last executing test programs: 38.969761247s ago: executing program 4 (id=12185): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000540)={&(0x7f0000000200), 0xc, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="dc9e0000", @ANYBLOB="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", @ANYRES64=r1], 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002d00200000001ef540574773755e5e48dc7edb27394d97ad76e9d5a0bfc624177363d041a1d277a0385d27eae1b70fb6"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4c854}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000f702010100000000000000000500ab930800044000005932280002800600034000010000060003400005000004000180080001000a010100"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x13a0}, 0x1, 0x0, 0x0, 0x20000045}, 0xc000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x20000043}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYRESOCT=r3], 0x6c}}, 0x880) accept$unix(0xffffffffffffffff, 0x0, 0x0) 38.779337025s ago: executing program 4 (id=12191): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) unshare(0x400) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x468f74858728407a, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000080)=0x30400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="44000000180001002cbd7000000000000a0000000002ff040000000008000400", @ANYRES32=r3, @ANYBLOB="0600150007001200180016801400010002"], 0x44}}, 0x0) 37.825780576s ago: executing program 4 (id=12206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x4, 0x5, 0xb, 0x7, 0x64, @mcast1, @mcast2, 0x8747, 0x1, 0x7}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101a40, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) (async) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000000)=0x1) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r6, {0x4, 0x2}, {0x6}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x2}}]}}]}, 0x3c}}, 0x20040054) 37.649929685s ago: executing program 4 (id=12209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x400c084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB]}, 0x14e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x1f, &(0x7f0000000240)={@local, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, 'c', "f876a7", 0x6c0c, "ee145e4c67651dcaac"}}}}}, 0x0) close(0x4) unshare(0x6a040000) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c) unshare(0x2000000) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) unshare(0x2010100) sendmsg$sock(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 37.055221939s ago: executing program 1 (id=12217): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$qrtr(0x2a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000003c0)=r1}, 0x20) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x12, &(0x7f0000000440)=ANY=[], 0x0) 36.633330993s ago: executing program 1 (id=12221): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=@delchain={0x64, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x6, 0xa}, {0xfff2, 0xffff}, {0xc, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x30, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x2}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x7c2}, @TCA_FW_MASK={0x8, 0x5, 0x8}]}}, @TCA_RATE={0x6, 0x5, {0x40}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0xa}, 