm+0x91/0x160
[ 210.874255][ T9068] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 210.879843][ T9068] ? security_socket_sendmsg+0x87/0xb0
[ 210.885377][ T9068] ? __pfx_netlink_sendmsg+0x10/0x10
[ 210.890722][ T9068] __sock_sendmsg+0x221/0x270
[ 210.895477][ T9068] ____sys_sendmsg+0x525/0x7d0
[ 210.900313][ T9068] ? __pfx_____sys_sendmsg+0x10/0x10
[ 210.905671][ T9068] __sys_sendmsg+0x2b0/0x3a0
[ 210.910414][ T9068] ? __pfx___sys_sendmsg+0x10/0x10
[ 210.915578][ T9068] ? vfs_write+0x7c4/0xc90
[ 210.920122][ T9068] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 210.926505][ T9068] ? do_syscall_64+0x100/0x230
[ 210.931342][ T9068] ? do_syscall_64+0xb6/0x230
[ 210.936082][ T9068] do_syscall_64+0xf3/0x230
[ 210.940638][ T9068] ? clear_bhb_loop+0x35/0x90
[ 210.945360][ T9068] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 210.951388][ T9068] RIP: 0033:0x7f76cfb779f9
[ 210.955840][ T9068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 210.975496][ T9068] RSP: 002b:00007f76d08a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 210.984002][ T9068] RAX: ffffffffffffffda RBX: 00007f76cfd05f80 RCX: 00007f76cfb779f9
[ 210.992051][ T9068] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003
[ 211.000073][ T9068] RBP: 00007f76d08a3090 R08: 0000000000000000 R09: 0000000000000000
[ 211.008092][ T9068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 211.016207][ T9068] R13: 0000000000000000 R14: 00007f76cfd05f80 R15: 00007ffea7809358
[ 211.024248][ T9068] </TASK>
[ 211.221361][ T9074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.980'.
[ 211.231839][ T9079] netlink: 132 bytes leftover after parsing attributes in process `syz.3.982'.
[ 211.265423][ T9080] netlink: 'syz.2.979': attribute type 3 has an invalid length.
[ 211.284440][ T9080] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.979'.
[ 211.402062][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.979'.
[ 211.851525][ T9103] netlink: 80 bytes leftover after parsing attributes in process `syz.4.990'.
[ 212.117690][ T5242] Bluetooth: hci5: command tx timeout
[ 212.209229][ T9122] pimreg: entered allmulticast mode
[ 212.631641][ T1126] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 213.656218][ T9149] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 213.672115][ T9150] __nla_validate_parse: 6 callbacks suppressed
[ 213.672137][ T9150] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1005'.
[ 213.692766][ T1126] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 213.903529][ T1126] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 213.978988][ T9150] team0: Port device bond0 removed
[ 214.066461][ T9150] bond1: (slave vcan1): Releasing backup interface
[ 214.118696][ T9154] bond0: left promiscuous mode
[ 214.125327][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 214.125862][ T9154] 8021q: adding VLAN 0 to HW filter on device bond0
[ 214.147095][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 214.149807][ T9154] team0: Port device bond0 added
[ 214.164450][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 214.166030][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1008'.
[ 214.201801][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 214.213504][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 214.222614][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 214.272079][ T1126] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 214.293032][ T9164] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1009'.
[ 214.313357][ T9164] hsr0: entered allmulticast mode
[ 214.336288][ T9164] hsr_slave_0: entered allmulticast mode
[ 214.350870][ T9164] hsr_slave_1: entered allmulticast mode
[ 214.511645][ T9172] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1015'.
[ 214.524627][ T9162] lo speed is unknown, defaulting to 1000
[ 214.543673][ T9170] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[ 214.578991][ T9172] bond0: entered promiscuous mode
[ 214.597315][ T9172] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 214.631023][ T1126] bridge_slave_1: left allmulticast mode
[ 214.655793][ T1126] bridge_slave_1: left promiscuous mode
[ 214.670121][ T1126] bridge0: port 2(bridge_slave_1) entered disabled state
[ 214.697261][ T1126] bridge_slave_0: left allmulticast mode
[ 214.711403][ T1126] bridge_slave_0: left promiscuous mode
[ 214.724417][ T1126] bridge0: port 1(bridge_slave_0) entered disabled state
[ 215.428720][ T1126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 215.441607][ T1126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 215.454179][ T1126] bond0 (unregistering): Released all slaves
[ 215.480701][ T9172] team0: Port device bond0 removed
[ 215.540984][ T9172] bond0: (slave netdevsim0): Releasing backup interface
[ 215.562435][ T9172] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[ 215.594709][ T9175] bond0: left promiscuous mode
[ 215.601629][ T9175] 8021q: adding VLAN 0 to HW filter on device bond0
[ 215.622272][ T9175] team0: Port device bond0 added
[ 215.771779][ T9196] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1021'.
[ 216.280837][ T5244] Bluetooth: hci1: command tx timeout
[ 216.423180][ T9219] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1028'.
[ 216.453278][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'.
[ 216.470304][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'.
[ 216.534169][ T1126] hsr_slave_0: left promiscuous mode
[ 216.553836][ T1126] hsr_slave_1: left promiscuous mode
[ 216.579309][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 216.608185][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 216.625134][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 216.645981][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 216.725934][ T1126] veth1_macvtap: left promiscuous mode
[ 216.731850][ T1126] veth0_macvtap: left promiscuous mode
[ 216.746880][ T1126] veth1_vlan: left promiscuous mode
[ 216.752745][ T1126] veth0_vlan: left promiscuous mode
[ 216.828404][ T9241] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1032'.
[ 217.476296][ T1126] team0 (unregistering): Port device team_slave_1 removed
[ 217.530443][ T1126] team0 (unregistering): Port device team_slave_0 removed
[ 218.024127][ T9162] chnl_net:caif_netlink_parms(): no params data found
[ 218.039714][ T9232] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1030'.
