last executing test programs: 25.190798719s ago: executing program 3 (id=1014): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x14, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x7a05, 0x1700) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000480)='pids.max\x00', 0x2, 0x0) 25.055355222s ago: executing program 4 (id=1016): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000800)=ANY=[], 0x88}}], 0x2, 0x2400c044) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r2, r4, 0x0, 0x970b) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r6, &(0x7f0000000480), 0x0, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)={0x4c, r11, 0x1, 0x200000, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, 0x0, &(0x7f0000000680)='GPL\x00', 0x80000, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[r7, r7, 0xffffffffffffffff], &(0x7f0000000dc0), 0x10, 0x5}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 21.861107551s ago: executing program 3 (id=1033): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0xfc, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x7e52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0xfc, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x7e52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) 21.772787649s ago: executing program 4 (id=1035): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x8, 0x1, 0x73a0, 0x2}, {0x6, 0x1, 0x3, 0x2, 0x7, 0x9}, 0xdd, 0x5, 0x249}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa668cd67f58edc68}, @TCA_TBF_BURST={0x8, 0x6, 0x2}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21.690991092s ago: executing program 3 (id=1036): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x5, 0x7, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20044454) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r6}, 0x10) close(r2) sendmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="19", 0x1}, {&(0x7f0000000400)="fbf324a73c0a4c8e83c1d6d1c8b020ed9f9eebbd8cfe290f7cd5810650bcf3a459e3e3cefb08994800d9200084c45100c8e3e6079aebb7fc39770ad7368eb3f5a516b87c03603f3a1358f80afbc212a22cace800ecb225c9e79e2eec7ac19543f26234ffcf683f6d575802786415b7b8ec1b949ed84015f8946379726c536cbf01be9e13da91e1a8c01d210c1d0c65f6c3cefa5246c516d1c4caf005290e90655a7f503b5b7bd90679e14768c1fe387457b6b7cc5e35d0ea057af2a2bc2e7a827a1bcb5d8dec07160272ac54b0ad999761574f9feeaa152bcd866d7867ecc461ba7773e813df5ff5c9ea313b44c136ee", 0xf0}, {&(0x7f0000000600)="58cb69c910e9f386ef743e609b15ddf737f5c483b210392d88cb5724c99b6f0ee0cdc4b6ef69379e43ac5dc3efedf769a7ff7baebfd595f9fa0a20279f21a0c54175f218d9b9f0596c63eb6fbb710e01b646db8c9255e415162b1c1a4c6b8649d239a7f6099a656b0097c5fc67046cadc48ab602ae7db89beef13ab2bee0d5e5a7e21f399c81f857312d16ebd68c7d94ad847d", 0x93}, {&(0x7f0000000780)="f739da594ed8ab9b7a76c67dc6e683907a441ed3f9573edc47b1843a458b6545e58d3d745c764f41fbe98c66e21454761a2e6cde7ecbb010af4ff834f1c179a00e1f1bb73c1a2d1f51ac13f914eab83f9be4ce9f2722eb5d57a50ade6c3fd8f69daae25509157dac77751cf723ed388cb967663386fa53ba67353affc169b1a6f17c961aeaaeb9277af1d38b1de1f442cf4f448c110e6d2b55cbb6950705a480dce56ff1ad915145b86d89e75a982b893ad87d32a0229ae7cdaba33bf75c356bc60eaf65", 0xc4}, {&(0x7f00000001c0)="e71f37bc7f56beb4c343e62f533d0d153f8f2e85dd853679cb713633b1b7b39c06ef2a39c3b3c57e84febfebabe4", 0x2e}], 0x5, &(0x7f0000000880)=[{0x108, 0x119, 0x40, "7e17b3b973852e993b7adf0ecece70690d437dc154f67a27bd01fadb89843fe0e69c83eac5479d365f0f730374d108fe09a069b175fab9f4a64f6bac799392819536b7cba54d27394aea56dd19818c6f23fb1bebbd6586a4dbbdabd660a702db041de5b958aaebd0f43d03a3e6a3d4f0e66e70fdfdb2d197d02a661ad32229646cfa520a71349470cfac6e2b989439c5956c29d4f2d87fc09334e367ee23fff226a970c47bf4b960aa33d32bed554c5cb50e4cc8b8a08068474f6115bb751d3f688e05f97a26770c05074528f1b582eec60e160bdf572c800308cfeef0ccb1877706a8854e6ffb4993759fb069b4e39174a7a09470"}, {0xe0, 0x109, 0x8, "0bd38400ac670519d3c855212ace0e5cc7653989c2ba2acc0a25cecfc424e4f98c8359ae040a262f211dc79b6047891b05dd4ea0f0988ad254390e8c2b9f62c342b0c8803e961dddd92e42d16403aac0a96c6bc3356053d1a5dfe0ae4d17f4dbdb47cf97956184e34c8a5e4d251a7e7bfb3243fa2c6bdce4315b5a82e9312317316635af6be78a19b4ab24a181483f00a72f1d0b01596a688531494c7d4bb44b75dfc28b7b8006d194aa4b737e4cbdc327141106c86a86d325a0832a71d6cfab557133bbc33ed498a456"}], 0x1e8}}, {{&(0x7f0000000500)=@isdn={0x22, 0x4, 0x5, 0xee, 0x1}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)="fdb2e24a61f74a9f3e3558c296e532fd500404034f38f57c96d9a59122c5ec5901fa7e844e9dfdd5edfb2b6a2e6d6bcd580a40112ffdc0e8387e73cfc89421a9f977a922c9da9113aa5337379999993e329003b55896920d967b3bd3b87955901ad24e8619b7928aea8b0ea721bc6b43e277cd594168b8735de0a03fc1202537ba8eec0d1fbeee7d1c875de81fc590eb", 0x90}, {&(0x7f0000000b40)="a14d853ad7aa5a5f6297b62ec07408134340cf5ef7bb392221d1cfe72566a07ebf0317d11a14dbc196dee7e8b04e81a3b36f872666ffd8236e71fbad49e007aaad515621d3264e98c845facb5f725656c762a4261114aabf91c4e130b976106c69cebc99af3da585169e8bc7bba2c425f5e5e4e246cbde4d66d9c55428687c72767e445f39c33d277e6c07a9aef20a64af372363e2d2e2355ba06f8ea5fa8163c5d3b0b3b84b0a3a93f934", 0xab}, {&(0x7f0000000cc0)="d01745187526b29eba6c3adedf9f010025f8ad2a98c982df5bdbaf3e421ee7ad2dda972bf847fcc17a0cb07b590ec5274488c0fab4cc1083b497e12c2168d248fc4a96ae62928681b9a706794ae3e061869912dcef8213621614e142cdc99b12bcfec968e9e58261c5603db038a6c64b475d4c52cdfafd597e7cd2ea520e7e434379ac01d57bd5c5d5842e02a21d4903202782931ed53e5bdab36b3e08900fcdc353350c9f7c3c52a14acb0b3f26363b5787b222e58d58352cdc26c7744c17438fc4188e6f3ee1ee3e4db533a98c21250a49563e32622dfa16542d286440d52e3a111dc1f1c3acf686653c9073cf1434c5300532", 0xf4}, {&(0x7f0000000380)="b27d38a68f5c32cd7a9325b945aecc2fdaf5ae745042a2969b19098efbc6accb3a6e2609ba136f9db3e36f5aa5753707b7371e7194703f6fec", 0x39}, {&(0x7f00000006c0)="cf2074ddd6670b2f7667b30fc0a6c8d65ef789ba0bae1fc64e98efc0dd890d7a946f4bca05f589709a9a", 0x2a}, {&(0x7f0000000c00)="0ba962ed6d022d66994dae7adc0cfb2c1571565ffaf67cfd9c9919b706c8c09999cd7604e557e58968269e8e5596f1f5109dba14ba48d8b56514464e27d9d7d7f02d4641829bf1c5b9c2d230cff41deb7965a1ba477626", 0x57}, {&(0x7f0000000700)="dd813d00", 0x4}, {&(0x7f0000000dc0)="9bc88180dd4991574daef5ae9ab2b8c24fc82f5f8a53bcb0d42c9d1c5adba2c9bdb9de659861051e85c628d6ae21dcd9e86274e3c5e9fb8f4eaa365cd2426a8b8d93a95972a9e4720ffd87c015a9dd", 0x4f}, {&(0x7f0000000e40)="76de5d0ad5600b4dff18fd445ac00fee72dd0d77aa88d4ffce0f3cd8192659ee9e04aefa45deb68a783e1e31795162684d320346c00bc3ac9e040dad91236b9b8611b0d4c5464219fbb57de391f5ce26efba21e985712f674f399bf4024fb8d3fab6efe18941498cf099c3b92906ac9c4ea7f7b8f6094c1472c5ccef04215ac72bd0f5db9a204953c0f728dfed40a74c1da740c9925c6c8d9031073b5e71020936c495fd08d99a05a0fa6a06d9e942cd8ba0c9d7ecf6efb41a27004be29c9bed957c7e37c70e2a3700042cddf6326e519dab354f2841ded6ceba655efbc94b51d8b3a3f43bb98ac3ceb9e57ce5300ef401f11f17", 0xf4}], 0x9}}, {{&(0x7f0000001000)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x20000}, 0x80, &(0x7f0000001380)=[{&(0x7f0000001080)="d85938a2fe8a64b4c04c4823153ef68c39234fa4174d21d50b078dffb5fd640fe56b132a441bdf62b0a581aa1b47fe485253f7aa5695c9e16bb5c4f9b25208d1d28741b7dcb04a52418aca73ba935b9d4b19fd9a83caed9b855c58ab7aea7bbfd74fd772a95d4932bda719a7b3defc3009b06c5b307cbdc384cd200239c27c26d48c95cdf7b8bfb58b018ab9e697ebafb80568fbba3bbb687245bf1ccc0628840e5e4708d3ef7738f1fc97568815e1acf6971c4a40a2c8811cc774850fa6bbe2e899e4af139fd2ed61079feeacb88d96f522ee93", 0xd4}, {&(0x7f0000001180)="e584eab43d872cfea8923c", 0xb}, {&(0x7f00000011c0)="8dd474a569adfe8cbb92c2d6d1f64ad2", 0x10}, {&(0x7f0000001240)="17b6ca8f28db93eaf8d35d35babf2f568143ff236e8e840c87901b886a2eeaee087cfd1d4fb35b5168dcec0d5ef5b3ba36112613c5ddd31331c144fb8db8fea54cac34cf5451a3d08bbcde843d00ee3c8b5028d3f63a131d7ab06e3dab528fa85c16ead5c1baab59e2a6d90d89f6a8fa1330e42dab49f9b7", 0x78}, {&(0x7f00000012c0)="31604862f82c0286cf322b1c1b628301cec37eaec00a45d9e3aed7c789d466af01697eca6f895047ccd2e14d699349fb3722aaf5dd52f7b7ef831c40c47910ae00dccea567197a3ee1e278afa566209dc9e78e49bf3a13d0c099826c87d2edba3f773f70c8c8fb27e8416cb0b576e36295df0a2b4baf", 0x76}, {&(0x7f0000001340)="cb185e05e3f1ae513346516972ad4247032db5fdc9b0bb38175d69054f04adb9", 0x20}], 0x6}}, {{&(0x7f0000001400)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x80, &(0x7f0000001880)=[{&(0x7f0000002600)="31bedbf31d6ec0af64a6385e37a956ae71cbb1d69397b98ff4f252f08fa91dbcd7f18e2934b638a0e46010c0a9680feb76b3526cc80fc85777d7080a247072f4cba8908bf8e7cac14a8b2535f4aa6d9ac4af410bbbf1ede69a41e4141a47e021320cacd69897a1bc6ac3b5f41f9b6b71877f5c113b066cb19d711ae3bbd1f6f4a670f2c2d1ed2af1a52fe3d0b78c3743bb154fb3d77a8f5828582fa8dd3477292b267a9911a4a2d8d183cd5afa9c7285b8616ed1be5fd6fe4f78820b757dac27b91a30f1ccb69795f363b9b3b5ec8ade88372382b4ceacdde21a5bc4474dea8ba3605e44d7e8055d7cbe12b0eafb80c47525497005292c47148f1dfb09f04e7e65c92bfe45d2b2ee46590e906246ca25ff372fe9912f1edbde02e5f7d3", 0x11d}, {&(0x7f00000014c0)="a5390014b747e47d314b115aaacbb302a12f992a1059de23ab1bba4c40aa139daeaca11730746e6f592d57638d601a76ce3e8b36b6a99a11151d8bb2b3d10bfa7f0000000000000091e37f010f467b39aaa231d9ffdb17145183575e2500630e3322f1bfdfa8b855d27bce45a452ce8d5a160a8315a9401368bab2f836f4fcc953b50d802c1c000000001dd19b739d916e331427f39d6d642bf98141ab7f43660903cb5de5d9ac94e5fafbdbe0df86ccc389bd60ff25ec2e1a8a8498f53d9cb52c37fee2e80688d3d811af0ee4ed5d09f26f4608f2c500fdfe8db6c532ab4ebf5670576c69566e8a8561c51b2d07c1d386671a6abd", 0xf5}, {&(0x7f00000015c0)="3b5a68da630cb9e4e384", 0xa}, {&(0x7f0000001600)="75967b923bbc9ab3fe10ccf2c289b36f09afc1693ea9e70e6402c428b4f477fe238aa067a6a9724ae5f7bfd17d01", 0x2e}, {&(0x7f0000001640)="ff", 0x1}, {&(0x7f0000001680)="6a5851c9eb6a9ea135c649d4234a7f53c9de415c2e22e42985bc0b88613f5b9e6c75aa0959ab1ed74e7bd3b772088a82e39fc11d2d659403551ddbfb0b3b56a03f4cf4655c13663ec4e14b9f7da7c2692330c2a67e4c111f88efcd95afb1b61600c7c679c594485db63067b8167e122bd54fe71299bda4ebe6430c8a40cc32aee28a249f19999d84233fcc87f8d9e85a01c309be0698dc14786b929d7c6b366ef1b9392f9d7451133a5f66f7a9f2ab50c1fd179c1dfc02a374842266201e45be7822853356c58040ab5c6e525f807a347db816119902370ddfefe2e05f", 0xdd}, {&(0x7f0000001780)="14c474d23b418bcdb6a6212fb91367a29de09064127490d98b880eb7", 0x1c}, {&(0x7f00000017c0)="b997381c68a2ceb160a740a0f2df25d968112090f2ae4c7b5f4b9ed5354bd69ceb1bd9e69152d35ce53e3d03f005928a4df917415d0bfbdbb7025fd4b2da1d2444ce234ad4bbdb12361a86914a6a6468ae03ccad0fdb2a51f2747b8ae5b092c44e1bd701cea0d210137fb76e6617419536180f0d42b370377a37b50b7fcc67016a8afb4f4a21cce096aac5ecc5e0124801f487", 0x93}], 0x8}}, {{&(0x7f0000001900)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001980)="88594eea94", 0x5}, {&(0x7f00000019c0)="595b49533f8d2cd6c10ba7653a2efcd45cd4ec2c916c7c5a032700ce01595ecefb0519419958020bff1a4f3da0ab825a807a0bffcc73f6b3c7c53935efc7f56ab33825ed2af8b2d1dc2db0d1d6a86c222cb7a11e67d08bdf246ee4e746f4df7d42380258d5c43fdd3b2935cbcb656a47fd1b7f4243752c49d791d0fbaf7a136bb1dd125986ced7f75d4595e598ad46b3b16fd13434077b432234b0cf2f00825e5241c4cdb7190941948d591328d6879176b742d206559698797acc86b9be4fae302fe58e2d5d342ff185fb96d08b3fcfa673e002abc21967eed14885f50a6c7e8856eae4094b197db0b6cf35b386c0f70036b3874ee8ec380694", 0xfa}, {&(0x7f0000001ac0)="54d865b45dcab8cb15de35519979d6da623a37ac0f714a1a0606f26a0a695e95a2e613526f00c17c797f1618a812e6110ee49e9a2db4fbcbbef81ca59d9f727d6c327a3468d50cc2d532fd4ba3dab2a0826571d5e9a717a763284f452d40eb303da01614d708621b7f6da9db2712586b685bff9b88f67b7b5af796a2bc69e1283ab7c9c8784ffdfb59", 0x89}, {&(0x7f0000001b80)="0f9fafea915a7380eff9261efaa11238e8124b8cbaddffc619116f14c46c8eb7b20d3b583eb83500e6fa5c06d381ab1045ee0054c9c867b74f2054f3964844e4f5da18258ef49b85cc1b0167", 0x4c}], 0x4, &(0x7f0000001c40)=[{0x40, 0x103, 0x0, "c0da19ed202462c9894ae5c9bd469bac9bb8085420d458c2eceabb45d12a5c69e5b753fbf7c863588727f0143a88f879"}, {0xd8, 0x107, 0x903, "51784145895a2848ba62a184a113a022b27b53d98abdccc4a1e2f83ebcabfed3c4b1e22fa882a7b126905545a7ab667accdbc803274479dbba57998e6f57287cbecd1f3ce6a4d33aea5bec927b192d11fceb01049ace98d970d0dbf513b2ca365605b4c990d47d65f7b0f1fa0a8cab943744d3771c71f10c4e8b85448e77dffc0daba5dd241fd0cc7e40e9bae9f3f9dd09b76837793fa0a491fd9c9a543038bbfb6e023ed02145b0bdd44511b965be10c682379264ca20e020d6b4f18a9238faa5789726a2cf3f0b"}, {0xa8, 0x10c, 0x6, "3142581299b84b67281088607a52d21195b462b1d615c043d747e19f3ceb0ce99371432fdf40e640c36ab8dd07da43c4fcd50303f97d84cc186ec55943f14b738f368caa277aab801faa096537e3d6d6497458b22ef2436cf6d4fb65697d916fdfb7ba43cacffb83cc2e2aa580cf3d23af2d54d06f68d1915f29ce3e6a57edabc6a4f4c54a281dff40636cebc280134eaef118e2"}, {0xe0, 0x3a, 0x1ff, "990a9550647877be25c8a019df39f1a3ef58f26638e510dc51d1f753bd8488482011ab81d4ea26930ff2e1bfca52f8ac4a7fb90ff406bc8c385783647db92a18dc53793e273af41c88d83ed1348dbd52e62c2f7564db1cecac7a9471be449d71524435dee4c0bdc41a4e47c5a379ba4e23e9f5664ef1f7039d28f683bc802553bca5fa50b22bde89aa8e9702f32f82552d77671d4704cfdadb4836d4de6eee324a00236e3dcc5101127b9f86335ddf6b98f10015f50c4469c7bb56a41e3f37f6aaa237449cea371496533de0"}, {0xd0, 0xff, 0x7, "e4350cc4a7d68b0f9c21a1b78f02c9fdb19ae3d86b14c7c47f3666284679665ec940b2bbb64576804dd7ef91ea579f6d06f55a1ab4b362333c00f32a60dbf70fdef18b0190a34124b3cd5d46f280d58f0e8d9b1ef134396258c2327cfe3efcee173790faf3e65998ebd11d1a5bae23a6d0f2e23d0c4df5513790108d447449b3e58854cdabb5eda57fcaa072b27404dbbb18fa58207296dd1469ef922eefc7d8b99aced1b67e3fe31a5ee020858fba7f29b2fe0b2b3553dec6d610"}, {0x78, 0x116, 0x9, "bd4f6275032c58a8d93dc97f54e05d77aeadfa7e1698577124e7d92fc6af047b15f210aef00499ce40746c794f1bd1f6f050cdaa0c540e5a5d2d0f5b78f27acb29a60bfa7a72ef8251fba79fc5a2aeb0ced499f6a5ba89804ecac908a931ae0613380f6df2d3"}], 0x3e8}}, {{&(0x7f0000002040)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x87}}, 0x80, &(0x7f0000002300)=[{&(0x7f00000020c0)="63fab21662e9a7216db76a5d5b8c270e1e66264149671aed579afce6b6676de79ac336fd1db6443d39c467f7bce2431ed09ba6dda9ecc0720b51f4e78befdf486e2393d8eb5a14", 0x47}, {&(0x7f0000002140)="f1abdef71e25357b9b1403d9ee6bc98db09180d1379064de99307a96760b61098270a8ee7ef7a3298ad01246fe3572c78dfffab62410368fa5799033c4c6e94414c59ea11420003eb4f57d182ee90127768c537e356415f9a456538bc54311956fd3d8521c440d72a55d063938e6d89df37be5a94d7ed4836198b9f3512cd7f0d69a811d9f011f991a13f856d150dc44a82f650ce67fd0016d07c87a387ba7a3415f3f2d60430138848ce00280f7714f07369bdba97cda5ec8efd8e58f28a070c78c31210f9fe91a8ab4e05f9a410546227f24200b5d7447ada0a8a8305aa01351425d36b445d62bad8d", 0xea}, {&(0x7f0000002240)="399754781a5af01f4311fafb81d5b8cbb2fe0ce29728afa3ada6b41514ae7a68a2532cdb26e5404fe058b179da11f1f125fcc38096ea19bc08ae7f394853216669ee9f15d065fa250e07306eff19c62b87893f7243ed9f35efb0a8421a7d6befdcc04165865b7cb67d0f926ca3bd55d2c9b7d3def4cb37999445367f3411d2b578421dc0a426b619f2549e5eb1671e23273505631ce1a3f9b0f4d8b0b94193301bab2bd0341130cb9980353272841d3dab7fa3f4adab7bfef72dc105", 0xbc}], 0x3, &(0x7f0000002340)=[{0x40, 0x1, 0x5, "ee0e8c92e63d308f52ea418101c482b57655d1b7712ae136c86612763d00f5a8968fd513342f29644aae78d185"}, {0x28, 0xd7ff9758768af770, 0x7, "455b343f6caa8c4a911d6ec5d68065b803edd4964b4f923b"}, {0x18, 0x111, 0x2, "a758cb77fd55"}, {0x80, 0x10e, 0x6, "477ff3c3412cdf49c0f9a936fd580056cbe47d57fe975ea02d5597d2b2a918f6aaae0e17ecda3936d87d26fd33cde8a41244812d749223fdc6b2ec437e7aa2ebf8aba66f7dabc19b5667645ec503c7fd72de66f9ca88de1781c58d6993a4adbc1bdf6f70f7655395eec3045dd305"}, {0x30, 0x11, 0x1, "5fc0f16ed52550cbd8342baf8ab3063fd2f52f482be1e013f1d1"}], 0x130}}], 0x6, 0x20048801) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x1010000}}}}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000000), 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x4000010) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) 21.648777304s ago: executing program 4 (id=1037): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x226682, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETCARRIER(r2, 0x400454e2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x321, 0x1070bd2b, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 21.557594316s ago: executing program 4 (id=1038): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001200010228bd7000fcdbdb2500000000", @ANYRES32=0x0, @ANYBLOB="2000000002000000080029"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="b40000001800bc26eb010000000000000000000200800000010009000000000600150001000000900016808c00018e26befa5315b42f76c167c5e9c341deba6306737543d44fd8efd62d1cb4f92f0cae811876e0092aede744661eaab83c721646f8c74b44e1c0015ed8b07c81494bf9b8e3b9b9898969bb5a700d25b2f6f4673e0a0000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3ec, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r2) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fddbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="24002d00040001"], 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380000005500e501000000000000000007000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="01000000ffffffff0002000000ff00000000000086dd0000a2c3d50c86fb49a4ccf55ff793ed69ce39660d56151ee5d81ac4f0f2501b4084434bbedd798c262f379893c43f8bebfb64e434ea996c534d47b48eea1aeb95e5ee82bf9955c9d63b7e094b8b1efc1f0000000000000032f1f4a3d86c91ad47f27f2a0f06f5b94d2791daf1cf26ddc372b37d5d69"], 0x38}, 0x1, 0xf0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x6c, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}, @TCA_CODEL_TARGET={0x8, 0x1, 0xd8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7f}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x5, 0x2, 0x3ff}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8b7}]}}]}, 0x6c}}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x1, 0x761, 0x4, 0xffff, {{0xc, 0x4, 0x1, 0x8, 0x30, 0x400, 0x0, 0x7f, 0x2f, 0x0, @local, @private=0xa010100, {[@timestamp={0x44, 0xc, 0xe, 0x0, 0x3, [0x8, 0x2]}, @generic={0x94, 0xf, "b304e242a04808b5438bada034"}]}}}}}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x78, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffd}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x5, 0x40}}}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xfff8, 0x3, 0x9}, {0x0, 0x8713, 0x8, 0x10001}}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x80000000, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x1, 0x700, 0xce, 0x2}}) socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 21.47533559s ago: executing program 3 (id=1040): socket$inet6(0xa, 0x3, 0x87) (async) r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@private=0xa010101, @in6=@loopback, 0x4024, 0x0, 0xfffd, 0x9, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0df, 0x40000000000080, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0x0, 0x0, 0x4}, 0xc1, 0x0, 0x1}, {{@in6=@loopback, 0x1, 0x6c}, 0x2, @in6=@empty, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x20000000, 0xfffffffd}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000003c0)={0x1d, r3}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800", @ANYRES16=r4, @ANYBLOB="0100000000000000000014"], 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x214, r4, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x59}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}]}, @TIPC_NLA_SOCK={0xb4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf62}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc4b5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfc18}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcc1b}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x100000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xffffb205, @dev={0xfe, 0x80, '\x00', 0x44}, 0x8197}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008010) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xbe}, [@ldst={0x5, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xbe}, [@ldst={0x5, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 21.233749473s ago: executing program 3 (id=1044): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="0303fdffffff000000003d0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x804) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000093df290000000000000000000095000005b5b18af814f850061c0c738499a600000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r3, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@getqdisc={0x38, 0x26, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x10, 0xf}, {0xd, 0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="0303fdffffff000000003d0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x804) (async) socket(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000093df290000000000000000000095000005b5b18af814f850061c0c738499a600000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r3, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@getqdisc={0x38, 0x26, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x10, 0xf}, {0xd, 0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}}, 0x0) (async) 20.947486584s ago: executing program 3 (id=1046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0xffffffffffffffff, 0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r1, &(0x7f00000006c0)="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", 0x176) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00005100000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, r7, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, r11, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) 20.857461731s ago: executing program 4 (id=1047): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x8, 