0x94) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x10, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001811000099bd0f965f38246966db7bc6144d2771390602784501b53b82eefea91a85ff4603f6641dd6f1f94d1e00349ca56de602f877245e0f1824fb3d4679723530f954e7b6a6c1dc49a40828fbc5214b43954fa5a09edcebd365a2c792a52be799f4779e3685726e207d2cc825b3aa93d2f5", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) unshare(0xa020480) socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "48ffc27f", "bff2a81527ae4190"}, 0x38) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r10) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) 35.768053949s ago: executing program 4 (id=12229): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x48}}, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaabaaaaaa00000000000000069078640100feac1414aa00034e"], 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {0xd, 0xfff1}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@gettaction={0x14, 0x32, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c4) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xffffffff}, 0x8) close(r1) 35.466220353s ago: executing program 4 (id=12234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000700000000001400020077673000000000000000000000000000fc010880080100801400040002004e207f0000010000000000000000c40009801c000080060001000200000008000200ac141432050003000000000058000080060001000200000008000200640101020500030003000000060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000200000008000200ac141481050003000300007218647c8781a39040021d4be87e73c100ff0100000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030001000000240001000000000000000000000000000000000000000000000000000000000000000000060005"], 0x22c}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x400c084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x28b) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x1f, &(0x7f0000000240)={@local, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, 'c', "f876a7", 0x6c0c, "ee145e4c67651dcaac"}}}}}, 0x0) close(0x4) unshare(0x6a040000) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c) unshare(0x2000000) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) unshare(0x2010100) sendmsg$sock(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 35.073450799s ago: executing program 1 (id=12238): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0xc4, 0x3, 0x2}, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_pid(r3, &(0x7f0000002380), 0x12) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) r5 = socket(0x1, 0x2, 0x0) sendmmsg$unix(r5, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000180)=0x4, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2e}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) 33.993553699s ago: executing program 2 (id=12245): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x9, 0x800, 0x3) getsockopt(r1, 0x5, 0x9d93, &(0x7f00000000c0)=""/70, &(0x7f0000000140)=0x46) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x100000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300000000000000fe000000ffffe00000021400020000000000000000000000ffff"], 0x5c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r3, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3e, 0xe, {{{}, {0x7ffc}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x8c3, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x83, 0x1}}, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x54, 0x68}}, @void}}]]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r3, 0x622, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x1d}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8c0}, 0x4008007) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000010000000100000008000100020000002c00048005000300050000000500030001000000050003000500000005000300010000000500030028f300000800020002"], 