[ 218.251722][ T9162] bridge0: port 1(bridge_slave_0) entered blocking state
[ 218.259756][ T9162] bridge0: port 1(bridge_slave_0) entered disabled state
[ 218.267144][ T9162] bridge_slave_0: entered allmulticast mode
[ 218.277659][ T9162] bridge_slave_0: entered promiscuous mode
[ 218.286311][ T9162] bridge0: port 2(bridge_slave_1) entered blocking state
[ 218.293938][ T9162] bridge0: port 2(bridge_slave_1) entered disabled state
[ 218.302256][ T9162] bridge_slave_1: entered allmulticast mode
[ 218.310256][ T9162] bridge_slave_1: entered promiscuous mode
[ 218.357324][ T5244] Bluetooth: hci1: command tx timeout
[ 218.369533][ T9162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 218.382177][ T9162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 218.431499][ T9162] team0: Port device team_slave_0 added
[ 218.443622][ T9162] team0: Port device team_slave_1 added
[ 218.475370][ T9162] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 218.482715][ T9162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 218.508824][ T9162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 218.522163][ T9162] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 218.529362][ T9162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 218.557657][ T9162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 218.609034][ T9162] hsr_slave_0: entered promiscuous mode
[ 218.615597][ T9162] hsr_slave_1: entered promiscuous mode
[ 218.622871][ T9162] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 218.631043][ T9162] Cannot create hsr debugfs directory
[ 219.024974][ T9162] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 219.035872][ T9162] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 219.047581][ T9162] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 219.058726][ T9162] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 219.085728][ T9162] bridge0: port 2(bridge_slave_1) entered blocking state
[ 219.093062][ T9162] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 219.100815][ T9162] bridge0: port 1(bridge_slave_0) entered blocking state
[ 219.108076][ T9162] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 219.122385][ T52] bridge0: port 1(bridge_slave_0) entered disabled state
[ 219.131442][ T52] bridge0: port 2(bridge_slave_1) entered disabled state
[ 219.213017][ T9162] 8021q: adding VLAN 0 to HW filter on device bond0
[ 219.242257][ T9162] 8021q: adding VLAN 0 to HW filter on device team0
[ 219.255973][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state
[ 219.263209][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 219.282010][ T6695] bridge0: port 2(bridge_slave_1) entered blocking state
[ 219.289210][ T6695] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 219.493418][ T9162] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 219.546320][ T9162] veth0_vlan: entered promiscuous mode
[ 219.565758][ T9162] veth1_vlan: entered promiscuous mode
[ 219.602470][ T9162] veth0_macvtap: entered promiscuous mode
[ 219.614813][ T9162] veth1_macvtap: entered promiscuous mode
[ 219.637992][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 219.649315][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 219.661026][ T9162] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 219.672854][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 219.683591][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 219.696032][ T9162] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 219.716201][ T9162] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 219.725593][ T9162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 219.734786][ T9162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 219.746796][ T9162] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 219.832394][ T3026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 219.840354][ T3026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 219.872954][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 219.881650][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 222.594096][ T1126] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 223.816012][ T5242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 223.826193][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 223.836069][ T5242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 223.845959][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 223.855115][ T5242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 223.864957][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 223.910800][ T9254] lo speed is unknown, defaulting to 1000
[ 224.167584][ T9254] chnl_net:caif_netlink_parms(): no params data found
[ 224.250817][ T9254] bridge0: port 1(bridge_slave_0) entered blocking state
[ 224.258508][ T9254] bridge0: port 1(bridge_slave_0) entered disabled state
[ 224.265764][ T9254] bridge_slave_0: entered allmulticast mode
[ 224.272961][ T9254] bridge_slave_0: entered promiscuous mode
[ 224.282965][ T9254] bridge0: port 2(bridge_slave_1) entered blocking state
[ 224.290746][ T9254] bridge0: port 2(bridge_slave_1) entered disabled state
[ 224.298668][ T9254] bridge_slave_1: entered allmulticast mode
[ 224.306042][ T9254] bridge_slave_1: entered promiscuous mode
[ 224.344654][ T9254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 224.358078][ T9254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 224.399022][ T9254] team0: Port device team_slave_0 added
[ 224.408484][ T9254] team0: Port device team_slave_1 added
[ 224.441682][ T9254] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 224.449219][ T9254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 224.475650][ T9254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 224.489775][ T9254] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 224.497185][ T9254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 224.524323][ T9254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 224.577007][ T9254] hsr_slave_0: entered promiscuous mode
[ 224.584080][ T9254] hsr_slave_1: entered promiscuous mode
[ 224.590695][ T9254] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 224.600398][ T9254] Cannot create hsr debugfs directory
[ 225.051959][ T1126] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 225.118922][ T1126] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 225.201577][ T1126] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 225.305108][ T1126] bridge_slave_1: left allmulticast mode
[ 225.311220][ T1126] bridge_slave_1: left promiscuous mode
[ 225.319092][ T1126] bridge0: port 2(bridge_slave_1) entered disabled state
[ 225.328770][ T1126] bridge_slave_0: left allmulticast mode
[ 225.335550][ T1126] bridge_slave_0: left promiscuous mode
[ 225.341914][ T1126] bridge0: port 1(bridge_slave_0) entered disabled state
[ 225.770477][ T1126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 225.782819][ T1126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 225.794605][ T1126] bond0 (unregistering): Released all slaves
[ 225.957517][ T5244] Bluetooth: hci1: command tx timeout
[ 226.178911][ T1126] hsr_slave_0: left promiscuous mode
[ 226.185493][ T1126] hsr_slave_1: left promiscuous mode
[ 226.204337][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 226.212236][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 226.221004][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 226.228653][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 226.311549][ T9265] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20002
[ 226.379313][ T1126] veth1_macvtap: left promiscuous mode
[ 226.384951][ T1126] veth0_macvtap: left promiscuous mode
[ 226.393134][ T1126] veth1_vlan: left promiscuous mode
[ 226.405360][ T1126] veth0_vlan: left promiscuous mode
[ 227.071005][ T1126] team0 (unregistering): Port device team_slave_1 removed
[ 227.125462][ T1126] team0 (unregistering): Port device team_slave_0 removed
[ 227.677266][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1037'.