0x1, 0x73a0, 0x2}, {0x6, 0x1, 0x3, 0x2, 0x7, 0x9}, 0xdd, 0x5, 0x249}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa668cd67f58edc68}, @TCA_TBF_BURST={0x8, 0x6, 0x2}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20.741551767s ago: executing program 4 (id=1048): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="d2518cd14c1800000000edffffff0000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000007800)={0x6, @empty, 0x4e24, 0x0, 'lc\x00', 0x10, 0xff, 0x31}, 0x2c) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="be5317f2f46943", 0x7}, {&(0x7f0000000100)="539f77cff50d95e3cf7d8a7ea117ae187467264e69ffce61291a7500d282f4d65dfa7af522af3a42a7769a6fc8e8789459332c4d508994ac24f3fcadb43bc1c17e13cded94100709e63d1d2145d9039e88dfaae7f122dd67bef67b89aefa294373377ea6f7934c83cbb7c8ccbe27d282cedca9a0751661cff484a4effe900911d541a975490edc1fd8d5aff2bab1d443375f90b16a3ed34303734cd60929e4a11b15310fc4d022406299884080cecd426fcb97f1a190ac7fe6ad6c2fd7ae1f151f8cfd41bb38fa0395", 0xc9}], 0x2) write$rfkill(r1, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8) 19.431490955s ago: executing program 1 (id=1058): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x8, 0x1, 0x73a0, 0x2}, {0x6, 0x1, 0x3, 0x2, 0x7, 0x9}, 0xdd, 0x5, 0x249}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa668cd67f58edc68}, @TCA_TBF_BURST={0x8, 0x6, 0x2}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 19.199669374s ago: executing program 1 (id=1059): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x24020400) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1030000, 0x1000, 0x5}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, r2, 0xda409aa40cc3acf1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044081}, 0x20008000) 19.127909186s ago: executing program 1 (id=1060): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="62202a3a2a2077e2"], 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000feffe31d520380000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000010001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.923461305s ago: executing program 1 (id=1062): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711220000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791018000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r1 = socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r6, 0x0, 0x6df33d3f}, 0x18) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x20, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x40, 0x0, 0x200, 0x470bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x200400d0}, 0x0) socket(0x10, 0x3, 0xc) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x2a020400) listen(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x100}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e22, 0x400, @empty}, 0x1c) sendto$inet6(r7, &(0x7f0000000000)="0e3e", 0x2, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 18.036307953s ago: executing program 0 (id=1067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0xd1383000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0xfffff000) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r6, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 17.846231604s ago: executing program 0 (id=1069): r0 = socket(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmmsg$sock(r0, &(0x7f0000000380)=[{{&(0x7f0000000240)=@can={0x1d, r1}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)="f577a0461cf6bbe0016d41b98c1c8c64e3342a2c10fd0dda85cf6fdf58e4e87f1b3e8bd74befdd38a66f969f9ab164b871a0c95ac7f4a0e1bfc2779a35a5063f58452b2a8a444487fa1b90e9e563fc864866e542dff5fb7c42be28a553a6d9d01c8884f1f26734a392ef2dbb766d1824a7f3cbd302b9c469465da0eb0c504b2c54fec167ed976aefca336fc946b92d4e5c7f315cc63aa9f761d8aebe5fbd12c901831a9ce37b0fd6d2888202ac207eeb40a2c5605daa636ebb4dbe5032c9f2887b3fa66210571750cb3e44509cfd89c01dc0a4d333151d6b5265d741c5dbdb289adb6587", 0xe4}, {&(0x7f0000000640)="5815900306f758346c5d729a83f1487d4f1e94807128575fc9b8cc6e39a32ab3c3f5405e9718260b0ce028c70fd16ba88cd2f827741009b298ad319f259e9eaa9b95748f341930d0c2a02fc99c08e3ae5d88e27e1300c2543ebd4ac7d60307307b76be69f8fa321338a7fd04059e446443e5ed696e1a44bf5d0dbf2737d89f1c177abdcd5b3a4196c886b7d91a1a45e05c5fff3d4a9845b25e3d2754ad1bbd7e4b7dc4e98ed958a9585306623b7bd50faca89f8998712e9c27735a2936aeeef31026c83475c3c55fc7a3ca4a9908b27f035c41edac18055ac40a4ff5977ade4a49f1", 0xe2}, {&(0x7f0000000740)="d9c72bc5fe18984cc05fcf73f39c36853960b9e1933e43da6e60277a3295d1451fd14b991d5f2d375953a74d99d4b517fcd947cdeea9b174aa978c59f88c7e97dd26112dd3d70826ed6aaf82d141bbe931a54616bff08e29d9b844e3ac909aa7906158ac214da4325a3ac4c874abcc62ea9b0094d567cd8239f68a1a6f5ac8b494fdfd7872c4d8b0bfd27c767c23f84c98681708af474421fc5a2466b127a6f68ba7a9a29137ec3735e579a2e6ea9c253f22c1b207128e250af87d87cbf59fd8fcfcfe24ff06811ba2bb9e3e0df55f1f34df98019d7e31ed7fbf5c0ac839886ffb6eb5", 0xe3}, {&(0x7f00000002c0)="9d092ba96a36ce4f6d881c9d967b4f27bc3c003d5612f289fc6319302a02b7d623f7513f4891a69189493424f47fc3bf7f85e32b4e9aa763657d3f67af1560c59a0a1518588952e0543103319a4d1c37fb11b2682a79d51bd7", 0x59}, {&(0x7f0000000840)="c5886fb4090e1f0e0648a6b6ddb061cfae8d6c7a39197e05ba7ac1159158e6ba6664d764c3c13ff623964983d25f826c8af38886d418e33d92da5877b2c3bb1e085d076feabecab645a9afefcbf00bf4c7b645e1fd7bdb739672b6dbbb1072a475f8317756158ca5e6f75ed89cb7ff3d3f57d4315c8bd6df800f16", 0x7b}], 0x5}}], 0x1, 0x1) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0xfffffffd, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x44040) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r8 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r7}], 0x1, 0x0, 0x0, 0x0) (async) write$cgroup_pressure(r8, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) (async) close(r7) (async) close(r8) (async) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000004c0)={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x40000, 0x40, 0xcc84, 0x100, 0x1}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0x806000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000b, 0x6e071, 0xffffffffffffffff, 0x80000000) 17.767358744s ago: executing program 0 (id=1071): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xd1}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x40000000}}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.66920534s ago: executing program 0 (id=1072): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f00000001c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, 0x0}}], 0x1, 0x8044) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x2, 0xd, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x47, 0x7, 0xfffffffb}}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0xfffffffb, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x50) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="c00100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000480000004800128009000100766c616e00000000380002800c0003000000000005000000280004800c000100ff0f0000000000000c00010006000000050000000c000100060000000900000014000300766c616e30000000000000000000000008002c00ff03000005"], 0x1c0}, 0x1, 0xba01}, 0x20048050) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x8000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="840b000000000000050200010104000000000738000000010c060600090000000000000001000000ffffffff0100000000000000e1000000000000000500000000000000040109c20400000400c910fe8000000000000000000000000000aa00"], 0x68) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) r8 = socket$key(0xf, 0x3, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140062001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc140000000000000100000a0b667bb566da0a39f7eccfdff3107ac54ee5d0b00b879cdf06c7479668cfdd67117a4be05519babfb498722ca50b8a28da9d298b17dea2aba4ea127c9258a96ce5b730d12a90644e626a5f9cf1b4f0d8e0d2849d13129b2d119ad04b233563ffeb25991b1ce90af65e99244def3a4620993d826052534bd887f13d9eeae881095a"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010100000000000000000a0000040900020073797a310800000008000a40fffffffc0900010073797a3100000000080005400000000b14"], 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030c000000ff0e0000000000000200090040000000700000000000000003000600000000000200000000000000000000000000000002000100000004d300000502000000e0030005003c00000002"], 0x60}, 0x1, 0x7}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYRESDEC=r3, @ANYRES16=r5, @ANYRES32=r7, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a010100000000000000000000000000fc0100000000000000000000000000010a303e000100000000000000000000003c000000000002000a000a002c0013007f000001000000000000000000000000e0000001000000000000000000000000000000000a000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r0, 0x0) r11 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r11, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) 17.283164898s ago: executing program 0 (id=1073): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003001000180000000000000000000000000000009500000000000000cdaa0000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xec, &(0x7f00000004c0)=""/236}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000200)={0x2, @none={0x0, 0xffff}}, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvfrom$packet(r3, 0x0, 0x0, 0x40, 0x0, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x178}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffe0}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@delqdisc={0x104, 0x25, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff4, 0x3}, {0x2, 0xf}, {0x6, 0xffe7}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @TCA_STAB={0xd0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x1, 0xd860, 0xb1e, 0x2, 0x3, 0x7, 0x4}}, {0xc, 0x2, [0x6, 0x1, 0x3, 0x9]}}, {{0x1c, 0x1, {0x6, 0xff, 0x8001, 0x9d, 0x2, 0x20000000, 0xb, 0x1}}, {0x6, 0x2, [0x81]}}, {{0x1c, 0x1, {0x6, 0x8, 0x200, 0x7, 0x0, 0x3, 0x41cf9903, 0xa}}, {0x18, 0x2, [0xc1, 0x3, 0x4, 0x4, 0x2f, 0xfffe, 0x7020, 0xfffb, 0xfffc, 0x3]}}, {{0x1c, 0x1, {0x6, 0x1, 0x6, 0xadd2, 0x0, 0x4be, 0x6485, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x5, 0x2, 0x2, 0x0, 0x1, 0x8, 0x70ff, 0x4}}, {0xc, 0x2, [0xc, 0x4, 0x1, 0x1]}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, 0x0, 0x41) syz_80211_inject_frame(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="94000f000802110000000802110000010160160089b3630fd2bead961be2761f5aa3762f3e77cd8cac6fdc963ab4cd268ff65c42950fa7580a36581d0536609be6cdd5b5848eefc43a9b307032fa8480546a92c157ca3940d9586bf5d49d6ce6f5404f6f10ed55359ff61e4b653a4541ec0d5563606e4536196bdd84661efd3905d57c7b6e2a4afa9dbc7a9efb358e7dea9711d4"], 0x94) 17.059247937s ago: executing program 1 (id=1074): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x0, 0x81, "238339", 0x6, 0x4}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x33, @empty, 0x4e23, 0x1, 'ovf\x00', 0x35, 0x3, 0x41}, {@private=0xa010102, 0x4e23, 0x2, 0x7, 0x23, 0x8}}, 0x44) write(r0, &(0x7f0000000180)="4a9a0e3d1cdab33e8afbdacac0b574e656e930ecb827334126c457604fc9029deb180d26ca2337b7073207bf1aa60348d64ed2dc0da0a82caa8b1a2d01b40d54330054e48edb55ecc103d93d42d9b85b4916a2adf0f06fd310797fe9cc7286e2295325f70a2f5d776a3f8b6d671c69a7f166a1c50e927a73d1da00d955ef487ab7d656e7963af1b17e5b9ee9d3ff4240", 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x11}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x47}}}}, [@NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r2) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x8c, r4, 0x8, 0x6, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x15}, 0x48000) r5 = socket$kcm(0x29, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r2) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008090}, 0x4044000) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r3, 0x200, 0x10000, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000b80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000840)={0x2c4, r3, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TESTDATA={0x4d, 0x45, "9acd12f285bf6a1f770f210b4e0b87b3682fe5781d5d77d269a83d59090ce4a88f3b5bb798dff5bcb3ac891acc6ade7c7c11b771a491513ed8f2363017db0a3f844df92ddb5aea1022"}, @NL80211_ATTR_TESTDATA={0xd2, 0x45, "b954088cef7f1f09938bc65ae984a694fa5811bf078d750781a18fd9da4b550d2dc7f1860ed40ba0afdeca02102884fdd0343f9964dad954ebbd297f70c3ca8fba8f7d1bf4c3574ee4f1f3797429ceff10d1a4f92fbaf8391f94348742f848da10837e84fc7fd9446a357666b0790b4801af854a1da39ef7645ff46860e79a514a7ee7c96e4328cf33f075ee90e25a99fe61d8351a1ad941651f09856665fb4a3b0f0108347e7bf84034cd29fc1d040affb3f86d9ec578dc8f56a277cc73dd4a43112a93099be8258bc7d924a828"}, @NL80211_ATTR_TESTDATA={0x5f, 0x45, "483ebf3d186828a55ebe276e0e2a21ca277d8954d8610945074da76d0573b3c0fdc4b0fccfbcf9870a7aff5c1bad56b11f4aacfdd9f2a972d3592cf5b382a1500c97a19dfd4387b10f5d9dc21b226c1dfa7c0c4c41c71d21742b6d"}, @NL80211_ATTR_TESTDATA={0x9, 0x45, "3f3a3d5798"}, @NL80211_ATTR_TESTDATA={0x4a, 0x45, "7e7f620a8ffacd7850c658716f940192bc4743e470c8ffec43f62ba1dd76a81ae4f786027753e775e453b59d0dc9f150bde7424ed2b19f1288e7fdf9bcb400df32a0f4044e67"}, @NL80211_ATTR_TESTDATA={0xc, 0x45, "9491b0e5f6267944"}, @NL80211_ATTR_TESTDATA={0x98, 0x45, "c89f8cf2f5cbaa5608b8fa78201675e0b6c84bf1f0255fbafe8404fd7b0e80e12c5a6f9a9d4ac385115a09cd666a31b3dcaaf7659a8808fbc9292d11beca7379e2c11b5898e172cd0c98ff1544ed8a201a51497189e79447402dcec41e7ba210f4a8583d55d958c2a4db20c1725a4f223a5c5d43f649f7e8bf4937dfb4cb75e913b4c0dee1e05de267196e6a0f7306a680e0bb1c"}, @NL80211_ATTR_TESTDATA={0x27, 0x45, "b5da71c9ffed5037eede0ae9893513beba9790791549cfab47a2bdbccbcc788fe5e9e4"}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x20000810}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r8, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x40, r3, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x47}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x44}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000000cc0)=0x10, 0x4) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000d00)={0x0, 0x7, 0x7f, 0x10, 0xf7, 0xe3, 0x10, 0x2f, 0x1, 0xa, 0x0, 0xf, 0xf, 0x2}, 0xe) r10 = accept4$inet6(r9, &(0x7f0000000d40)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000d80)=0x1c, 0x0) sendmsg$inet6(r10, &(0x7f0000003140)={&(0x7f0000000dc0)={0xa, 0x4e23, 0x1, @local}, 0x1c, &(0x7f0000001e40)=[{&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="abb9dd2d4cbc5d7e5d9d8d11a911bb085a1af8524f", 0x15}], 0x2, &(0x7f0000001e80)=[@hopopts_2292={{0x90, 0x29, 0x36, {0x3b, 0xe, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0xb7, 0x3, [0x7fff, 0x2b1, 0x2, 0x25b00988]}}, @calipso={0x7, 0x30, {0x0, 0xa, 0x3, 0x674, [0x9, 0x3, 0x4, 0x9, 0x145]}}, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @remote}, @ra]}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @hopopts={{0x1060, 0x29, 0x36, {0x3b, 0x208, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x1, 0x1000, "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"}, @calipso={0x7, 0x20, {0x0, 0x6, 0xfc, 0x1, [0x7, 0x5, 0x6]}}, @ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x1}, @pad1, @jumbo={0xc2, 0x4, 0x6}]}}}, @hopopts_2292={{0xb8, 0x29, 0x36, {0x84, 0x13, '\x00', [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x58, {0x2, 0x14, 0x3, 0x200, [0x26, 0x4, 0xffffffff, 0xa, 0x100000001, 0x7, 0x101, 0x7, 0x10001, 0x9]}}, @jumbo={0xc2, 0x4, 0x1}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x62, 0x12, 0x0, 0x2, 0x0, [@mcast1, @empty, @dev={0xfe, 0x80, '\x00', 0x42}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @private0, @remote]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfcc}}, @hopopts={{0x30, 0x29, 0x36, {0x5e, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}], 0x12b0}, 0x800) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000003180)='illinois', 0x8) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000035c0)={&(0x7f00000031c0)=@xdp, 0x80, &(0x7f0000003500)=[{&(0x7f0000003240)=""/161, 0xa1}, {&(0x7f0000003300)=""/137, 0x89}, {&(0x7f00000033c0)=""/180, 0xb4}, {&(0x7f0000003480)=""/123, 0x7b}], 0x4, &(0x7f0000003540)=""/73, 0x49}, 0x42) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r11, 0x89ea, &(0x7f0000003600)) socket$inet6_mptcp(0xa, 0x1, 0x106) 16.995810273s ago: executing program 1 (id=1075): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000000070000060900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000c0800034000000000080002400000000d080001400000000808000240000000090800014000000009080002400000001808000140000000a4"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, 0x0, 0x8000) close(0x4) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getnexthop={0x20, 0x6a, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4058000}, 0x80) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000240)=0x300121, 0x4) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r11, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) writev(r11, &(0x7f0000000540)=[{&(0x7f0000000000)="d9", 0x1}], 0x1) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) pwritev(r6, &(0x7f0000000400)=[{&(0x7f0000000340)="577a29be4c834fe105e3399e08de3d945090b935490a65b37419c3391c7a68c302f06f897abc0381c27dd32f", 0x2c}], 0x1, 0x48, 0x3) write$nci(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="500401f7c038e1"], 0x7) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=@allocspi={0x11c, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d2, 0x33}, @in6=@empty, {0x0, 0x0, 0x129b, 0xfffffffffffffffc, 0x0, 0xfffffffffffffff1, 0x3}, {0x2, 0x0, 0xfffffffffffffffc, 0x4}, {0x400000}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4}, 0x0, 0x1a0b1}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd26, 0x2, 0x70bd26, 0x70bd2c, 0x6}}, @extra_flags={0x8, 0x18, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x5010}, 0x4000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x0) 16.467002898s ago: executing program 0 (id=1080): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/183, 0xb7}, {&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000002900)=""/4111, 0x100f}, {&(0x7f0000000340)=""/89, 0x59}, {&(0x7f0000000500)=""/221, 0xdd}, {&(0x7f0000000980)=""/259, 0x103}, {&(0x7f00000003c0)=""/108, 0x6c}], 0x8}, 0x80080000}], 0x4, 0x4022, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd}, 0x94) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x14}, 0x10) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000000)="441f08ee00270bee724ecd8391ab161f02a79f25a6ac65a600926000000000d80990b946f7", 0x25) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@fallback=r9, 0x33, 0x1, 0x74aca849, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x275a, 0x0) pwrite64(r10, 0x0, 0x0, 0x40008001) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 15.727543109s ago: executing program 2 (id=1084): r0 = socket$inet_sctp(0x2, 0x400000000002, 0x84) sendto$inet(r0, &(0x7f0000000080)="e3ee581e7e", 0x5, 0x0, &(0x7f0000000040)={0x2, 0xff7e, @loopback}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a000100000000000000000081000001"], 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="120000007a000106000000000000000007"], 0x18}], 0x1}, 0x4000000) listen(r0, 0xda8c) r3 = accept4(r0, &(0x7f0000000240)=@ethernet={0x0, @multicast}, &(0x7f00000001c0)=0xfffffd2e, 0x80000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) 15.655697251s ago: executing program 2 (id=1085): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000200"}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 15.610560354s ago: executing program 2 (id=1086): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYBLOB='\x00\x00\x00@'], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x8850) (async) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x8850) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f00000000000000cb09000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf9100fda77b7a00b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1005, &(0x7f0000001a00)=""/4101, 0x41000, 0xcc}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f00000000000000cb09000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf9100fda77b7a00b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1005, &(0x7f0000001a00)=""/4101, 0x41000, 0xcc}, 0x94) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r3, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000005000f40fe00000e", 0x24) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000040801082de8bbb2000000000000000000000000060002400000000005000300"], 0x24}}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000040801082de8bbb2000000000000000000000000060002400000000005000300"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x3, &(0x7f0000000440)=ANY=[@ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x80000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x3, &(0x7f0000000440)=ANY=[@ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x80000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x502, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8480}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) 15.387798188s ago: executing program 2 (id=1087): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) mmap(&(0x7f0000a09000/0x4000)=nil, 0x4000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) pread64(r1, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 15.38583187s