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) socket$inet6(0xa, 0x2, 0x0) bind$packet(r5, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="e904a2000000ffffffffffff08004500001c0000dffd001190780000000000000000000000000008907886b6376ca85e73930ff2298b3bc78fd58049ea9d72cf6802e4e384b2d4003c93cb6cb2e5f2511d14373754fa093c"], 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 33.625362683s ago: executing program 2 (id=12246): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r2, &(0x7f0000000840)=[{{&(0x7f0000000400)=@in={0x2, 0x4e24, @private=0xa010102}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="f8000000000000000100000041"], 0xf8}}], 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', r1, 0x0, 0x4, 0xfe, 0x100, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, @mcast2, 0x8000, 0x700, 0x2, 0x2aa1f153}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', r4, 0x0, 0x2, 0x64, 0x1ac9ee85, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x1, 0xd, 0xa174}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x12, 0x9, 0x4, 0x200003, 0x8000}, 0x50) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r6, &(0x7f00000000c0)}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000a, 0x12, r8, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x0, 0xd3, &(0x7f0000000940)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) pipe(&(0x7f0000000c00)={0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c40)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x16, 0x1f, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x3a, 0xdc, &(0x7f0000000700)=""/220, 0x41000, 0x8, '\x00', r5, @fallback=0xe, r8, 0x8, &(0x7f0000000800)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x8, 0x3ff, 0xcc1}, 0x10, r9, 0xffffffffffffffff, 0xa, &(0x7f0000000c80)=[r10, 0x1, r11, r12], &(0x7f0000000cc0)=[{0x1, 0x2, 0x4, 0xc}, {0x3, 0x5, 0x1, 0xc}, {0x5, 0x3, 0xf, 0xa}, {0x4, 0x2, 0x6, 0x4}, {0x1, 0x1, 0x9, 0xb}, {0x1, 0x1, 0xf, 0x9}, {0x5, 0x2, 0x4}, {0x4, 0x3, 0x10, 0xa}, {0x5, 0x2, 0xc, 0x3}, {0x0, 0x5, 0x5, 0x4}], 0x10, 0x1}, 0x94) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r14 = accept4(r13, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000000200)='\x00\x00', 0x2) readv(r14, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r14, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmmsg$unix(r14, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0x4048844) sendto$unix(r14, &(0x7f0000000240)="84ff2fb78a71b8bf2b58b14f76e27d9be4d620f607b8ce97acf0233e55db4f1f9e2bdc2a47a71833f98c8f14784adc78d800c72519c69450dbb16ab11e7285f590d286877bb32a00c539c56f2d7fb25b4985d28605fe50ab11d32cfb945191b0bb0766fc766dd442693555571dd60283d85145bbdf4849658f0dc482bec424f120bce954800f02140ef8f2b68bdd7818c73731dd37788f2bd6d6cbff80e158c3acbc07419df4d40bc278b90a1f634a", 0xaf, 0x24000810, &(0x7f0000000300)=@file={0x2, './file0\x00'}, 0x6e) 33.505201589s ago: executing program 1 (id=12249): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) sendmmsg$alg(r0, &(0x7f0000006a40)=[{0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000ac0)="931485c883b6b4955819d2474cb334870e077b941bb243", 0x17}], 0x4, 0x0, 0x0, 0x4800}], 0x1, 0x10) pwritev(r0, &(0x7f0000001e80)=[{&(0x7f0000000000)="ed9c5b3f5d8b20aeb965d01e1c011726c1ee7abba3ce5a9c354830c812e7f120243c3a851bbbf973a4e03b3f71ee6b9a426ae0cbc76cb8d8daa132207df4b55e008e2284c239a2afdf817a8f463ef506003167068cb957684676d55d6d880efd5447ccfde409032fdfffdf78df6c2ff663fdee82e15f63185eb02e70c9ae2e2a7f4196000000000000000000", 