[ 227.825911][ T9285] team0: Device sit1 is of different type
[ 227.923348][ T9287] lo speed is unknown, defaulting to 1000
[ 228.038795][ T5244] Bluetooth: hci1: command tx timeout
[ 228.103653][ T9254] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 228.146397][ T9254] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 228.228243][ T9254] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 228.297245][ T9254] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 228.613133][ T9254] 8021q: adding VLAN 0 to HW filter on device bond0
[ 228.666589][ T9254] 8021q: adding VLAN 0 to HW filter on device team0
[ 228.695050][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state
[ 228.702353][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 228.726124][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state
[ 228.733438][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 228.822741][ T9313] tipc: Can't bind to reserved service type 0
[ 228.956423][ T9316] Timeout policy `syz0' can only be used by L3 protocol number 0
[ 229.016098][ T9321] bond0: option mode: unable to set because the bond device is up
[ 229.418527][ T9334] bond0: entered promiscuous mode
[ 229.489905][ T9254] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 229.538865][ T9334] team0: Port device bond0 removed
[ 229.675437][ T9336] bond0: left promiscuous mode
[ 229.705287][ T9336] 8021q: adding VLAN 0 to HW filter on device bond0
[ 229.750496][ T9336] team0: Port device bond0 added
[ 229.909667][ T9254] veth0_vlan: entered promiscuous mode
[ 229.934722][ T9254] veth1_vlan: entered promiscuous mode
[ 230.013267][ T9254] veth0_macvtap: entered promiscuous mode
[ 230.014847][ T9350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1056'.
[ 230.033850][ T9254] veth1_macvtap: entered promiscuous mode
[ 230.090877][ T9348] batman_adv: batadv0: Adding interface: wlan1
[ 230.100313][ T9348] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 230.127927][ T5244] Bluetooth: hci1: command tx timeout
[ 230.169641][ T9348] batman_adv: batadv0: Interface activated: wlan1
[ 230.234182][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 230.270342][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 230.298439][ T9254] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 230.308919][ T9348] batman_adv: batadv0: Interface deactivated: wlan1
[ 230.379211][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 230.405838][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 230.422268][ T9254] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 230.482616][ T9361] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1058'.
[ 230.507024][ T9361] netlink: 'syz.2.1058': attribute type 1 has an invalid length.
[ 230.516566][ T9361] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1058'.
[ 230.523280][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1059'.
[ 230.563913][ T9348] batman_adv: batadv0: Removing interface: wlan1
[ 230.587967][ T9254] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 230.608598][ T9254] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 230.620842][ T9254] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 230.629767][ T9254] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 230.848284][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'.
[ 230.860530][ T9363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1058'.
[ 230.894690][ T9369] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1060'.
[ 231.235965][ T6700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 231.254174][ T9379] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2
[ 231.265824][ T6700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 231.365327][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 231.391139][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 231.601239][ T9390] lo speed is unknown, defaulting to 1000
[ 232.090595][ T9414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1069'.
[ 232.360399][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'.
[ 232.481965][ T9419] lo speed is unknown, defaulting to 1000
[ 232.588848][ T9401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 233.671518][ T3026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 234.122998][ T3026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 234.199242][ T3026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 234.264634][ T3026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 234.349943][ T3026] bridge_slave_1: left allmulticast mode
[ 234.355655][ T3026] bridge_slave_1: left promiscuous mode
[ 234.362506][ T3026] bridge0: port 2(bridge_slave_1) entered disabled state
[ 234.373184][ T3026] bridge_slave_0: left allmulticast mode
[ 234.379411][ T3026] bridge_slave_0: left promiscuous mode
[ 234.385173][ T3026] bridge0: port 1(bridge_slave_0) entered disabled state
[ 234.830959][ T3026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 234.844664][ T3026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 234.857163][ T3026] bond0 (unregistering): Released all slaves
[ 235.209814][ T9485] netlink: 'syz.3.1077': attribute type 29 has an invalid length.
[ 235.241119][ T9475] netlink: 'syz.3.1077': attribute type 29 has an invalid length.
[ 235.521329][ T9494] hsr0: entered promiscuous mode
[ 235.708433][ T9498] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1081'.
[ 235.737457][ T5242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 235.750957][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 235.762066][ T5242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 235.767031][ T3026] hsr_slave_0: left promiscuous mode
[ 235.780547][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 235.801198][ T3026] hsr_slave_1: left promiscuous mode
[ 235.809464][ T5242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 235.817256][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 235.824696][ T3026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 235.853154][ T3026] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 235.867202][ T3026] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 235.874810][ T3026] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 235.927919][ T3026] veth1_macvtap: left promiscuous mode
[ 235.933566][ T3026] veth0_macvtap: left promiscuous mode
[ 235.939990][ T3026] veth1_vlan: left promiscuous mode
[ 235.945399][ T3026] veth0_vlan: left promiscuous mode
[ 236.248044][ T9513] sctp: [Deprecated]: syz.2.1084 (pid 9513) Use of int in max_burst socket option.
[ 236.248044][ T9513] Use struct sctp_assoc_value instead
[ 236.662155][ T3026] team0 (unregistering): Port device team_slave_1 removed
[ 236.720792][ T3026] team0 (unregistering): Port device team_slave_0 removed
[ 237.262998][ T9507] bond0: option mode: unable to set because the bond device is up
[ 237.333992][ T9513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1084'.
[ 237.411612][ T9500] lo speed is unknown, defaulting to 1000
[ 237.421039][ T9521] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1085'.
[ 237.467950][ T9521] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1085'.
[ 237.878947][ T5244] Bluetooth: hci1: command tx timeout
[ 237.975623][ T9537] tipc: Started in network mode
[ 238.030338][ T9537] tipc: Node identity , cluster identity 4711
[ 238.072294][ T9537] tipc: Failed to obtain node identity
[ 238.108120][ T9537] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[ 238.465824][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1093'.
[ 238.704755][ T9500] chnl_net:caif_netlink_parms(): no params data found
[ 239.012320][ T9568] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1098'.
[ 239.072514][ T9568] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 239.212276][ T9568] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 239.220296][ T9500] bridge0: port 1(bridge_slave_0) entered blocking state
[ 239.240030][ T9500] bridge0: port 1(bridge_slave_0) entered disabled state
[ 239.248419][ T9500] bridge_slave_0: entered allmulticast mode
[ 239.256077][ T9500] bridge_slave_0: entered promiscuous mode
[ 239.284133][ T9500] bridge0: port 2(bridge_slave_1) entered blocking state
[ 239.314298][ T9500] bridge0: port 2(bridge_slave_1) entered disabled state
[ 239.327131][ T9500] bridge_slave_1: entered allmulticast mode
[ 239.338276][ T9500] bridge_slave_1: entered promiscuous mode
[ 239.441667][ T9500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 239.455675][ T9500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 239.472859][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'.