ago: executing program 2 (id=1088): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc020000000000000000000000000001ac1414bb0000000000000000000000004e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000100000000000000000000000000000000000000000001000000a80c0000000000000000000000000000000000000000000000000000000009000000000000006c0000000000000000000b00000000000000000000000000000000000000000000000100000000000000c4000500fe8000000000000000000000000000bb000004d33c00000000000000fe8000000000000000000000000000000000000000000000000800000000000001000000e0000001000100000001000000000000000000006c00"], 0x17c}}, 0x4) 15.343149589s ago: executing program 2 (id=1089): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='%'], 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) unshare(0x22020600) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="180900000000000000000000000000005f160000771062c2396edef5ce4a747fae2ed4c7280575be25f49117f77c198235e414dbaa64f7c4b54356a07a2b7e015cba094230cfcac1d3d45191a39695689342bc8b38b9503f0876f8", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000189"], 0xfdef) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x2}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000, 0x0, 0x4}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x80000001, 0x2, 0x8, 0x100, r0, 0x3c, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r11}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.020241195s ago: executing program 32 (id=1046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0xffffffffffffffff, 0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r1, &(0x7f00000006c0)="0b00030066f101f5a1a80bd8ff38c74792d621b7983ebe5a13097dbcdb6e0978f3e39c85a0ef25bc3989c83bfcc1ddbcae1013427bf43e44f7a0f11fe3a27526bc4fbaf12b01ef8b37d0a77610df17c52bb5983e646eefc6aa2bde122657d7805082e5f562c39cd681074c803925e2d81bf6bcff212850ff0100000000000025bbaf67d7fd56ac5dae8db84dc058182a0c97532451ac0c760319c01875fdd33de4a76a042aa7449e67ee550711bf3c41a862c5fa3e971f250eb139b2d027a61e0f2e5b5887f41d8d88fba3b487dd81b7501c5b99b2e763ad88f449d704afa9f8ad3270fc1d9cb1552e02275d18ae5e95a0120dd97a4e1aa44bfef3efe4a101340000e7171dd1b6e1502edf43f4e7ba5f4692d15f7a4fa8f4f91b68a456e340dd1e9a3092581713182dade2b7ffafd77160665e892e54244011b410af19b43a8467e955d7136a6e404350f5a4d1cb442fb971c67bb41dbadc234a72f18c85dad3a50e648526834574fd70b377bc6fcbe0e28dc26b4c30", 0x176) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00005100000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, r7, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, r11, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) 4.986526634s ago: executing program 33 (id=1048): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="d2518cd14c1800000000edffffff0000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000007800)={0x6, @empty, 0x4e24, 0x0, 'lc\x00', 0x10, 0xff, 0x31}, 0x2c) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="be5317f2f46943", 0x7}, {&(0x7f0000000100)="539f77cff50d95e3cf7d8a7ea117ae187467264e69ffce61291a7500d282f4d65dfa7af522af3a42a7769a6fc8e8789459332c4d508994ac24f3fcadb43bc1c17e13cded94100709e63d1d2145d9039e88dfaae7f122dd67bef67b89aefa294373377ea6f7934c83cbb7c8ccbe27d282cedca9a0751661cff484a4effe900911d541a975490edc1fd8d5aff2bab1d443375f90b16a3ed34303734cd60929e4a11b15310fc4d022406299884080cecd426fcb97f1a190ac7fe6ad6c2fd7ae1f151f8cfd41bb38fa0395", 0xc9}], 0x2) write$rfkill(r1, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8) 1.012537255s ago: executing program 34 (id=1080): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/183, 0xb7}, {&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000002900)=""/4111, 0x100f}, {&(0x7f0000000340)=""/89, 0x59}, {&(0x7f0000000500)=""/221, 0xdd}, {&(0x7f0000000980)=""/259, 0x103}, {&(0x7f00000003c0)=""/108, 0x6c}], 0x8}, 0x80080000}], 0x4, 0x4022, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd}, 0x94) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x14}, 0x10) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000000)="441f08ee00270bee724ecd8391ab161f02a79f25a6ac65a600926000000000d80990b946f7", 0x25) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@fallback=r9, 0x33, 0x1, 0x74aca849, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x275a, 0x0) pwrite64(r10, 0x0, 0x0, 0x40008001) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 981.510706ms ago: executing program 35 (id=1075): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000000070000060900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000c0800034000000000080002400000000d080001400000000808000240000000090800014000000009080002400000001808000140000000a4"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, 0x0, 0x8000) close(0x4) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getnexthop={0x20, 0x6a, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4058000}, 0x80) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000240)=0x300121, 0x4) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r11, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) writev(r11, &(0x7f0000000540)=[{&(0x7f0000000000)="d9", 0x1}], 0x1) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) pwritev(r6, &(0x7f0000000400)=[{&(0x7f0000000340)="577a29be4c834fe105e3399e08de3d945090b935490a65b37419c3391c7a68c302f06f897abc0381c27dd32f", 0x2c}], 0x1, 0x48, 0x3) write$nci(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="500401f7c038e1"], 0x7) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=@allocspi={0x11c, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d2, 0x33}, @in6=@empty, {0x0, 0x0, 0x129b, 0xfffffffffffffffc, 0x0, 0xfffffffffffffff1, 0x3}, {0x2, 0x0, 0xfffffffffffffffc, 0x4}, {0x400000}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4}, 0x0, 0x1a0b1}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd26, 0x2, 0x70bd26, 0x70bd2c, 0x6}}, @extra_flags={0x8, 0x18, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x5010}, 0x4000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x0) 0s ago: executing program 36 (id=1089): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='%'], 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) unshare(0x22020600) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="180900000000000000000000000000005f160000771062c2396edef5ce4a747fae2ed4c7280575be25f49117f77c198235e414dbaa64f7c4b54356a07a2b7e015cba094230cfcac1d3d45191a39695689342bc8b38b9503f0876f8", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000189"], 0xfdef) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x2}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000, 0x0, 0x4}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x80000001, 0x2, 0x8, 0x100, r0, 0x3c, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r11}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.191' (ED25519) to the list of known hosts. [ 71.621352][ T5850] cgroup: Unknown subsys name 'net' [ 71.790607][ T5850] cgroup: Unknown subsys name 'cpuset' [ 71.799254][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.183763][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.607785][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.636405][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.638689][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.654366][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.662127][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.664669][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.670342][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.678959][ T5868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.684896][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.691296][ T5868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.699005][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.706227][ T5868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.712253][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.719668][ T5868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.733709][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.767644][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.779956][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.780045][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.796484][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.804010][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.812363][ T5867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.821032][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.830565][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.838858][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.846973][ T5867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.416964][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 76.484733][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 76.609642][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 76.662331][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.669692][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.677073][ T5860] bridge_slave_0: entered allmulticast mode [ 76.684810][ T5860] bridge_slave_0: entered promiscuous mode [ 76.703104][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 76.719642][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.726805][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.734129][ T5860] bridge_slave_1: entered allmulticast mode [ 76.741194][ T5860] bridge_slave_1: entered promiscuous mode [ 76.779536][ T5876] chnl_net:caif_netlink_parms(): no params data found [ 76.851717][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.885255][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.892544][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.899767][ T5861] bridge_slave_0: entered allmulticast mode [ 76.906731][ T5861] bridge_slave_0: entered promiscuous mode [ 76.921116][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.958457][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.965591][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.973734][ T5861] bridge_slave_1: entered allmulticast mode [ 76.981046][ T5861] bridge_slave_1: entered promiscuous mode [ 77.060129][ T5860] team0: Port device team_slave_0 added [ 77.066228][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.073464][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.081086][ T5873] bridge_slave_0: entered allmulticast mode [ 77.088901][ T5873] bridge_slave_0: entered promiscuous mode [ 77.114430][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.136437][ T5860] team0: Port device team_slave_1 added [ 77.142624][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.149882][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.157004][ T5873] bridge_slave_1: entered allmulticast mode [ 77.164253][ T5873] bridge_slave_1: entered promiscuous mode [ 77.177258][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.240126][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.247312][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.255080][ T5870] bridge_slave_0: entered allmulticast mode [ 77.262257][ T5870] bridge_slave_0: entered promiscuous mode [ 77.315408][ T5861] team0: Port device team_slave_0 added [ 77.321556][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.328883][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.336009][ T5870] bridge_slave_1: entered allmulticast mode [ 77.343102][ T5870] bridge_slave_1: entered promiscuous mode [ 77.354175][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.361327][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.387273][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.401693][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.410971][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.418326][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.425522][ T5876] bridge_slave_0: entered allmulticast mode [ 77.432605][ T5876] bridge_slave_0: entered promiscuous mode [ 77.441181][ T5861] team0: Port device team_slave_1 added [ 77.447143][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.454298][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.461531][ T5876] bridge_slave_1: entered allmulticast mode [ 77.469231][ T5876] bridge_slave_1: entered promiscuous mode [ 77.486040][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.493102][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.519501][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.533067][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.623949][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.636238][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.656238][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.663345][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.689301][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.702821][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.735441][ T5873] team0: Port device team_slave_0 added [ 77.742144][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.749270][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.776640][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.787240][ T5867] Bluetooth: hci1: command tx timeout [ 77.796294][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.827574][ T5873] team0: Port device team_slave_1 added [ 77.834903][ T5870] team0: Port device team_slave_0 added [ 77.838563][ T5868] Bluetooth: hci0: command tx timeout [ 77.846178][ T5867] Bluetooth: hci2: command tx timeout [ 77.864236][ T5860] hsr_slave_0: entered promiscuous mode [ 77.870862][ T5860] hsr_slave_1: entered promiscuous mode [ 77.889702][ T5870] team0: Port device team_slave_1 added [ 77.917526][ T5867] Bluetooth: hci4: command tx timeout [ 77.919024][ T5868] Bluetooth: hci3: command tx timeout [ 77.931858][ T5876] team0: Port device team_slave_0 added [ 77.986338][ T5876] team0: Port device team_slave_1 added [ 77.992961][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.000099][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.026543][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.053570][ T5861] hsr_slave_0: entered promiscuous mode [ 78.061155][ T5861] hsr_slave_1: entered promiscuous mode [ 78.067163][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 78.073203][ T5861] Cannot create hsr debugfs directory [ 78.095564][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.102885][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.128930][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.140488][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.147596][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.173549][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.186203][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.193247][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.219207][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.272109][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.279438][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.305564][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.367129][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.374134][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.400416][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.436832][ T5873] hsr_slave_0: entered promiscuous mode [ 78.443142][ T5873] hsr_slave_1: entered promiscuous mode [ 78.449461][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 78.455193][ T5873] Cannot create hsr debugfs directory [ 78.549021][ T5870] hsr_slave_0: entered promiscuous mode [ 78.555220][ T5870] hsr_slave_1: entered promiscuous mode [ 78.562081][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 78.567876][ T5870] Cannot create hsr debugfs directory [ 78.635384][ T5876] hsr_slave_0: entered promiscuous mode [ 78.641976][ T5876] hsr_slave_1: entered promiscuous mode [ 78.648607][ T5876] debugfs: 'hsr0' already exists in 'hsr' [ 78.654347][ T5876] Cannot create hsr debugfs directory [ 78.986892][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.001045][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.013880][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.043415][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.122661][ T5861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.137982][ T5861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.153060][ T5861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.163214][ T5861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.258640][ T5873] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.271011][ T5873] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.282761][ T5873] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.292850][ T5873] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.401849][ T5870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.431570][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.452352][ T5870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.464365][ T5870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.475575][ T5870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.545086][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.589025][ T5876] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.601150][ T5876] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.613406][ T5876] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.623557][ T5876] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.641119][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.648379][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.667248][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.690545][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.697716][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.756349][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.785782][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.792952][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.814819][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.838478][ T5868] Bluetooth: hci1: command tx timeout [ 79.846675][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.853839][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.867617][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.919146][ T5868] Bluetooth: hci2: command tx timeout [ 79.921051][ T5867] Bluetooth: hci0: command tx timeout [ 79.937123][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.979864][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.987000][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.000555][ T5867] Bluetooth: hci3: command tx timeout [ 80.001952][ T5868] Bluetooth: hci4: command tx timeout [ 80.060709][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.067882][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.101366][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.230234][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.258766][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.299644][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.306803][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.339499][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.346668][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.369677][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.391481][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.440680][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.447883][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.494309][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.501904][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.521465][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.678245][ T5860] veth0_vlan: entered promiscuous mode [ 80.686004][ T5876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.748817][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.762918][ T5860] veth1_vlan: entered promiscuous mode [ 80.814747][ T5861] veth0_vlan: entered promiscuous mode [ 80.901393][ T5861] veth1_vlan: entered promiscuous mode [ 80.955190][ T5860] veth0_macvtap: entered promiscuous mode [ 80.971429][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.019866][ T5873] veth0_vlan: entered promiscuous mode [ 81.044416][ T5860] veth1_macvtap: entered promiscuous mode [ 81.079996][ T5861] veth0_macvtap: entered promiscuous mode [ 81.090733][ T5873] veth1_vlan: entered promiscuous mode [ 81.100495][ T5861] veth1_macvtap: entered promiscuous mode [ 81.145022][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.193901][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.219114][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.255096][ T5873] veth0_macvtap: entered promiscuous mode [ 81.263485][ T1116] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.275506][ T1116] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.300892][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.310766][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.322974][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.339643][ T5873] veth1_macvtap: entered promiscuous mode [ 81.364040][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.390110][ T1143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.399974][ T1143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.425255][ T1143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.434253][ T1143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.456467][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.472037][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.501704][ T1143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.537799][ T1143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.546559][ T1143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.569874][ T1143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.658255][ T5870] veth0_vlan: entered promiscuous mode [ 81.668897][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.676805][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.735140][ T5870] veth1_vlan: entered promiscuous mode [ 81.769600][ T5876] veth0_vlan: entered promiscuous mode [ 81.794772][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.817911][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.844099][ T5876] veth1_vlan: entered promiscuous mode [ 81.884662][ T5870] veth0_macvtap: entered promiscuous mode [ 81.909444][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.918626][ T5868] Bluetooth: hci1: command tx timeout [ 81.938279][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.969424][ T5870] veth1_macvtap: entered promiscuous mode [ 81.984664][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.997827][ T5868] Bluetooth: hci2: command tx timeout [ 82.000096][ T5867] Bluetooth: hci0: command tx timeout [ 82.020712][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.058886][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.078325][ T5867] Bluetooth: hci4: command tx timeout [ 82.078333][ T5868] Bluetooth: hci3: command tx timeout [ 82.125952][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.128876][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.162171][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.163489][ T5876] veth0_macvtap: entered promiscuous mode [ 82.176126][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.189791][ T5876] veth1_macvtap: entered promiscuous mode [ 82.227492][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.240834][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.269145][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.288337][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.298858][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.319287][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.331879][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.375396][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.433621][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.513044][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.524203][ T5983] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 82.545004][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.558806][ T5983] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 82.599341][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.615414][ T5983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 82.626330][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.636807][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.668297][ T5989] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2'. [ 82.765319][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.785679][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.985740][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.014065][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.134829][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.146067][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'. [ 83.173485][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.209648][ T6014] lo: entered promiscuous mode [ 83.236559][ T6013] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11'. [ 83.240219][ T56] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0 [ 83.279920][ T56] hid-generic 0005:0007:0008.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 83.344869][ T6016] gtp0: entered promiscuous mode [ 83.380381][ T6016] gtp0: entered allmulticast mode [ 83.401230][ T6019] geneve2: entered promiscuous mode [ 83.422389][ T6012] lo: left promiscuous mode [ 83.438406][ T60] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 83.527563][ T60] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 83.556508][ T6018] fido_id[6018]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 83.577598][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 83.588837][ T1116] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 83.618982][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 83.816221][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 83.997705][ T5867] Bluetooth: hci1: command tx timeout [ 84.078151][ T5867] Bluetooth: hci2: command tx timeout [ 84.079861][ T5868] Bluetooth: hci0: command tx timeout [ 84.158719][ T5868] Bluetooth: hci3: command tx timeout [ 84.161733][ T5867] Bluetooth: hci4: command tx timeout [ 84.266067][ T6062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21'. [ 84.580538][ T6074] netlink: 'syz.1.23': attribute type 4 has an invalid length. [ 84.636844][ T6077] bridge_slave_0: left allmulticast mode [ 84.650225][ T6077] bridge_slave_0: left promiscuous mode [ 84.692587][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.824314][ T6077] bridge_slave_1: left allmulticast mode [ 84.836797][ T6096] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.852725][ T6077] bridge_slave_1: left promiscuous mode [ 84.892608][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.968964][ T6077] bond0: (slave bond_slave_0): Releasing backup interface [ 85.000615][ T6077] bond0: (slave bond_slave_1): Releasing backup interface [ 85.048786][ T6077] team0: Port device team_slave_0 removed [ 85.074937][ T6077] team0: Port device team_slave_1 removed [ 85.082842][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.102477][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.131285][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.160331][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.202830][ T6077] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 85.358017][ T6094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.441472][ C0] Illegal XDP return value 16128 on prog (id 15) dev team0, expect packet loss! [ 85.533856][ T6121] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.636954][ T6121] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.715516][ T6125] Zero length message leads to an empty skb [ 85.731049][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 85.744427][ T6125] netlink: 'syz.1.32': attribute type 29 has an invalid length. [ 85.753851][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32'. [ 85.766017][ T6123] tipc: Started in network mode [ 85.774108][ T6123] tipc: Node identity , cluster identity 4711 [ 85.781127][ T6123] tipc: Failed to obtain node identity [ 85.786727][ T6123] tipc: Enabling of bearer rejected, failed to enable media [ 85.807172][ T6127] netlink: 'syz.3.33': attribute type 83 has an invalid length. [ 85.810618][ T6121] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.942009][ T6129] ve0_virt_wifi: renamed from veth0_macvtap [ 85.964638][ T6121] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.280519][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 86.735584][ T981] cfg80211: failed to load regulatory.db [ 87.436341][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.473205][ T6174] netlink: 'syz.1.40': attribute type 1 has an invalid length. [ 87.574492][ T1116] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.705637][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.785114][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.843933][ T6188] tipc: Started in network mode [ 87.851886][ T6188] tipc: Node identity 12506bf89d44, cluster identity 4711 [ 87.881066][ T6188] tipc: Enabled bearer , priority 0 [ 87.921600][ T6194] syzkaller0: entered promiscuous mode [ 87.927105][ T6194] syzkaller0: entered allmulticast mode [ 87.957760][ T6193] tipc: Enabling of bearer rejected, already enabled [ 87.998939][ T6200] netlink: 'syz.2.47': attribute type 2 has an invalid length. [ 88.016988][ T6200] __nla_validate_parse: 4 callbacks suppressed [ 88.017129][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'. [ 88.042046][ T6200] netlink: 'syz.2.47': attribute type 2 has an invalid length. [ 88.052228][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'. [ 88.070137][ T6193] tipc: Resetting bearer [ 88.131743][ T6193] tipc: Disabling bearer [ 88.435939][ T6214] syz.1.50 uses obsolete (PF_INET,SOCK_PACKET) [ 88.528570][ T6222] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.963192][ T6244] sctp: [Deprecated]: syz.0.55 (pid 6244) Use of struct sctp_assoc_value in delayed_ack socket option. [ 88.963192][ T6244] Use struct sctp_sack_info instead [ 89.000966][ T6243] netlink: 244 bytes leftover after parsing attributes in process `syz.2.56'. [ 89.209803][ T6254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.58'. [ 89.250831][ T6254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.58'. [ 90.438261][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'. [ 90.496422][ T5528] ve0_virt_wifi: left promiscuous mode [ 90.570294][ T6302] netlink: 52 bytes leftover after parsing attributes in process `syz.0.66'. [ 90.579543][ T6302] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 90.866705][ T6318] warning: `syz.1.71' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.919086][ T6320] netdevsim netdevsim3: Direct firmware load for ./bus failed with error -2 [ 91.000391][ T6320] netdevsim netdevsim3: Falling back to sysfs fallback for: ./bus [ 91.245799][ T6334] netlink: 104 bytes leftover after parsing attributes in process `syz.0.75'. [ 91.698701][ T6322] syz.3.72 (6322) used greatest stack depth: 17864 bytes left [ 92.211555][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 92.350426][ T6383] netlink: 104 bytes leftover after parsing attributes in process `syz.1.81'. [ 92.413765][ T6378] vxlan0: entered promiscuous mode [ 92.442752][ T6378] vxlan0: entered allmulticast mode [ 92.525153][ T1143] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.681948][ T1143] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.707491][ T1143] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.736673][ T1143] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.113442][ T6414] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 94.220702][ T6400] mpoa:mpoad_close: () going down [ 94.600131][ T6465] syzkaller1: entered promiscuous mode [ 94.612583][ T6465] syzkaller1: entered allmulticast mode [ 94.824134][ T6477] FAULT_INJECTION: forcing a failure. [ 94.824134][ T6477] name failslab, interval 1, probability 0, space 0, times 1 [ 94.865420][ T6475] __nla_validate_parse: 1 callbacks suppressed [ 94.865439][ T6475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.107'. [ 94.881834][ T6477] CPU: 1 UID: 0 PID: 6477 Comm: syz.1.106 Not tainted syzkaller #0 PREEMPT(full) [ 94.881858][ T6477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 94.881873][ T6477] Call Trace: [ 94.881884][ T6477] [ 94.881892][ T6477] dump_stack_lvl+0x189/0x250 [ 94.881921][ T6477] ? __pfx____ratelimit+0x10/0x10 [ 94.881951][ T6477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.881981][ T6477] ? __pfx__printk+0x10/0x10 [ 94.882021][ T6477] should_fail_ex+0x414/0x560 [ 94.882055][ T6477] should_failslab+0xa8/0x100 [ 94.882084][ T6477] __kmalloc_cache_noprof+0x70/0x3d0 [ 94.882108][ T6477] ? sctp_add_bind_addr+0x8c/0x370 [ 94.882135][ T6477] sctp_add_bind_addr+0x8c/0x370 [ 94.882163][ T6477] sctp_copy_local_addr_list+0x30b/0x4e0 [ 94.882188][ T6477] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 94.882211][ T6477] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 94.882234][ T6477] ? sctp_v6_is_any+0x64/0x80 [ 94.882259][ T6477] ? sctp_copy_one_addr+0x93/0x360 [ 94.882286][ T6477] sctp_bind_addr_copy+0xb3/0x3c0 [ 94.882309][ T6477] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 94.882344][ T6477] sctp_connect_new_asoc+0x2e0/0x690 [ 94.882375][ T6477] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 94.882404][ T6477] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 94.882431][ T6477] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 94.882455][ T6477] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 94.882483][ T6477] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 94.882503][ T6477] ? security_sctp_bind_connect+0x7e/0x2e0 [ 94.882532][ T6477] sctp_sendmsg+0x155c/0x2810 [ 94.882572][ T6477] ? __pfx_sctp_sendmsg+0x10/0x10 [ 94.882596][ T6477] ? __bfs+0x151/0x2a0 [ 94.882626][ T6477] ? aa_sk_perm+0x81e/0x950 [ 94.882653][ T6477] ? check_path+0x21/0x40 [ 94.882674][ T6477] ? __pfx_aa_sk_perm+0x10/0x10 [ 94.882705][ T6477] ? sock_rps_record_flow+0x19/0x410 [ 94.882728][ T6477] ? inet_sendmsg+0x2f4/0x370 [ 94.882744][ T6477] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 94.882771][ T6477] __sock_sendmsg+0x19c/0x270 [ 94.882805][ T6477] ____sys_sendmsg+0x52d/0x830 [ 94.882834][ T6477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.882872][ T6477] ? import_iovec+0x74/0xa0 [ 94.882899][ T6477] ___sys_sendmsg+0x21f/0x2a0 [ 94.882926][ T6477] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.882995][ T6477] ? __fget_files+0x2a/0x420 [ 94.883021][ T6477] ? __fget_files+0x3a0/0x420 [ 94.883059][ T6477] __sys_sendmmsg+0x227/0x430 [ 94.883091][ T6477] ? __pfx___sys_sendmmsg+0x10/0x10 [ 94.883112][ T6477] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 94.883160][ T6477] ? ksys_write+0x22a/0x250 [ 94.883185][ T6477] ? __pfx_ksys_write+0x10/0x10 [ 94.883203][ T6477] ? rcu_is_watching+0x15/0xb0 [ 94.883224][ T6477] __x64_sys_sendmmsg+0xa0/0xc0 [ 94.883248][ T6477] do_syscall_64+0xfa/0x3b0 [ 94.883264][ T6477] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.883290][ T6477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.883307][ T6477] ? clear_bhb_loop+0x60/0xb0 [ 94.883328][ T6477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.883345][ T6477] RIP: 0033:0x7ff5ef98eec9 [ 94.883369][ T6477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.883385][ T6477] RSP: 002b:00007ff5f0763038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 94.883409][ T6477] RAX: ffffffffffffffda RBX: 00007ff5efbe5fa0 RCX: 00007ff5ef98eec9 [ 94.883424][ T6477] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000003 [ 94.883436][ T6477] RBP: 00007ff5f0763090 R08: 0000000000000000 R09: 0000000000000000 [ 94.883448][ T6477] R10: 00000000000c88c4 R11: 0000000000000246 R12: 0000000000000002 [ 94.883460][ T6477] R13: 00007ff5efbe6038 R14: 00007ff5efbe5fa0 R15: 00007ffc07ffc3a8 [ 94.883491][ T6477] [ 95.264941][ T6486] netlink: 'syz.2.105': attribute type 10 has an invalid length. [ 95.336046][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.108'. [ 95.367756][ T6486] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 95.429509][ T6478] bridge_slave_0: left allmulticast mode [ 95.435229][ T6478] bridge_slave_0: left promiscuous mode [ 95.441356][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.457194][ T6478] bridge_slave_1: left allmulticast mode [ 95.466673][ T6478] bridge_slave_1: left promiscuous mode [ 95.491043][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.506508][ T6478] bond0: (slave bond_slave_0): Releasing backup interface [ 95.519520][ T6478] bond0: (slave bond_slave_1): Releasing backup interface [ 95.534649][ T6478] team0: Port device team_slave_0 removed [ 95.545509][ T6478] team0: Port device team_slave_1 removed [ 95.553621][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.561249][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.569914][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.577604][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.586578][ T6478] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 95.700016][ T6503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.111'. [ 95.816037][ T6505] Bluetooth: MGMT ver 1.23 [ 95.845524][ T6506] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.111'. [ 96.231970][ T6524] netlink: 'syz.2.115': attribute type 39 has an invalid length. [ 96.476139][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.120'. [ 96.563250][ T6541] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 96.591064][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.120'. [ 96.856307][ T6545] netlink: 32 bytes leftover after parsing attributes in process `syz.0.123'. [ 96.906400][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.124'. [ 96.931226][ T6558] netlink: 'syz.3.126': attribute type 16 has an invalid length. [ 96.956593][ T6555] bond1 (unregistering): Released all slaves [ 96.989868][ T6558] netlink: 'syz.3.126': attribute type 17 has an invalid length. [ 97.050506][ T6566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.128'. [ 97.665730][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.132'. [ 97.742135][ T6566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.765765][ T6568] bond1: (slave batadv1): Opening slave failed [ 97.833650][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.847251][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.863534][ T6590] netlink: 'syz.3.133': attribute type 32 has an invalid length. [ 97.880386][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.890282][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.901332][ T6590] (unnamed net_device) (uninitialized): option coupled_control: invalid value (12) [ 98.188995][ T6598] veth1_to_team: entered promiscuous mode [ 98.206461][ T6598] batadv_slave_0: entered promiscuous mode [ 98.239845][ T6598] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 98.287044][ T6598] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.333169][ T6598] hsr1: entered promiscuous mode [ 99.309278][ T6655] syzkaller1: entered promiscuous mode [ 99.314793][ T6655] syzkaller1: entered allmulticast mode [ 99.575518][ T6673] netlink: 'syz.0.162': attribute type 1 has an invalid length. [ 99.718950][ T6680] FAULT_INJECTION: forcing a failure. [ 99.718950][ T6680] name failslab, interval 1, probability 0, space 0, times 0 [ 99.732084][ T6680] CPU: 0 UID: 0 PID: 6680 Comm: syz.0.163 Not tainted syzkaller #0 PREEMPT(full) [ 99.732108][ T6680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 99.732119][ T6680] Call Trace: [ 99.732126][ T6680] [ 99.732134][ T6680] dump_stack_lvl+0x189/0x250 [ 99.732160][ T6680] ? __pfx____ratelimit+0x10/0x10 [ 99.732190][ T6680] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.732211][ T6680] ? __pfx__printk+0x10/0x10 [ 99.732248][ T6680] should_fail_ex+0x414/0x560 [ 99.732279][ T6680] should_failslab+0xa8/0x100 [ 99.732308][ T6680] __kmalloc_cache_noprof+0x70/0x3d0 [ 99.732332][ T6680] ? sctp_add_bind_addr+0x8c/0x370 [ 99.732358][ T6680] sctp_add_bind_addr+0x8c/0x370 [ 99.732386][ T6680] sctp_copy_local_addr_list+0x30b/0x4e0 [ 99.732413][ T6680] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 99.732442][ T6680] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 99.732467][ T6680] ? sctp_v6_is_any+0x64/0x80 [ 99.732493][ T6680] ? sctp_copy_one_addr+0x93/0x360 [ 99.732516][ T6680] sctp_bind_addr_copy+0xb3/0x3c0 [ 99.732538][ T6680] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 99.732570][ T6680] sctp_connect_new_asoc+0x2e0/0x690 [ 99.732597][ T6680] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 99.732624][ T6680] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 99.732651][ T6680] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 99.732675][ T6680] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 99.732700][ T6680] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 99.732719][ T6680] ? security_sctp_bind_connect+0x7e/0x2e0 [ 99.732745][ T6680] sctp_sendmsg+0x155c/0x2810 [ 99.732782][ T6680] ? __pfx_sctp_sendmsg+0x10/0x10 [ 99.732811][ T6680] ? aa_sk_perm+0x81e/0x950 [ 99.732841][ T6680] ? __pfx_aa_sk_perm+0x10/0x10 [ 99.732868][ T6680] ? sock_rps_record_flow+0x19/0x410 [ 99.732889][ T6680] ? inet_sendmsg+0x2f4/0x370 [ 99.732904][ T6680] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 99.732926][ T6680] __sock_sendmsg+0x19c/0x270 [ 99.732958][ T6680] ____sys_sendmsg+0x52d/0x830 [ 99.732986][ T6680] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.733017][ T6680] ? import_iovec+0x74/0xa0 [ 99.733047][ T6680] ___sys_sendmsg+0x21f/0x2a0 [ 99.733073][ T6680] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.733132][ T6680] ? __fget_files+0x2a/0x420 [ 99.733156][ T6680] ? __fget_files+0x3a0/0x420 [ 99.733195][ T6680] __sys_sendmmsg+0x227/0x430 [ 99.733226][ T6680] ? __pfx___sys_sendmmsg+0x10/0x10 [ 99.733247][ T6680] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 99.733295][ T6680] ? ksys_write+0x22a/0x250 [ 99.733323][ T6680] ? __pfx_ksys_write+0x10/0x10 [ 99.733341][ T6680] ? rcu_is_watching+0x15/0xb0 [ 99.733365][ T6680] __x64_sys_sendmmsg+0xa0/0xc0 [ 99.733391][ T6680] do_syscall_64+0xfa/0x3b0 [ 99.733409][ T6680] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.733445][ T6680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.733464][ T6680] ? clear_bhb_loop+0x60/0xb0 [ 99.733488][ T6680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.733507][ T6680] RIP: 0033:0x7f7c5e38eec9 [ 99.733524][ T6680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.733540][ T6680] RSP: 002b:00007f7c5f1da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 99.733559][ T6680] RAX: ffffffffffffffda RBX: 00007f7c5e5e5fa0 RCX: 00007f7c5e38eec9 [ 99.733573][ T6680] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000003 [ 99.733585][ T6680] RBP: 00007f7c5f1da090 R08: 0000000000000000 R09: 0000000000000000 [ 99.733596][ T6680] R10: 00000000000c88c4 R11: 0000000000000246 R12: 0000000000000002 [ 99.733607][ T6680] R13: 00007f7c5e5e6038 R14: 00007f7c5e5e5fa0 R15: 00007fff43501e18 [ 99.733639][ T6680] [ 100.328973][ T6690] netlink: 'syz.4.165': attribute type 10 has an invalid length. [ 100.470800][ T6695] netlink: 'syz.2.168': attribute type 1 has an invalid length. [ 100.511457][ T6697] netlink: 'syz.4.165': attribute type 10 has an invalid length. [ 100.551625][ T6695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.559965][ T6697] __nla_validate_parse: 2 callbacks suppressed [ 100.559981][ T6697] netlink: 40 bytes leftover after parsing attributes in process `syz.4.165'. [ 100.720713][ T6690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.773099][ T6690] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 100.805907][ T6701] bond1: (slave geneve2): making interface the new active one [ 100.817202][ T6701] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 100.856489][ T6697] batadv0: entered promiscuous mode [ 100.882088][ T6697] batadv0: entered allmulticast mode [ 100.910348][ T6697] bond0: (slave batadv0): Releasing backup interface [ 100.983075][ T6697] bridge0: port 3(batadv0) entered blocking state [ 101.000464][ T6697] bridge0: port 3(batadv0) entered disabled state [ 101.109541][ T60] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 101.119729][ T60] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 101.311168][ T6717] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.318717][ T6717] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.386544][ T6717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.401365][ T6717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.501716][ T6717] geneve2: left promiscuous mode [ 101.509997][ T6717] vxlan0: left promiscuous mode [ 101.514855][ T6717] vxlan0: left allmulticast mode [ 101.581425][ T79] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.608109][ T79] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.619389][ T79] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 101.647507][ T79] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.676909][ T79] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.707494][ T79] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 101.763302][ T6744] Bluetooth: MGMT ver 1.23 [ 101.772372][ T79] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.787127][ T79] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.796610][ T79] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 101.811041][ T79] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.820429][ T79] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.829575][ T79] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 101.864455][ T6746] tipc: Started in network mode [ 101.888825][ T6746] tipc: Node identity e6d79e84a9c9, cluster identity 4711 [ 101.900981][ T6746] tipc: Enabled bearer , priority 0 [ 101.927200][ T6753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.180'. [ 101.938792][ T6736] tipc: Disabling bearer [ 102.373917][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.185'. [ 102.495801][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.185'. [ 102.789680][ T6783] netlink: 32 bytes leftover after parsing attributes in process `syz.2.188'. [ 103.122662][ T6795] netlink: 'syz.0.191': attribute type 21 has an invalid length. [ 103.146890][ T6795] netlink: 132 bytes leftover after parsing attributes in process `syz.0.191'. [ 103.328014][ T6806] netlink: 248 bytes leftover after parsing attributes in process `syz.3.192'. [ 103.610673][ T6812] batadv_slave_1: entered promiscuous mode [ 103.663068][ T6812] batman_adv: batadv0: Adding interface: macsec1 [ 103.695247][ T6812] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.750042][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.847812][ T5868] Bluetooth: hci4: command 0x0405 tx timeout [ 103.860700][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.918425][ T6812] batman_adv: batadv0: Interface activated: macsec1 [ 104.260348][ T6838] netlink: 592 bytes leftover after parsing attributes in process `syz.4.199'. [ 104.312413][ T6849] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 104.360030][ T6838] netlink: 14 bytes leftover after parsing attributes in process `syz.4.199'. [ 104.790782][ T6838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.834105][ T6838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.855341][ T6838] bond0 (unregistering): Released all slaves [ 105.244612][ T6884] gretap1: entered promiscuous mode [ 105.489545][ T6902] netlink: 68 bytes leftover after parsing attributes in process `syz.3.212'. [ 107.588705][ T6980] netlink: 'syz.0.229': attribute type 2 has an invalid length. [ 107.623410][ T6980] __nla_validate_parse: 1 callbacks suppressed [ 107.623427][ T6980] netlink: 132 bytes leftover after parsing attributes in process `syz.0.229'. [ 107.639994][ T6977] hsr1: left promiscuous mode [ 107.780658][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'. [ 107.932309][ T6990] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 108.405648][ T7006] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 108.593934][ T7024] netlink: 32 bytes leftover after parsing attributes in process `syz.3.238'. [ 108.922175][ T7041] netlink: 60 bytes leftover after parsing attributes in process `syz.2.237'. [ 108.925051][ T7029] syzkaller0: entered promiscuous mode [ 108.990110][ T7029] syzkaller0: entered allmulticast mode [ 109.265038][ T7048] netlink: 20 bytes leftover after parsing attributes in process `syz.1.243'. [ 110.827932][ T7057] netlink: 248 bytes leftover after parsing attributes in process `syz.4.246'. [ 111.026200][ T7063] netlink: 184 bytes leftover after parsing attributes in process `syz.1.248'. [ 111.130768][ T7070] netem: change failed [ 111.292314][ T7081] netlink: 'syz.0.251': attribute type 4 has an invalid length. [ 111.390977][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 111.769541][ T7100] veth3: entered promiscuous mode [ 112.170021][ T7120] syzkaller0: entered promiscuous mode [ 112.175531][ T7120] syzkaller0: entered allmulticast mode [ 112.839511][ T7163] netlink: 60 bytes leftover after parsing attributes in process `syz.1.272'. [ 113.460200][ T7151] syzkaller1: entered promiscuous mode [ 113.465704][ T7151] syzkaller1: entered allmulticast mode [ 113.712311][ T7167] bridge0: port 3(batadv0) entered disabled state [ 113.806050][ T7167] bridge_slave_0: left allmulticast mode [ 113.848622][ T7167] bridge_slave_0: left promiscuous mode [ 113.878237][ T7167] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.901669][ T7189] netlink: 'syz.3.275': attribute type 1 has an invalid length. [ 113.930228][ T7167] bridge_slave_1: left allmulticast mode [ 113.959299][ T7167] bridge_slave_1: left promiscuous mode [ 113.966865][ T7167] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.050280][ T7167] team0: Port device team_slave_0 removed [ 114.095304][ T7167] team0: Port device team_slave_1 removed [ 114.118032][ T7167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.130274][ T7167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.175212][ T7167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.185120][ T7167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.202392][ T7198] netlink: 104 bytes leftover after parsing attributes in process `syz.0.278'. [ 114.220049][ T7167] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 114.323991][ T7189] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.345791][ T7192] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 114.363992][ T7192] bond1: (slave bridge1): making interface the new active one [ 114.374176][ T7192] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 114.409034][ T7196] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 114.825884][ T7228] netlink: 32 bytes leftover after parsing attributes in process `syz.2.281'. [ 114.849601][ T7226] netlink: 32 bytes leftover after parsing attributes in process `syz.2.281'. [ 115.067265][ T7243] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 115.218111][ T7240] netlink: 40 bytes leftover after parsing attributes in process `syz.0.284'. [ 115.222461][ T7250] netlink: 40 bytes leftover after parsing attributes in process `syz.0.284'. [ 115.283075][ T7240] netlink: 40 bytes leftover after parsing attributes in process `syz.0.284'. [ 115.353308][ T7246] veth0_virt_wifi: renamed from veth0_macvtap [ 115.691640][ T7260] netlink: 132 bytes leftover after parsing attributes in process `syz.1.286'. [ 115.708150][ T24] IPVS: starting estimator thread 0... [ 115.840657][ T7263] IPVS: using max 30 ests per chain, 72000 per kthread [ 116.280124][ T7287] netlink: 108 bytes leftover after parsing attributes in process `syz.1.290'. [ 116.341176][ T7289] netlink: 24 bytes leftover after parsing attributes in process `syz.0.291'. [ 116.589861][ T7303] tipc: Enabled bearer , priority 0 [ 116.618965][ T7303] syzkaller0: entered promiscuous mode [ 116.631284][ T7303] syzkaller0: entered allmulticast mode [ 116.732104][ T7303] tipc: Resetting bearer [ 116.886085][ T7317] netlink: 'syz.4.296': attribute type 4 has an invalid length. [ 116.900086][ T7300] tipc: Resetting bearer [ 116.935110][ T7300] tipc: Disabling bearer [ 116.990278][ T7313] macsec1: entered promiscuous mode [ 117.031156][ T7313] macsec1: entered allmulticast mode [ 117.427337][ T7326] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 117.469254][ T7326] bond0 (unregistering): Released all slaves [ 117.850497][ T7364] __nla_validate_parse: 3 callbacks suppressed [ 117.850514][ T7364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.306'. [ 117.896161][ T7368] netlink: 148 bytes leftover after parsing attributes in process `syz.1.303'. [ 118.434064][ T7408] netlink: 44 bytes leftover after parsing attributes in process `syz.2.311'. [ 118.759525][ T7422] netlink: 'syz.2.315': attribute type 10 has an invalid length. [ 118.762250][ T7425] netlink: 36 bytes leftover after parsing attributes in process `syz.3.313'. [ 118.768986][ T7420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.809776][ T7423] syzkaller1: entered promiscuous mode [ 118.815403][ T7423] syzkaller1: entered allmulticast mode [ 119.321665][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.318'. [ 119.444106][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.320'. [ 119.481606][ T5528] veth0_virt_wifi: left promiscuous mode [ 119.556626][ T7448] netlink: 'syz.0.318': attribute type 4 has an invalid length. [ 119.609889][ T7451] netlink: 'syz.0.318': attribute type 4 has an invalid length. [ 119.842779][ T7463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.324'. [ 120.572118][ T7501] netlink: 104 bytes leftover after parsing attributes in process `syz.3.331'. [ 120.919829][ T7509] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 122.315240][ T7543] netlink: 'syz.0.337': attribute type 11 has an invalid length. [ 122.347348][ T7542] netlink: 'syz.1.338': attribute type 1 has an invalid length. [ 122.396988][ T7542] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.338'. [ 122.520601][ T7552] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 122.665480][ T7555] netlink: 36 bytes leftover after parsing attributes in process `syz.2.340'. [ 123.007054][ T7569] veth7: entered promiscuous mode [ 123.093501][ T7578] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 123.421817][ T7589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.343'. [ 123.707314][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.347'. [ 123.738995][ T7605] netlink: 'syz.3.347': attribute type 20 has an invalid length. [ 123.756995][ T7605] netlink: 'syz.3.347': attribute type 21 has an invalid length. [ 123.821004][ T7601] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.347'. [ 124.009747][ T7612] geneve3: entered promiscuous mode [ 124.077246][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.350'. [ 124.114898][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.350'. [ 124.139949][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.350'. [ 124.157258][ T7618] syzkaller1: entered promiscuous mode [ 124.163284][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.350'. [ 124.178147][ T7618] syzkaller1: entered allmulticast mode [ 124.260016][ T7622] netlink: 104 bytes leftover after parsing attributes in process `syz.3.352'. [ 124.596815][ T7633] veth9: entered promiscuous mode [ 124.663790][ T7641] netlink: 'syz.2.356': attribute type 27 has an invalid length. [ 124.705662][ T7638] tc_dump_action: action bad kind [ 124.748404][ T7641] netlink: 204 bytes leftover after parsing attributes in process `syz.2.356'. [ 124.799220][ T7646] netlink: 40 bytes leftover after parsing attributes in process `syz.0.358'. [ 125.589191][ T7682] netlink: 'syz.4.370': attribute type 1 has an invalid length. [ 125.670728][ T7683] veth11: entered promiscuous mode [ 126.150222][ T7702] bridge1: entered allmulticast mode [ 127.417649][ T7749] tipc: Started in network mode [ 127.451398][ T7749] tipc: Node identity 8ae7c3e62e84, cluster identity 4711 [ 127.488235][ T7749] tipc: Enabled bearer , priority 0 [ 127.586689][ T7751] veth3: entered promiscuous mode [ 127.802407][ T7754] syzkaller0: entered promiscuous mode [ 127.818219][ T7754] syzkaller0: entered allmulticast mode [ 127.946086][ T7375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.984288][ T7375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.018442][ T7749] tipc: Resetting bearer [ 128.068838][ T7749] tipc: Disabling bearer [ 128.390474][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c2f3800: rx timeout, send abort [ 128.556789][ T7790] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 128.619774][ T7790] __nla_validate_parse: 5 callbacks suppressed [ 128.619790][ T7790] netlink: 220 bytes leftover after parsing attributes in process `syz.2.392'. [ 128.830300][ T7812] netlink: 104 bytes leftover after parsing attributes in process `syz.1.395'. [ 128.899615][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c2f3800: abort rx timeout. Force session deactivation [ 129.404569][ T7841] netlink: 'syz.2.401': attribute type 10 has an invalid length. [ 129.494620][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'. [ 129.515114][ T7847] netlink: 'syz.4.402': attribute type 30 has an invalid length. [ 129.620695][ T1143] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.648551][ T1143] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.679314][ T7847] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 129.722682][ T1143] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.743804][ T7855] veth3: entered promiscuous mode [ 129.749307][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 129.759335][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 129.769400][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 129.779412][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 129.789083][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 129.798980][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 129.808508][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 129.831335][ T7848] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 129.977979][ T1143] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.992120][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.017652][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.226707][ T7873] wg1 speed is unknown, defaulting to 1000 [ 130.245492][ T7873] wg1 speed is unknown, defaulting to 1000 [ 130.289095][ T7873] wg1 speed is unknown, defaulting to 1000 [ 130.304234][ T7873] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 130.322800][ T7873] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 130.368638][ T7873] wg1 speed is unknown, defaulting to 1000 [ 130.439764][ T7873] wg1 speed is unknown, defaulting to 1000 [ 130.453726][ T7873] wg1 speed is unknown, defaulting to 1000 [ 130.486538][ T7873] wg1 speed is unknown, defaulting to 1000 [ 131.075837][ T7873] wg1 speed is unknown, defaulting to 1000 [ 131.091895][ T7906] veth0_to_bond: entered allmulticast mode [ 131.132687][ T1116] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.167862][ T1116] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.182791][ T1116] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.204847][ T1116] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.220382][ T1116] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.229868][ T1116] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.239411][ T1116] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.323207][ T1116] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.545473][ T7927] trusted_key: syz.2.416 sent an empty control message without MSG_MORE. [ 131.558766][ T7924] wg1 speed is unknown, defaulting to 1000 [ 131.621653][ T7934] veth5: entered promiscuous mode [ 131.880729][ T7951] ipvlan1: entered promiscuous mode [ 131.890374][ T7949] ipvlan1: left promiscuous mode [ 132.151640][ T7965] wg1 speed is unknown, defaulting to 1000 [ 132.386302][ T7974] ip6gretap2: entered promiscuous mode [ 132.474826][ T7969] ip6_vti0: entered promiscuous mode [ 132.596002][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c791c00: rx timeout, send abort [ 132.728618][ T7991] veth3: entered promiscuous mode [ 132.803582][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.818871][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.066258][ T8000] delete_channel: no stack [ 133.104388][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c791c00: abort rx timeout. Force session deactivation [ 133.220275][ T8001] wg1 speed is unknown, defaulting to 1000 [ 133.566966][ T8021] wg1 speed is unknown, defaulting to 1000 [ 133.962328][ T8045] bridge_slave_0: left allmulticast mode [ 133.999205][ T8045] bridge_slave_0: left promiscuous mode [ 134.030847][ T8045] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.058745][ T8040] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 134.073482][ T8045] bridge_slave_1: left allmulticast mode [ 134.109282][ T8045] bridge_slave_1: left promiscuous mode [ 134.115359][ T8045] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.190189][ T8045] bond0: (slave bond_slave_0): Releasing backup interface [ 134.290461][ T8045] bond0: (slave bond_slave_1): Releasing backup interface [ 134.319569][ T8045] team0: Port device team_slave_0 removed [ 134.389162][ T8045] team0: Port device team_slave_1 removed [ 134.396498][ T8045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.409941][ T8045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.419982][ T8045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.428589][ T8045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.438840][ T8045] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 134.458927][ T8001] __nla_validate_parse: 78 callbacks suppressed [ 134.458943][ T8001] netlink: 1 bytes leftover after parsing attributes in process `syz.2.437'. [ 134.636547][ T8057] veth5: entered promiscuous mode [ 134.804233][ T8062] wg1 speed is unknown, defaulting to 1000 [ 134.905986][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.445'. [ 135.043275][ T8047] A link change request failed with some changes committed already. Interface pimreg0 may have been left with an inconsistent configuration, please check. [ 135.105533][ T8080] bridge: RTM_NEWNEIGH with invalid ether address [ 135.134908][ T8085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.173588][ T8121] bond1: (slave dummy0): Releasing active interface [ 135.200318][ T8121] bridge1: entered promiscuous mode [ 135.289231][ T8121] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 135.474398][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 135.497537][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 135.516585][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 135.542410][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 135.561958][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 135.575356][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 135.598123][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 135.619859][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 135.661759][ T8142] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 136.008078][ T8178] wg1 speed is unknown, defaulting to 1000 [ 136.052969][ T8177] wg1 speed is unknown, defaulting to 1000 [ 136.196852][ T8183] veth13: entered promiscuous mode [ 136.545636][ T8144] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.560637][ T8144] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.583187][ T8144] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.617987][ T8144] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.115263][ T8231] Bluetooth: MGMT ver 1.23 [ 137.171657][ T8226] veth7: entered promiscuous mode [ 138.052377][ T8282] !: renamed from dummy0 [ 138.210357][ T8284] wg1 speed is unknown, defaulting to 1000 [ 138.802456][ T8311] sctp: [Deprecated]: syz.3.502 (pid 8311) Use of int in max_burst socket option deprecated. [ 138.802456][ T8311] Use struct sctp_assoc_value instead [ 139.133429][ T8353] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 139.233755][ T8353] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 139.449943][ T8372] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.457453][ T8372] IPv6: NLM_F_CREATE should be set when creating new route [ 139.493292][ T8372] __nla_validate_parse: 93 callbacks suppressed [ 139.493310][ T8372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.508'. [ 139.623121][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.511'. [ 139.633662][ T8380] netlink: 'syz.4.511': attribute type 30 has an invalid length. [ 139.700831][ T8380] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 139.747445][ T8383] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 140.098487][ T8389] wg1 speed is unknown, defaulting to 1000 [ 140.538425][ T8394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.515'. [ 140.957572][ T5868] Bluetooth: hci4: command 0x0405 tx timeout [ 140.977687][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.525'. [ 140.998297][ T8425] netlink: 'syz.4.525': attribute type 30 has an invalid length. [ 141.010033][ T8420] block nbd0: server does not support multiple connections per device. [ 141.038348][ T8420] block nbd0: shutting down sockets [ 141.116789][ T8426] wg1 speed is unknown, defaulting to 1000 [ 141.350408][ T8435] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 141.485612][ T8442] netlink: 'syz.0.530': attribute type 33 has an invalid length. [ 142.011918][ T8464] wg1 speed is unknown, defaulting to 1000 [ 142.302916][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 142.343347][ T8479] netlink: 'syz.3.539': attribute type 30 has an invalid length. [ 142.586229][ T8146] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.603781][ T8146] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.728617][ T8146] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.753278][ T8146] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.825814][ T8485] wg1 speed is unknown, defaulting to 1000 [ 142.960157][ T8502] netlink: 'syz.2.545': attribute type 3 has an invalid length. [ 142.999939][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 143.033691][ T8506] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 143.221754][ T8510] tipc: Enabled bearer , priority 0 [ 143.651914][ T8505] tipc: Resetting bearer [ 144.240048][ T8122] tipc: Node number set to 1327406724 [ 144.778583][ T8505] tipc: Disabling bearer [ 144.822616][ T8516] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 144.832765][ T8516] macsec1: entered promiscuous mode [ 144.839184][ T8516] macsec1: entered allmulticast mode [ 144.844677][ T8516] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 144.985753][ T8524] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 145.313169][ T8546] veth7: entered promiscuous mode [ 145.345114][ T8555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.556'. [ 145.465840][ T8567] netlink: 44 bytes leftover after parsing attributes in process `syz.3.561'. [ 145.510422][ T8568] netlink: 28 bytes leftover after parsing attributes in process `syz.0.556'. [ 145.523822][ T8559] wg1 speed is unknown, defaulting to 1000 [ 145.575883][ T8571] IPVS: set_ctl: invalid protocol: 113 224.0.0.1:20000 [ 145.734665][ T8571] wg1 speed is unknown, defaulting to 1000 [ 145.844041][ T8579] wg1 speed is unknown, defaulting to 1000 [ 145.873748][ T8580] wg1 speed is unknown, defaulting to 1000 [ 145.907608][ T8581] nbd0: detected capacity change from 0 to 63 [ 145.923885][ T8583] block nbd0: NBD_DISCONNECT [ 145.930062][ T8583] block nbd0: Disconnected due to user request. [ 145.938085][ T8583] block nbd0: shutting down sockets [ 145.944489][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.953725][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 145.961916][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.968749][ T8581] bond1: entered promiscuous mode [ 145.971028][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 145.977338][ T8581] bond1: entered allmulticast mode [ 145.983792][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.983822][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 145.983873][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.983896][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 145.991299][ T5869] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.003315][ T8581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.035021][ T5869] Buffer I/O error on dev nbd0, logical block 0, async page read [ 146.035346][ T5869] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.071274][ T5869] Buffer I/O error on dev nbd0, logical block 1, async page read [ 146.098999][ T5869] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.138023][ T5869] Buffer I/O error on dev nbd0, logical block 2, async page read [ 146.154080][ T5869] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.195134][ T5869] Buffer I/O error on dev nbd0, logical block 3, async page read [ 146.224709][ T5869] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.246008][ T5869] Buffer I/O error on dev nbd0, logical block 0, async page read [ 146.266612][ T5869] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.287228][ T5869] Buffer I/O error on dev nbd0, logical block 1, async page read [ 146.311516][ T5869] ldm_validate_partition_table(): Disk read failed. [ 146.321847][ T5869] Dev nbd0: unable to read RDB block 0 [ 146.331398][ T5869] nbd0: unable to read partition table [ 146.349193][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.570'. [ 146.372679][ T5869] ldm_validate_partition_table(): Disk read failed. [ 146.389065][ T5869] Dev nbd0: unable to read RDB block 0 [ 146.403420][ T5869] nbd0: unable to read partition table [ 146.481363][ T8596] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 146.551494][ T8600] veth9: entered promiscuous mode [ 146.678678][ T36] bridge1: left promiscuous mode [ 146.834594][ T8606] wg1 speed is unknown, defaulting to 1000 [ 147.044942][ T8623] vxcan1: tx drop: invalid da for name 0x0000000000100002 [ 147.394351][ T8633] batman_adv: batadv0: Adding interface: macsec2 [ 147.413494][ T8642] netlink: 104 bytes leftover after parsing attributes in process `syz.0.585'. [ 147.440442][ T8633] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.483868][ T8633] batman_adv: batadv0: Interface activated: macsec2 [ 147.536585][ T8647] netlink: 'syz.1.586': attribute type 15 has an invalid length. [ 147.560519][ T8650] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 147.702568][ T8640] wg1 speed is unknown, defaulting to 1000 [ 147.797299][ T8661] netlink: 20 bytes leftover after parsing attributes in process `syz.4.589'. [ 147.865943][ T8664] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 148.286284][ T8679] vxcan1 speed is unknown, defaulting to 1000 [ 148.380576][ T8682] syzkaller0: entered promiscuous mode [ 148.386084][ T8682] syzkaller0: entered allmulticast mode [ 148.437985][ T8679] vxcan1 speed is unknown, defaulting to 1000 [ 148.445011][ T8679] vxcan1 speed is unknown, defaulting to 1000 [ 148.951580][ T8679] infiniband syz2: set active [ 148.961269][ T8679] infiniband syz2: added vxcan1 [ 149.095297][ T8679] RDS/IB: syz2: added [ 150.026337][ T8122] vxcan1 speed is unknown, defaulting to 1000 [ 150.034980][ T8701] wg1 speed is unknown, defaulting to 1000 [ 150.037454][ T8711] unknown channel width for channel at 909000KHz? [ 150.055935][ T8711] unknown channel width for channel at 909000KHz? [ 150.056405][ T8679] vxcan1 speed is unknown, defaulting to 1000 [ 150.074838][ T8711] unknown channel width for channel at 909000KHz? [ 150.415417][ T8724] vlan2: entered promiscuous mode [ 150.427579][ T8724] geneve1: entered promiscuous mode [ 150.433139][ T8724] vlan2: entered allmulticast mode [ 150.454928][ T8724] geneve1: entered allmulticast mode [ 150.468657][ T8731] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 150.584276][ T8731] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 150.616426][ T8701] vxcan1 speed is unknown, defaulting to 1000 [ 150.626944][ T8736] netlink: 104 bytes leftover after parsing attributes in process `syz.1.608'. [ 150.629849][ T8738] wg1 speed is unknown, defaulting to 1000 [ 150.802737][ T8742] veth3: entered promiscuous mode [ 150.813278][ T8146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.822211][ T8146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.916994][ T8679] vxcan1 speed is unknown, defaulting to 1000 [ 151.214665][ T8679] vxcan1 speed is unknown, defaulting to 1000 [ 151.444071][ T8757] dvmrp0: entered allmulticast mode [ 151.527223][ T8738] vxcan1 speed is unknown, defaulting to 1000 [ 151.750942][ T8679] vxcan1 speed is unknown, defaulting to 1000 [ 152.155643][ T8679] vxcan1 speed is unknown, defaulting to 1000 [ 152.509283][ T8767] netlink: 10 bytes leftover after parsing attributes in process `syz.2.617'. [ 152.539593][ T8767] netlink: 'syz.2.617': attribute type 13 has an invalid length. [ 152.561121][ T8767] netlink: 'syz.2.617': attribute type 17 has an invalid length. [ 152.845486][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.618'. [ 152.938425][ T8767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.984023][ T8783] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 153.358377][ T8804] wg1 speed is unknown, defaulting to 1000 [ 153.366284][ T8804] vxcan1 speed is unknown, defaulting to 1000 [ 153.644829][ T8814] netlink: 'syz.0.625': attribute type 23 has an invalid length. [ 153.815733][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.626'. [ 153.929090][ T8150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.941702][ T8150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.972242][ T8150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.996438][ T8150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.562106][ T8836] tipc: Started in network mode [ 154.577482][ T8836] tipc: Node identity , cluster identity 4711 [ 154.583586][ T8836] tipc: Failed to obtain node identity [ 154.594114][ T8836] tipc: Enabling of bearer rejected, failed to enable media [ 154.609113][ T8842] netlink: 'syz.3.631': attribute type 1 has an invalid length. [ 154.620405][ T8842] netlink: 144 bytes leftover after parsing attributes in process `syz.3.631'. [ 154.662069][ T8842] netlink: 96 bytes leftover after parsing attributes in process `syz.3.631'. [ 154.749895][ T8446] syzkaller0: tun_net_xmit 76 [ 154.755360][ T8446] syzkaller0: tun_net_xmit 48 [ 154.779670][ T8115] syzkaller0: tun_net_xmit 76 [ 155.372265][ T8866] netlink: 'syz.2.637': attribute type 3 has an invalid length. [ 155.380654][ T8866] netlink: 'syz.2.637': attribute type 3 has an invalid length. [ 155.389490][ T8866] netlink: 'syz.2.637': attribute type 3 has an invalid length. [ 155.398412][ T8866] netlink: 'syz.2.637': attribute type 3 has an invalid length. [ 155.406631][ T8866] netlink: 'syz.2.637': attribute type 3 has an invalid length. [ 155.416344][ T8866] netlink: 'syz.2.637': attribute type 3 has an invalid length. [ 156.314827][ T8863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.358532][ T8858] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 156.560026][ T8863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.604611][ T8879] netlink: 40 bytes leftover after parsing attributes in process `syz.4.641'. [ 156.635023][ T8879] team0: Port device geneve0 added [ 156.694511][ T8863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.720249][ T8888] bridge0: port 1(macsec0) entered blocking state [ 156.739284][ T8888] bridge0: port 1(macsec0) entered disabled state [ 156.746021][ T8888] macsec0: entered allmulticast mode [ 156.759421][ T8888] veth1_macvtap: entered allmulticast mode [ 156.769117][ T8888] macsec0: entered promiscuous mode [ 156.776014][ T8888] bridge0: port 1(macsec0) entered blocking state [ 156.782733][ T8888] bridge0: port 1(macsec0) entered forwarding state [ 156.911566][ T8863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.000594][ T8903] netlink: 224 bytes leftover after parsing attributes in process `syz.3.646'. [ 157.011422][ T8903] ªªªªª>: renamed from ip6tnl0 [ 157.146272][ T8906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.648'. [ 157.173774][ T8452] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.199128][ T8150] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.260367][ T8449] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.284431][ T8910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.650'. [ 157.297345][ T8910] ieee802154 phy0 wpan0: encryption failed: -90 [ 157.310742][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.650'. [ 157.327495][ T8150] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.505885][ T8916] netlink: 32 bytes leftover after parsing attributes in process `syz.3.653'. [ 157.788744][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 157.816768][ T8939] validate_nla: 31 callbacks suppressed [ 157.816786][ T8939] netlink: 'syz.2.660': attribute type 30 has an invalid length. [ 157.924524][ T8146] syzkaller0: tun_net_xmit 76 [ 157.932010][ T8146] syzkaller0: tun_net_xmit 48 [ 157.939544][ T8120] syzkaller0: tun_net_xmit 76 [ 157.967087][ T8939] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 158.007194][ T8947] syzkaller0: tun_net_xmit 76 [ 158.014139][ T8947] tipc: Enabled bearer , priority 0 [ 158.065081][ T8949] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 158.073216][ T8146] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.081938][ T8146] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.090423][ T8120] syzkaller0: tun_net_xmit 76 [ 158.129922][ T8938] tipc: Resetting bearer [ 158.203749][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'. [ 158.504254][ T8971] netlink: 'syz.1.669': attribute type 4 has an invalid length. [ 160.565428][ T8938] tipc: Disabling bearer [ 160.574399][ T8146] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.665208][ T9002] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 160.768215][ T8146] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.779361][ T9001] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 160.871186][ T9008] veth11: entered promiscuous mode [ 160.960537][ T9020] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.682'. [ 160.972242][ T9020] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 161.969889][ T9067] sch_tbf: burst 2 is lower than device lo mtu (82) ! [ 162.118287][ T9076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.696'. [ 162.142537][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.696'. [ 162.195808][ T9069] veth15: entered promiscuous mode [ 162.201803][ T9078] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 162.235548][ T9078] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 162.266059][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.698'. [ 162.456747][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'. [ 162.492717][ T9101] netlink: 'syz.4.703': attribute type 21 has an invalid length. [ 162.505465][ T9101] netlink: 128 bytes leftover after parsing attributes in process `syz.4.703'. [ 162.518862][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.705'. [ 162.548592][ T9101] netlink: 'syz.4.703': attribute type 4 has an invalid length. [ 162.559481][ T9101] netlink: 'syz.4.703': attribute type 3 has an invalid length. [ 162.573753][ T9101] netlink: 3 bytes leftover after parsing attributes in process `syz.4.703'. [ 162.587830][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.705'. [ 163.727030][ T9122] netlink: 68 bytes leftover after parsing attributes in process `syz.3.710'. [ 164.371278][ T9112] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 164.582779][ T9132] veth17: entered promiscuous mode [ 164.641381][ T9143] wg1 speed is unknown, defaulting to 1000 [ 164.647467][ T9146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.716'. [ 164.661033][ T9143] vxcan1 speed is unknown, defaulting to 1000 [ 164.683605][ T9146] netlink: 'syz.1.716': attribute type 1 has an invalid length. [ 164.729431][ T9149] netlink: 'syz.4.715': attribute type 1 has an invalid length. [ 164.772902][ T9146] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.805495][ T9149] netlink: 'syz.4.715': attribute type 1 has an invalid length. [ 164.933996][ T9151] bond2: (slave veth9): Enslaving as an active interface with a down link [ 165.011923][ T9154] gretap2: entered promiscuous mode [ 165.022226][ T9154] bond2: (slave gretap2): making interface the new active one [ 165.032481][ T9154] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 165.609825][ T9175] netlink: 'syz.3.722': attribute type 2 has an invalid length. [ 165.676345][ T9175] netlink: 'syz.3.722': attribute type 2 has an invalid length. [ 166.032156][ T9183] vlan2: entered promiscuous mode [ 166.066877][ T9183] dummy0: entered promiscuous mode [ 166.134956][ T9168] wg1 speed is unknown, defaulting to 1000 [ 166.146143][ T9168] vxcan1 speed is unknown, defaulting to 1000 [ 166.584646][ T9202] vlan2: entered promiscuous mode [ 166.609193][ T9202] erspan0: entered promiscuous mode [ 167.322364][ T9230] __nla_validate_parse: 7 callbacks suppressed [ 167.322381][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 167.460503][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'. [ 167.477745][ T9219] wg1 speed is unknown, defaulting to 1000 [ 167.485359][ T9219] vxcan1 speed is unknown, defaulting to 1000 [ 167.684686][ T9235] tap0: tun_chr_ioctl cmd 1074025677 [ 167.730344][ T9235] tap0: linktype set to 0 [ 167.753857][ T9241] wg1 speed is unknown, defaulting to 1000 [ 168.176456][ T9242] wg1 speed is unknown, defaulting to 1000 [ 168.204340][ T9247] wg1 speed is unknown, defaulting to 1000 [ 168.214556][ T9242] vxcan1 speed is unknown, defaulting to 1000 [ 168.970459][ T9247] vxcan1 speed is unknown, defaulting to 1000 [ 169.349865][ T9276] syzkaller1: entered promiscuous mode [ 169.382597][ T9276] syzkaller1: entered allmulticast mode [ 169.723543][ T9274] wg1 speed is unknown, defaulting to 1000 [ 169.799681][ T9274] vxcan1 speed is unknown, defaulting to 1000 [ 170.042051][ T9293] netlink: 232 bytes leftover after parsing attributes in process `syz.4.752'. [ 170.148577][ T9298] netlink: 16 bytes leftover after parsing attributes in process `syz.2.753'. [ 170.342556][ T9300] veth5: entered promiscuous mode [ 170.352186][ T7398] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 170.516991][ T9308] macvlan1: entered promiscuous mode [ 170.525565][ T9308] ipvlan0: entered promiscuous mode [ 170.540465][ T9308] ipvlan0: left promiscuous mode [ 170.551874][ T9308] macvlan1: left promiscuous mode [ 170.965137][ T9321] netlink: 'syz.2.761': attribute type 1 has an invalid length. [ 170.988452][ T9322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.759'. [ 171.159968][ T9321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.761'. [ 171.457965][ T9324] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 171.488827][ T9324] bond0: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 171.513283][ T9324] bond0: (slave vcan1): making interface the new active one [ 171.522311][ T9324] bond0: (slave vcan1): Enslaving as an active interface with an up link [ 171.740783][ T9337] batman_adv: batadv0: Interface deactivated: macsec2 [ 171.898509][ T8444] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.908668][ T8444] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.919485][ T8444] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.929320][ T8444] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.960810][ T9344] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 171.987695][ T9343] !: renamed from dummy0 (while UP) [ 172.011454][ T8444] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.036098][ T8444] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.056978][ T8114] vxcan1 speed is unknown, defaulting to 1000 [ 172.074297][ T8444] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.084587][ T8444] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.214116][ T9344] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 172.361606][ T9357] netlink: 96 bytes leftover after parsing attributes in process `syz.1.768'. [ 172.531172][ T9349] wg1 speed is unknown, defaulting to 1000 [ 172.540959][ T9349] vxcan1 speed is unknown, defaulting to 1000 [ 172.554867][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.770'. [ 172.716566][ T9361] wg1 speed is unknown, defaulting to 1000 [ 172.755139][ T9364] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 173.512871][ T9394] wg1 speed is unknown, defaulting to 1000 [ 173.630145][ T9397] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.643754][ T9402] netlink: 'syz.1.777': attribute type 83 has an invalid length. [ 173.750591][ T9397] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.824338][ T9402] wg1 