0x8c}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000001c40)="3a04f1e43e61c856ccc4972ce7c46f7b6955ab938af3dac276d44bf47e320a2e6d393d41fac88ffa63bebb3ece7c146247e597397ff9788fe3447fdf2617b1528347e171d35c8940942c30731d498051e743864de470efd7fd35", 0x5a}, {&(0x7f0000001cc0)="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", 0xfe}, {&(0x7f0000001dc0)="e5089d995f71b43a1e080b3e9c19785caa04ddcb88c26939114f2b411f48fc9496a003e56f1d23cc24df1316fca8c5faaec5862391f2016787fc7356ef9a70c27c90b65c7e5ca49d3e3de12bcecda2049c1f7f3689303ee5815c18ccdcb6fa0d9245280321fd475225a22e47cdab6c7633d664815431da27395db9b6911a1aca6deacebc62e622896f31c4d9f32f09fe76bdbce644de25f57dca3d02cee2424378d0a919b4086bbeb4871769276de425d5949e", 0xb3}], 0x5, 0x7, 0x2) r2 = socket$inet(0x2, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a00000003"], 0x20}}], 0x1, 0x24000004) 33.417634873s ago: executing program 2 (id=12251): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtaction={0x48, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}, [{0x4}, {0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x1d, {0x3, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0) socket$netlink(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x19, 0x70bd2b, 0x255fdbfa, {0x0, 0x0, 0x0, 0x0, 0x40d87, 0x79e63}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000380)=0x0) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvmmsg(r7, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/3, 0x3}], 0x1, &(0x7f0000000240)=""/244, 0xf4}, 0x200}, {{&(0x7f0000000400)=@qipcrtr, 0x80, 0x0}, 0x63cf046e}], 0x2, 0x1, 0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f00000003c0)=ANY=[], 0x52) close(r3) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x44000) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000340)={{r2, &(0x7f00000001c0)='\x00', 0x44000, &(0x7f0000000200)={@_ha_fsid={[0xccf, 0x2]}, {0xd, 0x3ff, 0x8, 0xf44}}, 0x9, &(0x7f0000000240)={@_ha_fsid}, 0x0}, {[0x2, 0x3ff, 0x3fc, 0xfffffffb]}, 0xfffffffd, 0x6c, &(0x7f00000002c0)=""/108}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FIONCLEX(r8, 0x5450) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r9) unshare(0x8040480) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r5, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, 'ct\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x8004) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xffffff1f, 0x2, 0x81, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x50}}, 0x40002) sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x114, 0x14, 0x8, 0x70bd27, 0x25dfdbfb, {0x3, 0x2e}, [@INET_DIAG_REQ_BYTECODE={0xa, 0x1, "29db53b12bd4"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "99f14b310f922e59c52a7d5811569c19191eb57664af3cc7055878bfd7854d4d1e29c829197455964474fbc6dce47a28380702db29e67dde85c2240a96cfd1dd83ad27ab42e1e72338a829bec7f26d0bd905afacdb876c88dff512ee83f2668de51fe48d4078712cd3f9e5950675740b1f3d74aa99b63c2c8e66c51be7e4463d0839184b60ae50279d95e512b60b864b63351eade3712876fdc82bd253557a077055d5116fc639beb882c57100ea04a3a89737620631e058a64784cbddcf5b5a349f98bc8a5c050435bdc98292b7dda714c445b8da81377882f25a0c24ea37ca435d22e8651c38540c4936a42ff4"}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000}, 0x48084) 33.33189721s ago: executing program 1 (id=12253): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) write(r2, &(0x7f0000000580)="4beac53d8760ad2dc5ec5ab4baf37089fa2da41adef1598ed7abfaaa17b28ab3d3c5330e18cea9cdd82e1b2babdb6b5abc009401fa25bb93f00bef23ea1a54b87452817e0b452120ff2ee125597b6ba75c1664f0ddcdfc84cd33b9220f7e6d5b121ae706826ab4f169a2d108274f7348a2132d443fafbf49347a3371c3407f6a13710c606d66e57ca99e966e", 