[ 239.484342][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'.
[ 239.540831][ T9500] team0: Port device team_slave_0 added
[ 239.552272][ T9500] team0: Port device team_slave_1 added
[ 239.600713][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 239.609084][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 239.635487][ T9500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 239.694276][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 239.713603][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 239.751307][ T9500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 239.763855][ T9583] batman_adv: batadv0: Adding interface: wlan1
[ 239.776142][ T9583] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 239.848502][ T9583] batman_adv: batadv0: Interface activated: wlan1
[ 239.910082][ T9590] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1104'.
[ 239.952834][ T9590] bond0: entered promiscuous mode
[ 239.967339][ T5242] Bluetooth: hci1: command tx timeout
[ 239.984763][ T9500] hsr_slave_0: entered promiscuous mode
[ 240.000949][ T9500] hsr_slave_1: entered promiscuous mode
[ 240.013809][ T9500] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 240.023421][ T9500] Cannot create hsr debugfs directory
[ 240.056348][ T9590] team0: Port device bond0 removed
[ 240.133485][ T9596] bond0: left promiscuous mode
[ 240.144910][ T9596] 8021q: adding VLAN 0 to HW filter on device bond0
[ 240.172171][ T9596] team0: Port device bond0 added
[ 240.382674][ T9610] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1112'.
[ 240.494191][ T9611] bond0: option mode: unable to set because the bond device is up
[ 240.663858][ T5236] IPVS: starting estimator thread 0...
[ 240.788257][ T9620] IPVS: using max 16 ests per chain, 38400 per kthread
[ 240.862176][ T9625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 240.915943][ T9500] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 240.929283][ T9500] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 240.941356][ T9500] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 240.955668][ T9500] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 241.099635][ T9500] 8021q: adding VLAN 0 to HW filter on device bond0
[ 241.141290][ T9500] 8021q: adding VLAN 0 to HW filter on device team0
[ 241.162906][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state
[ 241.170243][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 241.223061][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state
[ 241.230339][ T3026] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 241.253081][ T9633] __nla_validate_parse: 1 callbacks suppressed
[ 241.253109][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1118'.
[ 241.539083][ T9642] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1120'.
[ 241.601260][ T9642] bond0: entered promiscuous mode
[ 241.681118][ T9642] tipc: Resetting bearer <eth:bridge0>
[ 241.710711][ T9642] team0: Port device bond0 removed
[ 241.821450][ T9648] bond0: left promiscuous mode
[ 241.869505][ T9648] 8021q: adding VLAN 0 to HW filter on device bond0
[ 241.918073][ T9648] team0: Port device bond0 added
[ 242.035802][ T9500] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 242.047603][ T5242] Bluetooth: hci1: command 0x040f tx timeout
[ 242.048229][ T9668] xt_TCPMSS: Only works on TCP SYN packets
[ 242.119057][ T9668] rdma_op ffff88805be5c9f0 conn xmit_rdma 0000000000000000
[ 242.219893][ T9668] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1126'.
[ 242.255312][ T9669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1125'.
[ 242.428883][ T9675] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 242.479252][ T9678] wg2: entered promiscuous mode
[ 242.484198][ T9678] wg2: entered allmulticast mode
[ 242.539619][ T9500] veth0_vlan: entered promiscuous mode
[ 242.564995][ T9500] veth1_vlan: entered promiscuous mode
[ 242.680888][ T9500] veth0_macvtap: entered promiscuous mode
[ 242.699250][ T9500] veth1_macvtap: entered promiscuous mode
[ 242.819981][ T9500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 242.841229][ T9500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 242.887253][ T9500] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 242.934240][ T9500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 242.956608][ T9500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 243.001892][ T9500] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 243.041676][ T9500] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 243.062023][ T9500] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 243.081219][ T9500] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 243.091874][ T9695] FAULT_INJECTION: forcing a failure.
[ 243.091874][ T9695] name failslab, interval 1, probability 0, space 0, times 0
[ 243.096018][ T9500] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 243.142179][ T9695] CPU: 1 UID: 0 PID: 9695 Comm: syz.4.1133 Not tainted 6.11.0-rc2-syzkaller-00277-g600a91931057 #0
[ 243.152943][ T9695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 243.163064][ T9695] Call Trace:
[ 243.166388][ T9695] <TASK>
[ 243.169362][ T9695] dump_stack_lvl+0x241/0x360
[ 243.174106][ T9695] ? __pfx_dump_stack_lvl+0x10/0x10
[ 243.179369][ T9695] ? __pfx__printk+0x10/0x10
[ 243.181928][ T9691] xt_ecn: cannot match TCP bits for non-tcp packets
[ 243.184007][ T9695] ? ref_tracker_alloc+0x332/0x490
[ 243.184048][ T9695] should_fail_ex+0x3b0/0x4e0
[ 243.200575][ T9695] ? skb_clone+0x20c/0x390
[ 243.205043][ T9695] should_failslab+0xac/0x100
[ 243.205142][ T9691] xt_l2tp: v2 tid > 0xffff: 150994944
[ 243.209756][ T9695] ? skb_clone+0x20c/0x390
[ 243.209799][ T9695] kmem_cache_alloc_noprof+0x6c/0x2a0
[ 243.209829][ T9695] skb_clone+0x20c/0x390
[ 243.209861][ T9695] __netlink_deliver_tap+0x3cc/0x7c0
[ 243.209908][ T9695] ? netlink_deliver_tap+0x2e/0x1b0
[ 243.241495][ T9695] netlink_deliver_tap+0x19d/0x1b0
[ 243.246849][ T9695] netlink_unicast+0x7be/0x990
[ 243.251682][ T9695] ? __pfx_netlink_unicast+0x10/0x10
[ 243.256994][ T9695] ? __virt_addr_valid+0x183/0x530
[ 243.262144][ T9695] ? __check_object_size+0x49c/0x900
[ 243.267449][ T9695] ? bpf_lsm_netlink_send+0x9/0x10
[ 243.272584][ T9695] netlink_sendmsg+0x8e4/0xcb0
[ 243.277381][ T9695] ? __pfx_netlink_sendmsg+0x10/0x10