speed is unknown, defaulting to 1000 [ 174.100665][ T9361] vxcan1 speed is unknown, defaulting to 1000 [ 174.606355][ T9394] vxcan1 speed is unknown, defaulting to 1000 [ 174.883980][ T9402] vxcan1 speed is unknown, defaulting to 1000 [ 176.136906][ T30] audit: type=1107 audit(1758866781.273:2): pid=9443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 176.437569][ T9454] netlink: 72 bytes leftover after parsing attributes in process `syz.4.791'. [ 176.538224][ T9454] netlink: 72 bytes leftover after parsing attributes in process `syz.4.791'. [ 176.732509][ T9461] Bluetooth: MGMT ver 1.23 [ 176.752629][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'. [ 176.782444][ T9444] netlink: 'syz.1.788': attribute type 10 has an invalid length. [ 176.804307][ T9444] netlink: 2 bytes leftover after parsing attributes in process `syz.1.788'. [ 176.823036][ T9444] batadv_slave_1: entered promiscuous mode [ 176.831450][ T9444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.843425][ T9444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.874675][ T9444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.892991][ T9444] bridge0: port 3(batadv_slave_1) entered blocking state [ 176.922352][ T9444] bridge0: port 3(batadv_slave_1) entered disabled state [ 176.956496][ T9444] batadv_slave_1: entered allmulticast mode [ 177.054106][ T9480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.799'. [ 177.067235][ T9482] netlink: 'syz.2.796': attribute type 21 has an invalid length. [ 177.080460][ T9482] netlink: 128 bytes leftover after parsing attributes in process `syz.2.796'. [ 177.132496][ T9482] netlink: 'syz.2.796': attribute type 4 has an invalid length. [ 177.150602][ T9482] netlink: 'syz.2.796': attribute type 5 has an invalid length. [ 177.171989][ T9482] netlink: 3 bytes leftover after parsing attributes in process `syz.2.796'. [ 177.250959][ T9477] wg1 speed is unknown, defaulting to 1000 [ 177.285218][ T9477] vxcan1 speed is unknown, defaulting to 1000 [ 177.538303][ T9494] netlink: 40 bytes leftover after parsing attributes in process `syz.0.802'. [ 178.311172][ T9526] macsec0: entered allmulticast mode [ 178.463609][ T9527] veth1_macvtap: entered allmulticast mode [ 178.498089][ T9527] macsec0: left allmulticast mode [ 178.506511][ T9527] veth1_macvtap: left allmulticast mode [ 178.646979][ T9532] netlink: 20 bytes leftover after parsing attributes in process `syz.3.812'. [ 178.815128][ T9547] dvmrp0: entered allmulticast mode [ 178.935255][ T9537] tipc: Enabled bearer , priority 0 [ 178.972094][ T9537] tipc: Resetting bearer [ 178.984367][ T9536] tipc: Disabling bearer [ 179.191653][ T5869] udevd[5869]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 179.252134][ T9556] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 179.426330][ T9556] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 179.716663][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 179.728555][ T9578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.827'. [ 179.932945][ T9591] netlink: 'syz.4.831': attribute type 11 has an invalid length. [ 179.949172][ T9591] netlink: 'syz.4.831': attribute type 4 has an invalid length. [ 179.958740][ T9591] netlink: 224 bytes leftover after parsing attributes in process `syz.4.831'. [ 181.028837][ T9656] netlink: 'syz.1.848': attribute type 1 has an invalid length. [ 181.065586][ T9656] netlink: 144 bytes leftover after parsing attributes in process `syz.1.848'. [ 181.088013][ T9656] netlink: 96 bytes leftover after parsing attributes in process `syz.1.848'. [ 181.133750][ T9652] wg1 speed is unknown, defaulting to 1000 [ 181.150709][ T9652] vxcan1 speed is unknown, defaulting to 1000 [ 181.363673][ T9677] syz_tun: entered allmulticast mode [ 181.370290][ T9678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.854'. [ 181.397296][ T9673] dvmrp8: entered allmulticast mode [ 181.450869][ T9673] syz_tun: left allmulticast mode [ 181.456439][ T9673] dvmrp8: left allmulticast mode [ 181.505348][ T9679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.854'. [ 181.560230][ T9677] wg1 speed is unknown, defaulting to 1000 [ 181.587485][ T9673] netlink: 'syz.1.853': attribute type 23 has an invalid length. [ 181.679985][ T9677] vxcan1 speed is unknown, defaulting to 1000 [ 181.696570][ T9685] netlink: 28 bytes leftover after parsing attributes in process `syz.2.856'. [ 182.218270][ T9702] xt_l2tp: v2 sid > 0xffff: 1114112 [ 182.550526][ T9716] __nla_validate_parse: 1 callbacks suppressed [ 182.550546][ T9716] netlink: 27 bytes leftover after parsing attributes in process `syz.2.862'. [ 182.784234][ T9731] xt_time: unknown flags 0xf4 [ 183.002417][ T9738] tipc: Enabled bearer , priority 0 [ 183.028238][ T9738] syzkaller0: entered promiscuous mode [ 183.043034][ T9738] syzkaller0: entered allmulticast mode [ 183.239455][ T9747] tipc: Resetting bearer [ 183.257033][ T9737] tipc: Resetting bearer [ 183.306418][ T9737] tipc: Disabling bearer [ 183.473308][ T9752] veth7: entered promiscuous mode [ 183.486399][ T8444] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 183.702259][ T9764] netlink: 'syz.2.877': attribute type 10 has an invalid length. [ 183.718238][ T9757] geneve3: entered promiscuous mode [ 183.791903][ T9756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.858200][ T9769] bridge_slave_0: left allmulticast mode [ 183.864077][ T9769] bridge_slave_0: left promiscuous mode [ 183.878256][ T9769] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.896869][ T9769] bridge_slave_1: left allmulticast mode [ 183.909919][ T9769] bridge_slave_1: left promiscuous mode [ 183.932111][ T9769] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.971495][ T9769] bond0: (slave bond_slave_0): Releasing backup interface [ 183.984371][ T9769] bond0: (slave bond_slave_1): Releasing backup interface [ 184.104153][ T9769] team0: Port device team_slave_0 removed [ 184.121517][ T9769] team0: Port device team_slave_1 removed [ 184.128011][ T9769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.235905][ T9769] batadv_slave_1: left allmulticast mode [ 184.245023][ T9769] bridge0: port 3(batadv_slave_1) entered disabled state [ 184.281181][ T9769] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 184.323334][ T9769] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 184.498890][ T9790] syzkaller0: tun_net_xmit 76 [ 184.503618][ T9790] tipc: Enabled bearer , priority 0 [ 184.647471][ C0] syzkaller0: tun_net_xmit 76 [ 184.745143][ T9784] tipc: Resetting bearer [ 185.597529][ T8120] tipc: Node number set to 2758001638 [ 186.126506][ T9784] tipc: Disabling bearer [ 186.218882][ T9825] netlink: 'syz.3.891': attribute type 3 has an invalid length. [ 186.606461][ T9848] netlink: 'syz.3.898': attribute type 303 has an invalid length. [ 186.627154][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 187.030087][ T9863] geneve2: entered promiscuous mode [ 187.061911][ T9864] syzkaller0: tun_net_xmit 76 [ 187.067897][ T9864] tipc: Enabled bearer , priority 0 [ 187.197567][ C0] syzkaller0: tun_net_xmit 76 [ 187.203773][ T8449] syzkaller0: tun_net_xmit 76 [ 187.230896][ T8449] syzkaller0: tun_net_xmit 48 [ 187.237616][ T8120] syzkaller0: tun_net_xmit 76 [ 187.266860][ T9858] tipc: Resetting bearer [ 188.119017][ T8116] tipc: Node number set to 2400480248 [ 188.514238][ T9858] tipc: Disabling bearer [ 188.669647][ T9875] wg1 speed is unknown, defaulting to 1000 [ 188.698864][ T9875] vxcan1 speed is unknown, defaulting to 1000 [ 188.924744][ T9891] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 189.004138][ T9891] bond0: (slave 0!): Enslaving as an active interface with an up link [ 189.019897][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 189.567179][ T9918] veth19: entered promiscuous mode [ 189.629193][ T8444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.649097][ T8444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.821019][ T9926] syzkaller0: tun_net_xmit 76 [ 189.825831][ T9926] tipc: Enabled bearer , priority 0 [ 189.840662][ T8449] syzkaller0: tun_net_xmit 76 [ 189.845978][ T8449] syzkaller0: tun_net_xmit 48 [ 189.866579][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.924'. [ 189.876310][ T8115] syzkaller0: tun_net_xmit 76 [ 189.958091][ C1] syzkaller0: tun_net_xmit 76 [ 190.038461][ T9920] tipc: Resetting bearer [ 191.619979][ T9920] tipc: Disabling bearer [ 191.629926][ T9957] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 191.673280][ T9952] wg1 speed is unknown, defaulting to 1000 [ 191.691297][ T9952] vxcan1 speed is unknown, defaulting to 1000 [ 191.825616][ T9979] netlink: 'syz.0.932': attribute type 13 has an invalid length. [ 191.860192][ T9979] netlink: 'syz.0.932': attribute type 17 has an invalid length. [ 191.866218][ T9982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.875240][ T9982] IPv6: NLM_F_CREATE should be set when creating new route [ 191.882647][ T9982] IPv6: NLM_F_CREATE should be set when creating new route [ 191.889979][ T9982] IPv6: NLM_F_CREATE should be set when creating new route [ 191.920125][ T9985] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.086026][ T9991] netlink: 40 bytes leftover after parsing attributes in process `syz.0.932'. [ 192.179962][ T9992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.242086][ T9979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.263000][T10000] netlink: 22 bytes leftover after parsing attributes in process `syz.1.937'. [ 192.342576][ T9979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.416458][ T9999] veth9: entered promiscuous mode [ 192.451986][ T9983] wg1 speed is unknown, defaulting to 1000 [ 192.520054][ T9983] vxcan1 speed is unknown, defaulting to 1000 [ 192.717814][T10012] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.942'. [ 193.034718][T10023] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 193.233923][T10029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.950'. [ 193.423737][ T8444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.432016][ T8444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.641368][T10045] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 194.022062][T10055] netlink: 'syz.0.957': attribute type 74 has an invalid length. [ 195.070136][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.965'. [ 195.109190][T10085] tipc: Started in network mode [ 195.114758][T10085] tipc: Node identity , cluster identity 4711 [ 195.122223][T10085] tipc: Failed to obtain node identity [ 195.137698][T10085] tipc: Enabling of bearer rejected, failed to enable media [ 195.158780][T10085] syzkaller0: entered promiscuous mode [ 195.164274][T10085] syzkaller0: entered allmulticast mode [ 195.353125][T10096] wg1 speed is unknown, defaulting to 1000 [ 195.391656][T10096] vxcan1 speed is unknown, defaulting to 1000 [ 195.402606][T10097] wg1 speed is unknown, defaulting to 1000 [ 196.178627][T10097] vxcan1 speed is unknown, defaulting to 1000 [ 198.432143][T10147] wg1 speed is unknown, defaulting to 1000 [ 198.460011][T10147] vxcan1 speed is unknown, defaulting to 1000 [ 198.556220][T10155] !: renamed from dummy0 [ 198.802932][T10156] wg1 speed is unknown, defaulting to 1000 [ 199.108747][T10158] netlink: 200 bytes leftover after parsing attributes in process `syz.4.981'. [ 199.268756][T10152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.981'. [ 199.509000][T10156] vxcan1 speed is unknown, defaulting to 1000 [ 200.278092][T10167] netlink: 'syz.4.985': attribute type 1 has an invalid length. [ 200.403513][T10167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.925111][T10065] Set syz1 is full, maxelem 65536 reached [ 201.437652][ T5874] Bluetooth: hci1: command 0x0406 tx timeout [ 201.438222][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 201.452490][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 201.459853][ T5874] Bluetooth: hci3: command 0x0406 tx timeout [ 201.913667][T10189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.990'. [ 202.074819][T10202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.992'. [ 202.328882][T10209] netlink: 'syz.0.995': attribute type 4 has an invalid length. [ 202.381906][T10210] netlink: 'syz.0.995': attribute type 4 has an invalid length. [ 202.415274][T10207] veth13: entered promiscuous mode [ 202.446717][ T8447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.463500][ T8447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.693373][T10222] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 202.929991][T10231] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 203.120552][T10245] netlink: 'syz.0.1004': attribute type 32 has an invalid length. [ 203.269573][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1005'. [ 203.335439][T10257] siw: device registration error -23 [ 203.408816][T10257] netlink: 'syz.1.1006': attribute type 4 has an invalid length. [ 203.724298][T10263] tun0: tun_chr_ioctl cmd 1074025673 [ 204.205899][T10286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1013'. [ 204.215089][T10286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1013'. [ 204.238367][T10286] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1013'. [ 204.460226][T10296] wg1 speed is unknown, defaulting to 1000 [ 204.501116][T10295] netlink: 'syz.4.1016': attribute type 13 has an invalid length. [ 204.518261][T10301] netlink: 'syz.3.1014': attribute type 4 has an invalid length. [ 204.532425][T10295] netlink: 'syz.4.1016': attribute type 17 has an invalid length. [ 204.564699][T10301] netlink: 'syz.3.1014': attribute type 4 has an invalid length. [ 204.585557][T10304] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1016'. [ 204.736416][T10304] netlink: zone id is out of range [ 204.784184][T10304] netlink: zone id is out of range [ 204.890994][T10304] netlink: zone id is out of range [ 204.962914][T10304] netlink: zone id is out of range [ 204.995346][T10304] netlink: get zone limit has 8 unknown bytes [ 205.270532][T10295] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.494643][T10295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.533629][T10296] vxcan1 speed is unknown, defaulting to 1000 [ 205.628600][T10318] wg1 speed is unknown, defaulting to 1000 [ 205.762061][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 206.233114][T10318] vxcan1 speed is unknown, defaulting to 1000 [ 206.631490][T10347] netlink: 'syz.1.1029': attribute type 4 has an invalid length. [ 206.768267][T10345] siw: device registration error -23 [ 206.968363][T10351] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1030'. [ 206.985469][T10350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.244031][T10357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.291249][T10357] tipc: Enabled bearer , priority 0 [ 207.309326][T10357] syzkaller0: entered promiscuous mode [ 207.320538][T10357] syzkaller0: entered allmulticast mode [ 207.341828][T10356] tipc: Resetting bearer [ 207.360761][T10356] tipc: Disabling bearer [ 208.516436][T10394] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1041'. [ 208.814958][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1049'. [ 209.472483][T10453] wg1 speed is unknown, defaulting to 1000 [ 209.480681][T10453] vxcan1 speed is unknown, defaulting to 1000 [ 209.549256][T10459] : renamed from vlan0 (while UP) [ 209.555025][T10428] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 209.578419][T10428] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 209.822334][T10428] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 209.833284][T10428] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 209.892548][T10428] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 209.900181][T10428] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 209.928100][T10428] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 209.934169][T10428] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 209.951789][T10428] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 209.962128][T10428] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 211.073022][T10489] wg1 speed is unknown, defaulting to 1000 [ 211.139701][T10508] tap0: tun_chr_ioctl cmd 1074025680 [ 211.156756][T10515] tipc: Enabled bearer , priority 0 [ 211.164201][T10489] vxcan1 speed is unknown, defaulting to 1000 [ 211.172021][T10508] D: renamed from syzkaller0 [ 211.182305][T10508] tipc: Disabling bearer [ 211.757221][T10539] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1072'. [ 211.768593][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1072'. [ 212.309194][T10552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.353910][T10556] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 212.364144][T10556] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20003 [ 212.515682][T10564] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.876558][T10576] netlink: 'syz.2.1079': attribute type 9 has an invalid length. [ 212.995457][T10579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1080'. [ 213.821892][T10595] netlink: 'syz.2.1086': attribute type 15 has an invalid length. [ 213.833900][T10596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1086'. [ 213.833900][T10595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1086'. [ 214.397538][ T5183] Bluetooth: hci0: command tx timeout [ 358.079440][ T31] INFO: task kworker/0:21:8122 blocked for more than 143 seconds. [ 358.087288][ T31] Not tainted syzkaller #0 [ 358.092790][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.101975][ T31] task:kworker/0:21 state:D stack:22792 pid:8122 tgid:8122 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 358.114436][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 358.121414][ T31] Call Trace: [ 358.124696][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 358.127657][ T31] __schedule+0x1798/0x4cc0 [ 358.132192][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 358.138244][ T31] ? __pfx___schedule+0x10/0x10 [ 358.143446][ T31] ? schedule+0x91/0x360 [ 358.148240][ T31] schedule+0x165/0x360 [ 358.152422][ T31] schedule_preempt_disabled+0x13/0x30 [ 358.187897][ T31] __mutex_lock+0x7e6/0x1350 [ 358.192539][ T31] ? __mutex_lock+0x5bb/0x1350 [ 358.197349][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 358.221442][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 358.226501][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 358.233261][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 358.239772][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 358.246187][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 358.252400][ T31] process_scheduled_works+0xae1/0x17b0 [ 358.258360][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 358.264345][ T31] worker_thread+0x8a0/0xda0 [ 358.269509][ T31] kthread+0x70e/0x8a0 [ 358.273585][ T31] ? __pfx_worker_thread+0x10/0x10 [ 358.279076][ T31] ? __pfx_kthread+0x10/0x10 [ 358.283659][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 358.289298][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.294486][ T31] ? __pfx_kthread+0x10/0x10 [ 358.299517][ T31] ret_from_fork+0x439/0x7d0 [ 358.304105][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 358.309804][ T31] ? __switch_to_asm+0x39/0x70 [ 358.314576][ T31] ? __switch_to_asm+0x33/0x70 [ 358.319825][ T31] ? __pfx_kthread+0x10/0x10 [ 358.324422][ T31] ret_from_fork_asm+0x1a/0x30 [ 358.329772][ T31] [ 358.332820][ T31] INFO: task syz.3.1046:10414 blocked for more than 143 seconds. [ 358.340997][ T31] Not tainted syzkaller #0 [ 358.345920][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.355043][ T31] task:syz.3.1046 state:D stack:26920 pid:10414 tgid:10414 ppid:5876 task_flags:0x400040 flags:0x00004006 [ 358.367467][ T31] Call Trace: [ 358.370750][ T31] [ 358.373662][ T31] __schedule+0x1798/0x4cc0 [ 358.378661][ T31] ? __lock_acquire+0xab9/0xd20 [ 358.383515][ T31] ? __lock_acquire+0xab9/0xd20 [ 358.388937][ T31] ? __pfx___schedule+0x10/0x10 [ 358.393816][ T31] ? schedule+0x91/0x360 [ 358.398482][ T31] schedule+0x165/0x360 [ 358.402637][ T31] schedule_preempt_disabled+0x13/0x30 [ 358.408570][ T31] __mutex_lock+0x7e6/0x1350 [ 358.413151][ T31] ? __mutex_lock+0x5bb/0x1350 [ 358.418029][ T31] ? rfkill_unregister+0xc8/0x220 [ 358.423078][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 358.428153][ T31] ? __pfx_device_del+0x10/0x10 [ 358.433070][ T31] rfkill_unregister+0xc8/0x220 [ 358.438168][ T31] nfc_unregister_device+0x96/0x2a0 [ 358.443369][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 358.449447][ T31] virtual_ncidev_close+0x56/0x90 [ 358.454483][ T31] __fput+0x44c/0xa70 [ 358.458501][ T31] task_work_run+0x1d1/0x260 [ 358.463099][ T31] ? __pfx_task_work_run+0x10/0x10 [ 358.468270][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 358.473736][ T31] exit_to_user_mode_loop+0xec/0x110 [ 358.479143][ T31] do_syscall_64+0x2bd/0x3b0 [ 358.483747][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.488974][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.495041][ T31] ? clear_bhb_loop+0x60/0xb0 [ 358.499853][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.505756][ T31] RIP: 0033:0x7fbb9798eec9 [ 358.510269][ T31] RSP: 002b:00007ffd463f5808 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 358.519045][ T31] RAX: 0000000000000000 RBX: 00007fbb97be7da0 