0x8c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x58, 0x0, 0x1, 0x0, 0xfffffffc, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x44042) socket$inet(0x2, 0x4, 0x1) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) setsockopt$packet_int(r5, 0x107, 0xc, &(0x7f0000000040)=0xf65, 0x4) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 33.096837756s ago: executing program 0 (id=12254): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x68, 0x30, 0xffff, 0x70bd29, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x5, 0xfffffff7}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) accept4$vsock_stream(r5, &(0x7f00000002c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x6, 0x1, 0x9, 0x5, 0x0, r3, 0x7, '\x00', r6, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="680000000206010800000000000000000100000a11000300686173683a69702c706f7274000000000900020073797a3000000000050001000700000005000400001600000500050002"], 0x68}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000b0000070000000900010073797a300000000014000000020a01010000000000000000000000002c000000180a05000000000000000000070000010900010073797a30000000000c0005400000000000000002580000000b0a010100000000000000000700000908000340000000080900010073"], 0x392c}}, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4000}, 0x18) ioctl$sock_ifreq(r10, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x3f00, 0x40, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x3f, 0x18, 0x0, 0xfffe, 0x0, 0x2f, 0x0, @empty, @remote, {[@noop]}}}}}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000003600)={@val={0x0, 0x805}, @void, @ipv6=@icmpv6={0xc, 0x6, "56c58d", 0x12a0, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, {[@hopopts={0x3b, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x95}, @pad1]}, @fragment={0x21, 0x0, 0x4, 0x1, 0x0, 0x8, 0x67}, @routing={0x2b, 0x4, 0x1, 0x2, 0x0, [@mcast2, @private0]}, @fragment={0x5c, 0x0, 0x5, 0x1, 0x0, 0x2, 0x65}, @hopopts={0x3a, 0x3d, '\x00', [@enc_lim={0x4, 0x1, 0x80}, @ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x38, {0x3, 0xc, 0xd5, 0x8, [0x8, 0x1, 0x6be, 0x7ff, 0x3, 0x1]}}, @generic={0x9, 0xa8, "ae436a10f16d4e16ac6b00663f139e3086072d3f0cca2edc2ea5de7729afef031e4c093577b7b9f70e91966529643a1e52023e02ba8366235175f2d7111c25abe6ab06747d1d5fbb01844a076308a5cb9b407634b765110ebd2267e6cab3778fac2ae1962ff6ce5ce3ea5de4dc6bd616b8a591c936fafed8f0b3f00c7ee224036b8ba48613984b8c028b55698c822b3467b56e237b521b9c58fd073a4d3a0af286acd632b1be5187"}, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x4}, @generic={0x1, 0xe4, "23842331a577694753c0f6be8fef506d8d443a14e6f02ae337798bcd3a6fd8811baf65239711fda7c37a88e3c5aabbf5c2ddfb1e20a70ccc725085293d9e2cc0ad2151e34d31d60851241f0abece790adba7db77160856834acfb7ab6e5e69f729757cea5e53dfb79377ae848087030eaef39da6e24393e8ab7e778be71d4f73da91b708f8e7acb7126aecbd8cd1292f5ae37212cbdba0411e746efd4fd1143492b41d0a283f4c65bc2189a38f74f674be8ad02d5a148a83f9359f417b2ff9f00b7e9731df1a3ec0950604ce8173343766663db4050fc5331d1dde57ef070d9b027dedca"}]}, @srh={0x2b, 0x8, 0x4, 0x4, 0x3, 0x60, 0x5, [@ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}], @echo_reply={0x81, 0x0, 0x0, 0xe0a, 0x100, "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"}}}}, 0x12cc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000280)) socket(0x1d, 0x2, 0x6) 32.627973125s ago: executing program 3 (id=12256): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x400, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}]}, &(0x7f0000000140)=0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000040)=0x10, 0x4) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x99af8e632bfb392d, 0x11, r3, 0x100000000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000002040)="162dd3cad75f87b473622140aca9f6be4377caaba76f08daaad767f134c2ffc2ba9c92a5971b01b71a225dababc99832633ea975d465532309695b29d56eb9befec5159067bffa2d17b24093b372ebaf5589d18a8905982d01ee2870aa096647d6afabca77e0f36a01481b10ed8f0a585ceb41bf50f0515c259bbbbee74db0e045a9fde3614d35c6f2dfa1e71dace811a410bdfb395dd7c54fa733c6f8111f24df309ad928c6462d0a53a3824f9af07b11cb0c05724c33acfad1f5f16bffaf6c58ab2b8c4626bd9d4d1cc4ab67c9838b1fc53fb4ce46d304a12fffc2110043381d08160f056e8d3908497a402dcc156ff69bbf5cb5e5443c06bc4e3c6e4f231aab0eb6fdd2bb0740ae88095360d8b247daa6628fc10edbf048d800625134022e1d5d0bcb5c50e567f50c1990b1a434caa57d210b6084c9424d37c7a71479613b69b67670baab82f13b0923a73786655cfceb0c70d511b94f992391cad9ce57c5c76675cae6a2712cb9ce6dc07bdd0118001f062a22943ca72742a0fe97c48b9b895515fc71145fac9dfd27118a70b71dd564f27e31e1112292864a7be45459524ad8fb03c1f4388bdba3d9e3882a9be894133b0deea92885d0276f268bad0396635036192da1a9788e7525b08de07b0f351147e0f2aaa239e197924a5fc6961dbfcc96ad4cae4cf59f7a812d0c7f8506216dfb7658f8f8545477f4b6c1a606554ee19621d85438014d5e569b0c467e67cf0bb046284f4145ee9f9601b950b0217d183d0266da78f83ed2cf8a83f1374295853d52cdd561a756f247598126cddc98416c42c47a5ad4fda1c419b6ce04f4b57efd2cecf7bfe1589aab05c33e397c8acfb5e4d05cc62db2ba633e74d08c9a3c92111d39ef7d1c0321bfa1827b9fbbb592c49d46244b57c985ee4cc830f7eeda32cae961c4386916f927fc7f442eb6e2eaf45a3d2b0f28d4d319fdedd003aedc1c6384085921397a041384edee7172973fddb3eee2132acdec385cb596055f82a41087097ffece144a340cfe3ec0c0b833f4a92d28709419827eb0f747d73a2e7cc7d00a24749b9dd340793e2ca36536bc47233c9e2602a7f7f94450b22117215be6086d0c0132d24350c19abcb3d713fa97f76ce6ec8f61b24bfecb3ddcd0e7bccd0c4839de19283e95e08bc629554aac9543c15b0f69f1d03374269796c477579d212708b760914bde3269d9e9b0036c7cd0e8f3376d6a62ed0cde76861423ec5f76f2ab4d0f05b21db57277feaaf8475e6e6d1e5672281db17046b7464439d69e25210f67998e912d02c5296c60a450a38495e3b6737339a05f83e5a02aa1ee5bca6bf67ba84c659ef3cc4495cb1551e749277a86db07e7c48f61ee0672919d6a00472a893b6c6eead02140318fb497a1819b692b9bcb3b5cbe7cb55b9524abb1268b3f4a031a64fe6305519a2212298089c443b0503e77b7c8a3da14387872ca35cd6524f629161d85f253498568587513aa16848fa8f8f3dea115cbe8e85bdb8aa20f20ce26f3fcaac4615a9b9d7d6919ba952f7e93a96ba26010cc4bc24622ed3bb9b063e0e686f41b2cece5a50d787676600a04bfe7e6eb78e740b8bcb4b3a51f2a39250d0163a75d8f97032c60efc5516ba48ce2d53da0a7aab99330369a2c44cfc6ac65707733971493de86a519629f7be4643a52abe3d0ca1e22dfa27d8f7c54c50e0e1f3f639dbc622afa56d22b2732232d62b0a312c359dfd25e266f2138a49689fcc789470b01aabc05563ab025938153c15abbb300192e0bc27f810246d4d24295f337db02aa6b3e801905ee519a681fd73462eb330800763f75ae88e3e57c2a5552fba4b6154cab775625b817e18ff1e26273d21bf8b3cb2a79df7e92a8e498dadc04f11c62d6841bdd0408b212a43951a4a4f4f29c9b8918644e743e2f30cc52d422a9ce03750307096a5f8b61bb585ada2ad7a63d440e418c16e6827792dd470fa980a72cbe53b354ab208b0cb99ad858ff2ee4395f7fbff96c38fe2f84ccca78b6c867d1ff0440c5795b875339b87d98e59dca2dd80b3624c7406b56dc76b0198514bdb97b228e5b726683b3c12f71fb2b1dda24d085175acdc5d7744129df8065168ac103d819bc95dd408e17bfa7ae37d0ff5145e393a37b5cc08c2c10e5ef5d80dd6c79d35c650417e6fc47467c3552bbc1a3d50d2cdce471e5cd43b48475272e30c9d415c826bed60369c1841219e15d93bd87de49e2566de3a01dfc60cd3295134c876863