[ 243.282706][ T9695] ? __import_iovec+0x536/0x820
[ 243.287574][ T9695] ? aa_sock_msg_perm+0x91/0x160
[ 243.292549][ T9695] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 243.297895][ T9695] ? security_socket_sendmsg+0x87/0xb0
[ 243.303506][ T9695] ? __pfx_netlink_sendmsg+0x10/0x10
[ 243.309082][ T9695] __sock_sendmsg+0x221/0x270
[ 243.313840][ T9695] ____sys_sendmsg+0x525/0x7d0
[ 243.318685][ T9695] ? __pfx_____sys_sendmsg+0x10/0x10
[ 243.324051][ T9695] __sys_sendmsg+0x2b0/0x3a0
[ 243.328706][ T9695] ? __pfx___sys_sendmsg+0x10/0x10
[ 243.333868][ T9695] ? vfs_write+0x7c4/0xc90
[ 243.338491][ T9695] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 243.344887][ T9695] ? do_syscall_64+0x100/0x230
[ 243.349737][ T9695] ? do_syscall_64+0xb6/0x230
[ 243.354494][ T9695] do_syscall_64+0xf3/0x230
[ 243.359241][ T9695] ? clear_bhb_loop+0x35/0x90
[ 243.364053][ T9695] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 243.370173][ T9695] RIP: 0033:0x7fb21c7779f9
[ 243.374647][ T9695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 243.394651][ T9695] RSP: 002b:00007fb21d4b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 243.403212][ T9695] RAX: ffffffffffffffda RBX: 00007fb21c905f80 RCX: 00007fb21c7779f9
[ 243.411242][ T9695] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[ 243.419260][ T9695] RBP: 00007fb21d4b2090 R08: 0000000000000000 R09: 0000000000000000
[ 243.427278][ T9695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 243.435298][ T9695] R13: 0000000000000000 R14: 00007fb21c905f80 R15: 00007ffc1824daa8
[ 243.443343][ T9695] </TASK>
[ 243.534462][ T9700] dvmrp0: entered allmulticast mode
[ 244.021546][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 244.040500][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 244.117349][ T5244] Bluetooth: hci1: command 0x040f tx timeout
[ 244.120054][ T9500] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: wlan1
[ 244.162941][ T9500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 244.183090][ T9717] batman_adv: batadv0: Interface deactivated: wlan1
[ 244.205141][ T9717] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[ 244.241456][ T2909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 244.250664][ T2909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 244.270448][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1140'.
[ 244.285262][ T9717] batman_adv: batadv0: Interface activated: wlan1
[ 244.297067][ T2909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 244.318835][ T2909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 244.828387][ T9739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1146'.
[ 245.244171][ T9744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1148'.
[ 245.656567][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'.
[ 245.723578][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'.
[ 246.094125][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1157'.
[ 246.103607][ T9775] netlink: 'syz.2.1158': attribute type 33 has an invalid length.
[ 246.165402][ T9780] FAULT_INJECTION: forcing a failure.
[ 246.165402][ T9780] name failslab, interval 1, probability 0, space 0, times 0
[ 246.179515][ T9780] CPU: 0 UID: 0 PID: 9780 Comm: syz.3.1159 Not tainted 6.11.0-rc2-syzkaller-00277-g600a91931057 #0
[ 246.190268][ T9780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 246.200368][ T9780] Call Trace:
[ 246.203681][ T9780] <TASK>
[ 246.206643][ T9780] dump_stack_lvl+0x241/0x360
[ 246.211389][ T9780] ? __pfx_dump_stack_lvl+0x10/0x10
[ 246.216644][ T9780] ? __pfx__printk+0x10/0x10
[ 246.221293][ T9780] ? kmem_cache_alloc_node_noprof+0x49/0x320
[ 246.227419][ T9780] ? __pfx___might_resched+0x10/0x10
[ 246.232780][ T9780] should_fail_ex+0x3b0/0x4e0
[ 246.237510][ T9780] should_failslab+0xac/0x100
[ 246.242248][ T9780] ? __alloc_skb+0x1c3/0x440
[ 246.246885][ T9780] kmem_cache_alloc_node_noprof+0x71/0x320
[ 246.252831][ T9780] __alloc_skb+0x1c3/0x440
[ 246.257274][ T9780] ? __pfx___alloc_skb+0x10/0x10
[ 246.262329][ T9780] ? netlink_autobind+0xd6/0x2f0
[ 246.267290][ T9780] ? netlink_autobind+0x2b0/0x2f0
[ 246.272329][ T9780] netlink_sendmsg+0x638/0xcb0
[ 246.277137][ T9780] ? __pfx_netlink_sendmsg+0x10/0x10
[ 246.282482][ T9780] ? __import_iovec+0x536/0x820
[ 246.287361][ T9780] ? aa_sock_msg_perm+0x91/0x160
[ 246.292425][ T9780] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 246.297750][ T9780] ? security_socket_sendmsg+0x87/0xb0
[ 246.303285][ T9780] ? __pfx_netlink_sendmsg+0x10/0x10
[ 246.308596][ T9780] __sock_sendmsg+0x221/0x270
[ 246.313296][ T9780] ____sys_sendmsg+0x525/0x7d0
[ 246.318196][ T9780] ? __pfx_____sys_sendmsg+0x10/0x10
[ 246.323727][ T9780] __sys_sendmsg+0x2b0/0x3a0
[ 246.328378][ T9780] ? __pfx___sys_sendmsg+0x10/0x10
[ 246.333541][ T9780] ? vfs_write+0x7c4/0xc90
[ 246.338036][ T9780] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 246.344426][ T9780] ? do_syscall_64+0x100/0x230
[ 246.349245][ T9780] ? do_syscall_64+0xb6/0x230
[ 246.353937][ T9780] do_syscall_64+0xf3/0x230
[ 246.358479][ T9780] ? clear_bhb_loop+0x35/0x90
[ 246.363197][ T9780] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 246.369119][ T9780] RIP: 0033:0x7fccf23779f9
[ 246.373630][ T9780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 246.393381][ T9780] RSP: 002b:00007fccf315b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 246.401829][ T9780] RAX: ffffffffffffffda RBX: 00007fccf2505f80 RCX: 00007fccf23779f9
[ 246.409828][ T9780] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[ 246.417821][ T9780] RBP: 00007fccf315b090 R08: 0000000000000000 R09: 0000000000000000
[ 246.425818][ T9780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 246.433808][ T9780] R13: 0000000000000000 R14: 00007fccf2505f80 R15: 00007fff54c11238
[ 246.442010][ T9780] </TASK>
[ 248.598915][ T5242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 248.620943][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 248.642648][ T5242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 248.660425][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 248.670568][ T5242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 248.690912][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 249.371406][ T9782] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1161'.