RCX: 00007fbb9798eec9 [ 358.527037][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 358.535098][ T31] RBP: 00007fbb97be7da0 R08: 0000000000000f34 R09: 00000018463f5aff [ 358.543172][ T31] R10: 00007fbb97be7cb0 R11: 0000000000000246 R12: 0000000000033198 [ 358.551254][ T31] R13: 00007ffd463f5900 R14: ffffffffffffffff R15: 00007ffd463f5920 [ 358.559331][ T31] [ 358.562362][ T31] INFO: task syz.4.1048:10428 blocked for more than 143 seconds. [ 358.576349][ T31] Not tainted syzkaller #0 [ 358.581345][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.590058][ T31] task:syz.4.1048 state:D stack:25688 pid:10428 tgid:10427 ppid:5870 task_flags:0x400140 flags:0x00004006 [ 358.602097][ T31] Call Trace: [ 358.605371][ T31] [ 358.608331][ T31] __schedule+0x1798/0x4cc0 [ 358.612849][ T31] ? __lock_acquire+0xab9/0xd20 [ 358.617729][ T31] ? __lock_acquire+0xab9/0xd20 [ 358.622591][ T31] ? __pfx___schedule+0x10/0x10 [ 358.627489][ T31] ? schedule+0x91/0x360 [ 358.631751][ T31] schedule+0x165/0x360 [ 358.635924][ T31] schedule_preempt_disabled+0x13/0x30 [ 358.641498][ T31] __mutex_lock+0x7e6/0x1350 [ 358.646092][ T31] ? __mutex_lock+0x5bb/0x1350 [ 358.650885][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 358.656176][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 358.661244][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.666454][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 358.672366][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 358.678740][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 358.684442][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 358.689578][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 358.695301][ T31] rfkill_set_block+0x1d2/0x440 [ 358.700191][ T31] rfkill_fop_write+0x44b/0x570 [ 358.705053][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 358.710438][ T31] ? security_file_permission+0x70/0x290 [ 358.716076][ T31] ? rw_verify_area+0x255/0x4d0 [ 358.721183][ T31] ? __lock_acquire+0xab9/0xd20 [ 358.726072][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 358.731490][ T31] vfs_write+0x27b/0xb30 [ 358.735763][ T31] ? __pfx_vfs_write+0x10/0x10 [ 358.740572][ T31] ? __fget_files+0x2a/0x420 [ 358.745170][ T31] ? __fget_files+0x2a/0x420 [ 358.749796][ T31] ? __fget_files+0x3a0/0x420 [ 358.754488][ T31] ? __fget_files+0x2a/0x420 [ 358.759147][ T31] ksys_write+0x145/0x250 [ 358.763482][ T31] ? __pfx_ksys_write+0x10/0x10 [ 358.768344][ T31] ? rcu_is_watching+0x15/0xb0 [ 358.773108][ T31] ? do_syscall_64+0xbe/0x3b0 [ 358.777828][ T31] do_syscall_64+0xfa/0x3b0 [ 358.782329][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.787570][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.793634][ T31] ? clear_bhb_loop+0x60/0xb0 [ 358.798337][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.804231][ T31] RIP: 0033:0x7fc374d8eec9 [ 358.808659][ T31] RSP: 002b:00007fc375cb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 358.817075][ T31] RAX: ffffffffffffffda RBX: 00007fc374fe5fa0 RCX: 00007fc374d8eec9 [ 358.825226][ T31] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000003 [ 358.833230][ T31] RBP: 00007fc374e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 358.841225][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.849249][ T31] R13: 00007fc374fe6038 R14: 00007fc374fe5fa0 R15: 00007ffe3235a008 [ 358.857237][ T31] [ 358.860325][ T31] INFO: task syz.1.1075:10558 blocked for more than 144 seconds. [ 358.868084][ T31] Not tainted syzkaller #0 [ 358.873021][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.881822][ T31] task:syz.1.1075 state:D stack:26552 pid:10558 tgid:10557 ppid:5861 task_flags:0x400140 flags:0x00004004 [ 358.893781][ T31] Call Trace: [ 358.897074][ T31] [ 358.900095][ T31] __schedule+0x1798/0x4cc0 [ 358.904628][ T31] ? __lock_acquire+0xab9/0xd20 [ 358.909541][ T31] ? __lock_acquire+0xab9/0xd20 [ 358.914399][ T31] ? __pfx___schedule+0x10/0x10 [ 358.919304][ T31] ? schedule+0x91/0x360 [ 358.923556][ T31] schedule+0x165/0x360 [ 358.927738][ T31] schedule_preempt_disabled+0x13/0x30 [ 358.933215][ T31] __mutex_lock+0x7e6/0x1350 [ 358.937841][ T31] ? __mutex_lock+0x5bb/0x1350 [ 358.942696][ T31] ? rfkill_register+0x37/0x8e0 [ 358.947579][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 358.952623][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 358.958079][ T31] ? device_initialize+0x24b/0x440 [ 358.963218][ T31] rfkill_register+0x37/0x8e0 [ 358.967930][ T31] nfc_register_device+0x14a/0x320 [ 358.973080][ T31] nci_register_device+0x87f/0x9d0 [ 358.978217][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 358.983858][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 358.989178][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 358.994554][ T31] virtual_ncidev_open+0x129/0x1a0 [ 358.999699][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 359.005336][ T31] misc_open+0x2b9/0x330 [ 359.009629][ T31] chrdev_open+0x4c9/0x5e0 [ 359.014063][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 359.019038][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 359.025389][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 359.030383][ T31] do_dentry_open+0x950/0x13f0 [ 359.035153][ T31] vfs_open+0x3b/0x340 [ 359.041216][ T31] ? path_openat+0x2ecd/0x3830 [ 359.046024][ T31] path_openat+0x2ee5/0x3830 [ 359.051102][ T31] ? arch_stack_walk+0xfc/0x150 [ 359.055958][ T31] ? stack_depot_save_flags+0x40/0x860 [ 359.061913][ T31] ? __pfx_path_openat+0x10/0x10 [ 359.066872][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.073477][ T31] do_filp_open+0x1fa/0x410 [ 359.078402][ T31] ? __lock_acquire+0xab9/0xd20 [ 359.083245][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 359.088804][ T31] ? _raw_spin_unlock+0x28/0x50 [ 359.093670][ T31] ? alloc_fd+0x64c/0x6c0 [ 359.098141][ T31] do_sys_openat2+0x121/0x1c0 [ 359.102825][ T31] ? __se_sys_futex+0x36f/0x400 [ 359.108425][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 359.113626][ T31] ? rcu_is_watching+0x15/0xb0 [ 359.118982][ T31] __x64_sys_openat+0x138/0x170 [ 359.123841][ T31] do_syscall_64+0xfa/0x3b0 [ 359.128768][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.133984][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.140640][ T31] ? clear_bhb_loop+0x60/0xb0 [ 359.145330][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.151634][ T31] RIP: 0033:0x7ff5ef98eec9 [ 359.156038][ T31] RSP: 002b:00007ff5f0763038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 359.164902][ T31] RAX: ffffffffffffffda RBX: 00007ff5efbe5fa0 RCX: 00007ff5ef98eec9 [ 359.173275][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 359.181657][ T31] RBP: 00007ff5efa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 359.190055][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.198537][ T31] R13: 00007ff5efbe6038 R14: 00007ff5efbe5fa0 R15: 00007ffc07ffc3a8 [ 359.206538][ T31] [ 359.210062][ T31] INFO: task syz.0.1080:10578 blocked for more than 144 seconds. [ 359.218298][ T31] Not tainted syzkaller #0 [ 359.223253][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 359.232387][ T31] task:syz.0.1080 state:D stack:28328 pid:10578 tgid:10577 ppid:5860 task_flags:0x400040 flags:0x00004004 [ 359.244712][ T31] Call Trace: [ 359.248386][ T31] [ 359.251313][ T31] __schedule+0x1798/0x4cc0 [ 359.255805][ T31] ? kasan_save_free_info+0x46/0x50 [ 359.261524][ T31] ? __lock_acquire+0xab9/0xd20 [ 359.266408][ T31] ? __lock_acquire+0xab9/0xd20 [ 359.271747][ T31] ? __pfx___schedule+0x10/0x10 [ 359.276603][ T31] ? schedule+0x91/0x360 [ 359.281309][ T31] schedule+0x165/0x360 [ 359.285463][ T31] schedule_preempt_disabled+0x13/0x30 [ 359.291086][ T31] __mutex_lock+0x7e6/0x1350 [ 359.295697][ T31] ? __mutex_lock+0x5bb/0x1350 [ 359.300556][ T31] ? misc_open+0x51/0x330 [ 359.304911][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 359.310052][ T31] misc_open+0x51/0x330 [ 359.314221][ T31] chrdev_open+0x4c9/0x5e0 [ 359.319015][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 359.323950][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 359.331033][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 359.336006][ T31] do_dentry_open+0x950/0x13f0 [ 359.341238][ T31] vfs_open+0x3b/0x340 [ 359.345306][ T31] ? path_openat+0x2ecd/0x3830 [ 359.350504][ T31] path_openat+0x2ee5/0x3830 [ 359.355082][ T31] ? arch_stack_walk+0xfc/0x150 [ 359.360354][ T31] ? stack_depot_save_flags+0x40/0x860 [ 359.365832][ T31] ? __pfx_path_openat+0x10/0x10 [ 359.371198][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.377269][ T31] do_filp_open+0x1fa/0x410 [ 359.382341][ T31] ? __lock_acquire+0xab9/0xd20 [ 359.387346][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 359.393064][ T31] ? _raw_spin_unlock+0x28/0x50 [ 359.398429][ T31] ? alloc_fd+0x64c/0x6c0 [ 359.402759][ T31] do_sys_openat2+0x121/0x1c0 [ 359.408048][ T31] ? __se_sys_futex+0x36f/0x400 [ 359.413119][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 359.419150][ T31] ? rcu_is_watching+0x15/0xb0 [ 359.423960][ T31] __x64_sys_openat+0x138/0x170 [ 359.429298][ T31] do_syscall_64+0xfa/0x3b0 [ 359.433982][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.440119][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.446259][ T31] ? clear_bhb_loop+0x60/0xb0 [ 359.451538][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.458260][ T31] RIP: 0033:0x7f7c5e38eec9 [ 359.463172][ T31] RSP: 002b:00007f7c5f1da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 359.472444][ T31] RAX: ffffffffffffffda RBX: 00007f7c5e5e5fa0 RCX: 00007f7c5e38eec9 [ 359.480811][ T31] RDX: 0000000000020000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 359.489290][ T31] RBP: 00007f7c5e411f91 R08: 0000000000000000 R09: 0000000000000000 [ 359.497278][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.505814][ T31] R13: 00007f7c5e5e6038 R14: 00007f7c5e5e5fa0 R15: 00007fff43501e18 [ 359.514227][ T31] [ 359.517251][ T31] INFO: task syz.2.1089:10606 blocked for more than 144 seconds. [ 359.525444][ T31] Not tainted syzkaller #0 [ 359.530775][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 359.539844][ T31] task:syz.2.1089 state:D stack:26504 pid:10606 tgid:10604 ppid:5873 task_flags:0x400140 flags:0x00004004 [ 359.552364][ T31] Call Trace: [ 359.555644][ T31] [ 359.559021][ T31] __schedule+0x1798/0x4cc0 [ 359.563521][ T31] ? kasan_save_free_info+0x46/0x50 [ 359.569204][ T31] ? __lock_acquire+0xab9/0xd20 [ 359.574052][ T31] ? __lock_acquire+0xab9/0xd20 [ 359.579006][ T31] ? __pfx___schedule+0x10/0x10 [ 359.583873][ T31] ? schedule+0x91/0x360 [ 359.588179][ T31] schedule+0x165/0x360 [ 359.592346][ T31] schedule_preempt_disabled+0x13/0x30 [ 359.598053][ T31] __mutex_lock+0x7e6/0x1350 [ 359.602647][ T31] ? __mutex_lock+0x5bb/0x1350 [ 359.607911][ T31] ? misc_open+0x51/0x330 [ 359.612268][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 359.617298][ T31] misc_open+0x51/0x330 [ 359.621989][ T31] chrdev_open+0x4c9/0x5e0 [ 359.626426][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 359.631780][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 359.638515][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 359.643443][ T31] do_dentry_open+0x950/0x13f0 [ 359.648679][ T31] vfs_open+0x3b/0x340 [ 359.652736][ T31] ? path_openat+0x2ecd/0x3830 [ 359.658064][ T31] path_openat+0x2ee5/0x3830 [ 359.662642][ T31] ? arch_stack_walk+0xfc/0x150 [ 359.668007][ T31] ? stack_depot_save_flags+0x40/0x860 [ 359.673487][ T31] ? __pfx_path_openat+0x10/0x10 [ 359.678987][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.685074][ T31] do_filp_open+0x1fa/0x410 [ 359.690077][ T31] ? __lock_acquire+0xab9/0xd20 [ 359.694947][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 359.700474][ T31] ? _raw_spin_unlock+0x28/0x50 [ 359.705332][ T31] ? alloc_fd+0x64c/0x6c0 [ 359.710128][ T31] do_sys_openat2+0x121/0x1c0 [ 359.714792][ T31] ? __se_sys_futex+0x36f/0x400 [ 359.720093][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 359.725296][ T31] ? rcu_is_watching+0x15/0xb0 [ 359.730503][ T31] __x64_sys_openat+0x138/0x170 [ 359.735349][ T31] do_syscall_64+0xfa/0x3b0 [ 359.740408][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.745635][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.752121][ T31] ? clear_bhb_loop+0x60/0xb0 [ 359.756796][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.763485][ T31] RIP: 0033:0x7fe699b8eec9 [ 359.768332][ T31] RSP: 002b:00007fe69a95f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 359.776734][ T31] RAX: ffffffffffffffda RBX: 00007fe699de6090 RCX: 00007fe699b8eec9 [ 359.785190][ T31] RDX: 0000000000040241 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 359.793613][ T31] RBP: 00007fe699c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 359.801990][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.810402][ T31] R13: 00007fe699de6128 R14: 00007fe699de6090 R15: 00007fffffe7a718 [ 359.818759][ T31] [ 359.821818][ T31] [ 359.821818][ T31] Showing all locks held in the system: [ 359.830128][ T31] 1 lock held by khungtaskd/31: [ 359.834966][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 359.845538][ T31] 2 locks held by getty/5624: [ 359.850630][ T31] #0: ffff88814de060a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 359.860904][ T31] #1: ffffc900036b62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 359.871136][ T31] 3 locks held by kworker/0:21/8122: [ 359.876418][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 359.887641][ T31] #1: ffffc9000b8c7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 359.901425][ T31] #2: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 359.913159][ T31] 2 locks held by syz.3.1046/10414: [ 359.918734][ T31] #0: ffff88805949c100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 359.928895][ T31] #1: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 359.939418][ T31] 2 locks held by syz.4.1048/10428: [ 359.944599][ T31] #0: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 359.955155][ T31] #1: ffff88805949c100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 359.965249][ T31] 3 locks held by syz.1.1075/10558: [ 359.970840][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 359.979805][ T31] #1: ffff888026ae2100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 359.989783][ T31] #2: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 360.000217][ T31] 1 lock held by syz.0.1080/10578: [ 360.005313][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 360.014355][ T31] 1 lock held by syz.2.1089/10606: [ 360.019978][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 360.028912][ T31] 1 lock held by syz-executor/10612: [ 360.034302][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 360.043237][ T31] 1 lock held by syz-executor/10613: [ 360.048909][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 360.057849][ T31] 1 lock held by syz-executor/10616: [ 360.063124][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 360.072030][ T31] 1 lock held by syz-executor/10617: [ 360.077327][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 360.086296][ T31] 1 lock held by syz-executor/10619: [ 360.092014][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 360.100995][ T31] 1 lock held by syz-executor/10622: [ 360.106274][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 360.115331][ T31] 1 lock held by syz-executor/10623: [ 360.121004][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 360.129860][ T31] 1 lock held by syz-executor/10626: [ 360.135135][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 360.144033][ T31] 1 lock held by syz-executor/10627: [ 360.149736][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 360.158295][ T31] 1 lock held by syz-executor/10629: [ 360.163573][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 360.172078][ T31] 1 lock held by syz-executor/10632: [ 360.177429][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 360.185900][ T31] 1 lock held by syz-executor/10633: [ 360.191669][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 360.200508][ T31] 1 lock held by syz-executor/10636: [ 360.205778][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 360.214686][ T31] 1 lock held by syz-executor/10637: [ 360.220605][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 360.229455][ T31] 1 lock held by syz-executor/10639: [ 360.234725][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 360.243635][ T31] [ 360.245961][ T31] ============================================= [ 360.245961][ T31] [ 360.255888][ T31] NMI backtrace for cpu 1 [ 360.255901][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 360.255913][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 360.255919][ T31] Call Trace: [ 360.255923][ T31] [ 360.255933][ T31] dump_stack_lvl+0x189/0x250 [ 360.255951][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.255962][ T31] ? __pfx__printk+0x10/0x10 [ 360.255981][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 360.255997][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 360.256011][ T31] ? __pfx__printk+0x10/0x10 [ 360.256026][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 360.256042][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 360.256057][ T31] watchdog+0xf93/0xfe0 [ 360.256072][ T31] ? watchdog+0x1de/0xfe0 [ 360.256088][ T31] kthread+0x70e/0x8a0 [ 360.256101][ T31] ? __pfx_watchdog+0x10/0x10 [ 360.256113][ T31] ? __pfx_kthread+0x10/0x10 [ 360.256126][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 360.256140][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.256155][ T31] ? __pfx_kthread+0x10/0x10 [ 360.256167][ T31] ret_from_fork+0x439/0x7d0 [ 360.256177][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 360.256189][ T31] ? __switch_to_asm+0x39/0x70 [ 360.256200][ T31] ? __switch_to_asm+0x33/0x70 [ 360.256211][ T31] ? __pfx_kthread+0x10/0x10 [ 360.256223][ T31] ret_from_fork_asm+0x1a/0x30 [ 360.256242][ T31] [ 360.256246][ T31] Sending NMI from CPU 1 to CPUs 0: [ 360.405538][ C0] NMI backtrace for cpu 0 [ 360.405555][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 360.405573][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 360.405583][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 360.405613][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 09 15 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 360.405628][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 360.405643][ C0] RAX: 8436154f31b3fa00 RBX: ffffffff81968528 RCX: 8436154f31b3fa00 [ 360.405656][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b09bc RDI: ffffffff8be33f80 [ 360.405668][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 360.405681][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa2f230 [ 360.405693][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 360.405704][ C0] FS: 0000000000000000(0000) GS:ffff888125c3c000(0000) knlGS:0000000000000000 [ 360.405718][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.405729][ C0] CR2: 0000565504eee000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 360.405744][ C0] Call Trace: [ 360.405752][ C0] [ 360.405758][ C0] default_idle+0x13/0x20 [ 360.405776][ C0] default_idle_call+0x74/0xb0 [ 360.405795][ C0] do_idle+0x1e8/0x510 [ 360.405822][ C0] ? __pfx_do_idle+0x10/0x10 [ 360.405853][ C0] cpu_startup_entry+0x44/0x60 [ 360.405876][ C0] rest_init+0x2de/0x300 [ 360.405896][ C0] start_kernel+0x3a9/0x410 [ 360.405916][ C0] x86_64_start_reservations+0x24/0x30 [ 360.405939][ C0] x86_64_start_kernel+0x143/0x1c0 [ 360.405962][ C0] common_startup_64+0x13e/0x147 [ 360.405990][ C0] [ 360.406573][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 360.586644][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 360.595741][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 360.605783][ T31] Call Trace: [ 360.609050][ T31] [ 360.611973][ T31] dump_stack_lvl+0x99/0x250 [ 360.616555][ T31] ? __asan_memcpy+0x40/0x70 [ 360.621159][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.626345][ T31] ? __pfx__printk+0x10/0x10 [ 360.630938][ T31] vpanic+0x281/0x750 [ 360.634914][ T31] ? __pfx_vpanic+0x10/0x10 [ 360.639421][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 360.644980][ T31] ? preempt_schedule+0xae/0xc0 [ 360.649844][ T31] ? preempt_schedule_common+0x83/0xd0 [ 360.655310][ T31] panic+0xb9/0xc0 [ 360.659052][ T31] ? __pfx_panic+0x10/0x10 [ 360.663466][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 360.668838][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 360.675010][ T31] watchdog+0xfd2/0xfe0 [ 360.679184][ T31] ? watchdog+0x1de/0xfe0 [ 360.683522][ T31] kthread+0x70e/0x8a0 [ 360.687590][ T31] ? __pfx_watchdog+0x10/0x10 [ 360.692277][ T31] ? __pfx_kthread+0x10/0x10 [ 360.696875][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 360.702076][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.707363][ T31] ? __pfx_kthread+0x10/0x10 [ 360.711961][ T31] ret_from_fork+0x439/0x7d0 [ 360.716547][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 360.721655][ T31] ? __switch_to_asm+0x39/0x70 [ 360.726415][ T31] ? __switch_to_asm+0x33/0x70 [ 360.731173][ T31] ? __pfx_kthread+0x10/0x10 [ 360.735752][ T31] ret_from_fork_asm+0x1a/0x30 [ 360.740517][ T31] [ 360.743778][ T31] Kernel Offset: disabled [ 360.748088][ T31] Rebooting in 86400 seconds..