[ 249.505107][ T2909] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 249.548418][ T9820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1169'.
[ 249.591180][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1167'.
[ 249.600314][ T9810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1167'.
[ 249.731548][ T2909] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 249.942903][ T2909] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 250.069289][ T9838] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[ 250.158242][ T9841] ==================================================================
[ 250.166481][ T9841] BUG: KASAN: slab-use-after-free in hci_sock_get_cookie+0x49/0x50
[ 250.174521][ T9841] Read of size 4 at addr ffff88801f6b1568 by task syz.4.1175/9841
[ 250.182336][ T9841]
[ 250.184666][ T9841] CPU: 0 UID: 0 PID: 9841 Comm: syz.4.1175 Not tainted 6.11.0-rc2-syzkaller-00277-g600a91931057 #0
[ 250.195347][ T9841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 250.205414][ T9841] Call Trace:
[ 250.208706][ T9841] <TASK>
[ 250.211648][ T9841] dump_stack_lvl+0x241/0x360
[ 250.216355][ T9841] ? __pfx_dump_stack_lvl+0x10/0x10
[ 250.221573][ T9841] ? __pfx__printk+0x10/0x10
[ 250.226180][ T9841] ? _printk+0xd5/0x120
[ 250.230385][ T9841] ? __virt_addr_valid+0x183/0x530
[ 250.235533][ T9841] ? __virt_addr_valid+0x183/0x530
[ 250.240655][ T9841] print_report+0x169/0x550
[ 250.245179][ T9841] ? __virt_addr_valid+0x183/0x530
[ 250.250299][ T9841] ? __virt_addr_valid+0x183/0x530
[ 250.255419][ T9841] ? __virt_addr_valid+0x45f/0x530
[ 250.260549][ T9841] ? __phys_addr+0xba/0x170
[ 250.265062][ T9841] ? hci_sock_get_cookie+0x49/0x50
[ 250.270187][ T9841] kasan_report+0x143/0x180
[ 250.274712][ T9841] ? hci_sock_get_cookie+0x49/0x50
[ 250.279866][ T9841] hci_sock_get_cookie+0x49/0x50
[ 250.284835][ T9841] mgmt_cmd_status+0x1be/0x4d0
[ 250.289797][ T9841] cmd_complete_rsp+0xe7/0x150
[ 250.294581][ T9841] mgmt_pending_foreach+0xd1/0x130
[ 250.299740][ T9841] ? __pfx_cmd_complete_rsp+0x10/0x10
[ 250.305131][ T9841] __mgmt_power_off+0x187/0x420
[ 250.310001][ T9841] ? __pfx___mgmt_power_off+0x10/0x10
[ 250.315401][ T9841] ? __mutex_trylock_common+0x183/0x2e0
[ 250.320962][ T9841] ? __pfx___might_resched+0x10/0x10
[ 250.326267][ T9841] ? __pfx___mutex_trylock_common+0x10/0x10
[ 250.332182][ T9841] ? rcu_is_watching+0x15/0xb0
[ 250.336969][ T9841] ? trace_contention_end+0x3c/0x120
[ 250.342275][ T9841] ? __mutex_lock+0x2ef/0xd70
[ 250.346973][ T9841] ? __mutex_unlock_slowpath+0x21d/0x750
[ 250.352653][ T9841] ? hci_dev_close_sync+0x572/0x11a0
[ 250.357956][ T9841] ? lockdep_hardirqs_on+0x5f/0x150
[ 250.363173][ T9841] ? _raw_spin_unlock_irq+0x2e/0x50
[ 250.368389][ T9841] ? drain_workqueue+0x2d3/0x3a0
[ 250.373345][ T9841] ? hci_discovery_set_state+0x57/0x180
[ 250.378908][ T9841] hci_dev_close_sync+0x665/0x11a0
[ 250.384041][ T9841] hci_dev_close+0x112/0x210
[ 250.388656][ T9841] sock_do_ioctl+0x158/0x460
[ 250.393276][ T9841] ? __pfx_sock_do_ioctl+0x10/0x10
[ 250.398414][ T9841] sock_ioctl+0x629/0x8e0
[ 250.402764][ T9841] ? __pfx_sock_ioctl+0x10/0x10
[ 250.407665][ T9841] ? __fget_files+0x29/0x470
[ 250.412282][ T9841] ? __fget_files+0x3f6/0x470
[ 250.417008][ T9841] ? __fget_files+0x29/0x470
[ 250.421618][ T9841] ? bpf_lsm_file_ioctl+0x9/0x10
[ 250.426576][ T9841] ? security_file_ioctl+0x87/0xb0
[ 250.431709][ T9841] ? __pfx_sock_ioctl+0x10/0x10
[ 250.436585][ T9841] __se_sys_ioctl+0xfc/0x170
[ 250.441194][ T9841] do_syscall_64+0xf3/0x230
[ 250.445716][ T9841] ? clear_bhb_loop+0x35/0x90
[ 250.450407][ T9841] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 250.456311][ T9841] RIP: 0033:0x7fb21c7779f9
[ 250.460738][ T9841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 250.480359][ T9841] RSP: 002b:00007fb21d4b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 250.488802][ T9841] RAX: ffffffffffffffda RBX: 00007fb21c905f80 RCX: 00007fb21c7779f9
[ 250.496791][ T9841] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000007
[ 250.504776][ T9841] RBP: 00007fb21c7e58ee R08: 0000000000000000 R09: 0000000000000000
[ 250.513277][ T9841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 250.521283][ T9841] R13: 0000000000000000 R14: 00007fb21c905f80 R15: 00007ffc1824daa8
[ 250.529306][ T9841] </TASK>
[ 250.532336][ T9841]
[ 250.534702][ T9841] Allocated by task 5669:
[ 250.539031][ T9841] kasan_save_track+0x3f/0x80
[ 250.543736][ T9841] __kasan_kmalloc+0x98/0xb0
[ 250.548338][ T9841] __kmalloc_noprof+0x1fc/0x400
[ 250.553207][ T9841] sk_prot_alloc+0xe0/0x210
[ 250.557724][ T9841] sk_alloc+0x38/0x370
[ 250.561801][ T9841] bt_sock_alloc+0x3c/0x340
[ 250.566312][ T9841] hci_sock_create+0xa1/0x190
[ 250.571001][ T9841] bt_sock_create+0x161/0x230
[ 250.575689][ T9841] __sock_create+0x490/0x920
[ 250.580296][ T9841] __sys_socket+0x150/0x3c0
[ 250.584818][ T9841] __x64_sys_socket+0x7a/0x90
[ 250.589516][ T9841] do_syscall_64+0xf3/0x230
[ 250.594035][ T9841] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 250.599942][ T9841]
[ 250.602273][ T9841] Freed by task 9842:
[ 250.606259][ T9841] kasan_save_track+0x3f/0x80
[ 250.610953][ T9841] kasan_save_free_info+0x40/0x50
[ 250.615988][ T9841] poison_slab_object+0xe0/0x150
[ 250.620940][ T9841] __kasan_slab_free+0x37/0x60
[ 250.625722][ T9841] kfree+0x149/0x360
[ 250.629623][ T9841] __sk_destruct+0x476/0x5f0
[ 250.634335][ T9841] mgmt_pending_remove+0x13e/0x1a0
[ 250.639465][ T9841] mgmt_pending_foreach+0xd1/0x130
[ 250.644592][ T9841] mgmt_index_removed+0xe6/0x340
[ 250.649547][ T9841] hci_sock_bind+0xcce/0x1150
[ 250.654465][ T9841] __sys_bind+0x23d/0x2f0
[ 250.658860][ T9841] __x64_sys_bind+0x7a/0x90
[ 250.663508][ T9841] do_syscall_64+0xf3/0x230
[ 250.668025][ T9841] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 250.673932][ T9841]
[ 250.676263][ T9841] The buggy address belongs to the object at ffff88801f6b1000
[ 250.676263][ T9841] which belongs to the cache kmalloc-2k of size 2048
[ 250.690323][ T9841] The buggy address is located 1384 bytes inside of
[ 250.690323][ T9841] freed 2048-byte region [ffff88801f6b1000, ffff88801f6b1800)
[ 250.704304][ T9841]
[ 250.706634][ T9841] The buggy address belongs to the physical page:
[ 250.713060][ T9841] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f6b0
[ 250.721924][ T9841] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 250.730440][ T9841] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 250.738121][ T9841] page_type: 0xfdffffff(slab)
[ 250.742811][ T9841] raw: 00fff00000000040 ffff888015842000 dead000000000100 dead000000000122
[ 250.751403][ T9841] raw: 0000000000000000 0000000000080008 00000001fdffffff 0000000000000000
[ 250.759999][ T9841] head: 00fff00000000040 ffff888015842000 dead000000000100 dead000000000122
[ 250.768680][ T9841] head: 0000000000000000 0000000000080008 00000001fdffffff 0000000000000000
[ 250.777385][ T9841] head: 00fff00000000003 ffffea00007dac01 ffffffffffffffff 0000000000000000
[ 250.786066][ T9841] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 250.794739][ T9841] page dumped because: kasan: bad access detected
[ 250.801262][ T9841] page_owner tracks the page as allocated
[ 250.806980][ T9841] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2909, tgid 2909 (kworker/u8:7), ts 90141092920, free_ts 90125151208
[ 250.829743][ T9841] post_alloc_hook+0x1f3/0x230
[ 250.834530][ T9841] get_page_from_freelist+0x2e4c/0x2f10
[ 250.840109][ T9841] __alloc_pages_noprof+0x256/0x6c0
[ 250.845356][ T9841] alloc_slab_page+0x5f/0x120
[ 250.850048][ T9841] allocate_slab+0x5a/0x2f0
[ 250.854649][ T9841] ___slab_alloc+0xcd1/0x14b0
[ 250.859344][ T9841] __slab_alloc+0x58/0xa0
[ 250.863686][ T9841] __kmalloc_node_track_caller_noprof+0x281/0x440
[ 250.870111][ T9841] kmalloc_reserve+0x111/0x2a0
[ 250.874885][ T9841] __alloc_skb+0x1f3/0x440
[ 250.879311][ T9841] alloc_skb_with_frags+0xc3/0x770
[ 250.884448][ T9841] sock_alloc_send_pskb+0x91a/0xa60
[ 250.889661][ T9841] mld_newpack+0x1c3/0xa90
[ 250.894090][ T9841] add_grec+0x1492/0x19a0
[ 250.898435][ T9841] mld_send_initial_cr+0x228/0x4b0
[ 250.903649][ T9841] ipv6_mc_dad_complete+0x88/0x490
[ 250.908774][ T9841] page last free pid 5246 tgid 5246 stack trace:
[ 250.915109][ T9841] free_unref_page+0xd22/0xea0
[ 250.919887][ T9841] __slab_free+0x31b/0x3d0
[ 250.924352][ T9841] qlist_free_all+0x9e/0x140
[ 250.928954][ T9841] kasan_quarantine_reduce+0x14f/0x170
[ 250.934436][ T9841] __kasan_slab_alloc+0x23/0x80
[ 250.939318][ T9841] kmem_cache_alloc_lru_noprof+0x139/0x2b0
[ 250.945138][ T9841] shmem_alloc_inode+0x28/0x40
[ 250.949914][ T9841] new_inode+0x6e/0x310
[ 250.954098][ T9841] shmem_get_inode+0x34a/0xd50
[ 250.958871][ T9841] shmem_mknod+0x5f/0x1e0
[ 250.963212][ T9841] shmem_mkdir+0x33/0x70
[ 250.967473][ T9841] vfs_mkdir+0x2f9/0x4f0
[ 250.971731][ T9841] do_mkdirat+0x264/0x3a0
[ 250.976072][ T9841] __x64_sys_mkdirat+0x87/0xa0
[ 250.980878][ T9841] do_syscall_64+0xf3/0x230
[ 250.985487][ T9841] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 250.991408][ T9841]
[ 250.993734][ T9841] Memory state around the buggy address:
[ 250.999373][ T9841] ffff88801f6b1400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 251.007454][ T9841] ffff88801f6b1480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 251.015524][ T9841] >ffff88801f6b1500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 251.023592][ T9841] ^
[ 251.031052][ T9841] ffff88801f6b1580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 251.039128][ T9841] ffff88801f6b1600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 251.047199][ T9841] ==================================================================
[ 251.105833][ T9841] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 251.113098][ T9841] CPU: 1 UID: 0 PID: 9841 Comm: syz.4.1175 Not tainted 6.11.0-rc2-syzkaller-00277-g600a91931057 #0
[ 251.123926][ T9841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 251.134013][ T9841] Call Trace:
[ 251.137331][ T9841] <TASK>
[ 251.140294][ T9841] dump_stack_lvl+0x241/0x360
[ 251.145021][ T9841] ? __pfx_dump_stack_lvl+0x10/0x10
[ 251.150279][ T9841] ? __pfx__printk+0x10/0x10
[ 251.154924][ T9841] ? preempt_schedule+0xe1/0xf0
[ 251.159828][ T9841] ? vscnprintf+0x5d/0x90
[ 251.164203][ T9841] panic+0x349/0x860
[ 251.168151][ T9841] ? check_panic_on_warn+0x21/0xb0
[ 251.173299][ T9841] ? __pfx_panic+0x10/0x10
[ 251.177761][ T9841] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 251.183874][ T9841] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 251.190248][ T9841] ? print_report+0x502/0x550
[ 251.194982][ T9841] check_panic_on_warn+0x86/0xb0
[ 251.199971][ T9841] ? hci_sock_get_cookie+0x49/0x50
[ 251.205129][ T9841] end_report+0x77/0x160
[ 251.209418][ T9841] kasan_report+0x154/0x180
[ 251.213979][ T9841] ? hci_sock_get_cookie+0x49/0x50
[ 251.219226][ T9841] hci_sock_get_cookie+0x49/0x50
[ 251.224186][ T9841] mgmt_cmd_status+0x1be/0x4d0
[ 251.228969][ T9841] cmd_complete_rsp+0xe7/0x150
[ 251.233751][ T9841] mgmt_pending_foreach+0xd1/0x130
[ 251.238877][ T9841] ? __pfx_cmd_complete_rsp+0x10/0x10
[ 251.244284][ T9841] __mgmt_power_off+0x187/0x420
[ 251.249176][ T9841] ? __pfx___mgmt_power_off+0x10/0x10
[ 251.254584][ T9841] ? __mutex_trylock_common+0x183/0x2e0
[ 251.260148][ T9841] ? __pfx___might_resched+0x10/0x10
[ 251.265463][ T9841] ? __pfx___mutex_trylock_common+0x10/0x10
[ 251.271375][ T9841] ? rcu_is_watching+0x15/0xb0
[ 251.276161][ T9841] ? trace_contention_end+0x3c/0x120
[ 251.281462][ T9841] ? __mutex_lock+0x2ef/0xd70
[ 251.286246][ T9841] ? __mutex_unlock_slowpath+0x21d/0x750
[ 251.291901][ T9841] ? hci_dev_close_sync+0x572/0x11a0
[ 251.297228][ T9841] ? lockdep_hardirqs_on+0x5f/0x150
[ 251.302535][ T9841] ? _raw_spin_unlock_irq+0x2e/0x50
[ 251.307750][ T9841] ? drain_workqueue+0x2d3/0x3a0
[ 251.312714][ T9841] ? hci_discovery_set_state+0x57/0x180
[ 251.318307][ T9841] hci_dev_close_sync+0x665/0x11a0
[ 251.323443][ T9841] hci_dev_close+0x112/0x210
[ 251.328052][ T9841] sock_do_ioctl+0x158/0x460
[ 251.332666][ T9841] ? __pfx_sock_do_ioctl+0x10/0x10
[ 251.337805][ T9841] sock_ioctl+0x629/0x8e0
[ 251.342156][ T9841] ? __pfx_sock_ioctl+0x10/0x10
[ 251.347034][ T9841] ? __fget_files+0x29/0x470
[ 251.351649][ T9841] ? __fget_files+0x3f6/0x470
[ 251.356345][ T9841] ? __fget_files+0x29/0x470
[ 251.360959][ T9841] ? bpf_lsm_file_ioctl+0x9/0x10
[ 251.365916][ T9841] ? security_file_ioctl+0x87/0xb0
[ 251.371034][ T9841] ? __pfx_sock_ioctl+0x10/0x10
[ 251.375901][ T9841] __se_sys_ioctl+0xfc/0x170
[ 251.380537][ T9841] do_syscall_64+0xf3/0x230
[ 251.385165][ T9841] ? clear_bhb_loop+0x35/0x90
[ 251.389885][ T9841] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 251.395813][ T9841] RIP: 0033:0x7fb21c7779f9
[ 251.400238][ T9841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 251.419948][ T9841] RSP: 002b:00007fb21d4b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 251.428374][ T9841] RAX: ffffffffffffffda RBX: 00007fb21c905f80 RCX: 00007fb21c7779f9
[ 251.436365][ T9841] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000007
[ 251.444351][ T9841] RBP: 00007fb21c7e58ee R08: 0000000000000000 R09: 0000000000000000
[ 251.452344][ T9841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 251.460352][ T9841] R13: 0000000000000000 R14: 00007fb21c905f80 R15: 00007ffc1824daa8
[ 251.468347][ T9841] </TASK>
[ 251.471624][ T9841] Kernel Offset: disabled
[ 251.475976][ T9841] Rebooting in 86400 seconds..