cbfb7be8be44b0d4369b81a778f8fb2fcd039048fd16bf9d4f08a9458dbeadb298ee12b7ee7f6f43099dc684e33bee75d23f37c5b058e56f785f1c2af0c2ad66b69fc1fc06073bd53bed4a967314a6af8ede4d2facdae08ed503c4903fd5fdfd291327cd2ead1876361a16d9341cc24a63b2b51538b7199e048c00cab7127d19ae9a3ea0755b9b5d9604fefcfe7237d641019291bcd9ce30d5a388ad7127fde6061f1e307c0024ff1c200dc04354340eb4e8daac073b7c2f1fe1cee49330cc89ac061bd8a5f1676391d22d4afc8e5875daf4806bac0b5565bb99f07723cdd063ff070ba409fba6642888ea88109b333c3748f77b99f3bd4b9b61ec5e3d798d3584937c0165f4df571b8132ae425849e7e5ce414fbb00d9a30c129e2c13b6791435bb552bb01cedf3003b3bb24503fe226121d1f83419d5c23fad54dbd08fb3449b8a561954a23b47e34b7b14ddbcec2745353269e19fe218da2d0aad6df73083b3979160d4e52c8532c9f6602bc8ee624b9d5157fefbffec98e0e91a4f3824ccb4c33e17d19011f4c8db333d0fc5530930951cb63353a3aa0617ab2aba52268b81628d9f4a56b227300488c10df1e7f7533e1e4db449cb9cb6e588debf4795f98810702de5bfb81414bdacfcbd9e66f051ec7272b41ba281e8a68fe7c61e1cb4e74077342ddb7c5191d9731448a9e42a30c4df80e533db26ca3e12ab8ce8b5f0d114888692589b6c836c603ea4210c31b0e053092d75d9ceb49c5e9e2815b5aeebfcb53e97017d0ff6c7d3410120e355f9a6a1226e64a1621a2e6c04865acb25e137243ab9b82beea39c411163afd8969b086df73751020879785ec79c451fb822c11df1ae927318b35bd583a56827fd8744df8e7693837b8ddb0e831fd97b87505d5540d76d3e09895e64cc563dadf60bec88ee70b6008a53e50523ffbd2c0aa9f19123bd6f28de9851ae1f3f6101b46acf9139792be4872bf494c8970aee100a7a0c4dfbccbf01b6ccbebdfa8291f8ab3e25a9e4ff5dbda11488630e3bb8158b8f8de8cd4f793885e7a28e5afdf45eb57ad1330dfc0c51f51986e53c458feb4a4ef55b810a32f847d7ff5500c0f769d9abc090c10f87ba4e5250f36e70abb838ccb8f9fa95d96ba1e2e75a2d808a8fa26b686149ed6738a8e63ef70ed284e25d044aaa1e14c8caea04b77c9fba96036dd8b3be2e7704c65090fa7e8bf0e45c291709d3eb16a81e8aac27a120e52c05866310d8f288367f2b5187e83a1f7d5cb9dc6f8faa648683b7c88d54871dfcdca822568959ac2f7eb7dd3a345b0a8149806105dc90abfee3d5cefae3dfece4723fdc5a73c3a087020ca2fe1b166fe5b54cfb2f661fa5b017502155bf91856c3aae5cd20a48fbb958e1a0e70df51e4e46bbea56f639f6f32698d45297296244e8aaa845c13b70fa7f4f31115de0808975c143191c89c0233c557ddb93d6233ce22a699ca9a54ca6e8ddcfb5bf9d95b9807a49d9a64f7a239c77fa4e0d92d561fca5aa3e6c149c16c11131c9ad78493572cf1a9f953cc63ef8121cfa86a0f3fdb5a73c8530ddf93a9308fcaf436455aa6817f65e4616c9e38733b1cf9fa09822953d7d203748c5e45cbbe84a4fb7d59318013ba2a7da6f972c47ff9289091d7476035affddf44cc7a0b223cd14af5243dd14cd5d0f42849bd31af8ef9de434a01c52ee583c2d93b4785c34969629ffa406335ccd090637b83a5ee126a4833e6d6cf92b8aa6f9a2213df25fa575980c0cbd98039ca978860442b7466c3d4aa215593243d9c7ad3980470c9ef85154566ceed93ccb0330634f92d1fe5050bfe135f345527c93476e474f31ea45729ec534475d36b69876644e5db59c8cb0412f8d65be9ff2bea5ac37c5b1ff5d5d484aebed8b33920bbc8ed59ba9b3bf24ab6da8ebeda14dad9148183411980136cc2fde47049c98063b0ff1816a0852af035cbe8313d88620559e8331d983a43e0f4b515a61f5761bcd2130853ea24377d042643684699ceb9441a73f1285f6a15c8e00d17b4e051df2bd16b1a5699f6dce4556b0b6c88b8b86464beb6415777a8ec890c9335cc14452d6b23e2483d5b77b56042a694435bf913cb6e48ce6ca60c3009b274869bb350a8026d80680b32c9394e9b5dfee8df555a705bb1ff17ac848ccec95bb37206a72ab1d56160682d83e38c8acca34b08fa3b8665b35d01967c0a49681ef74b89b39f785977187a9d6f70affe2a32f41fe942fbd30fd9da981cf8f75485015962cb598d3d09a039787bf8d339695d0f5cd7cb60d25cdba119fa435e3692e06bdd76db5856eb2ed2cd85a081209b0a1453d52e1f8cf5120c7f044bddc38cded7ed59a793bfb2b289137137147f704a0628bb8e3e342b6084fbcc105b5345023fed9b2d339b95b0d0c97945943a70e007fe2172c501fae54ad04c279ae6da7150ea25469ce7e9c33b51713b05dcd4753930a0a37326d276fd28c8c0f6e06660beb102e2868fee31f70d37d38769e824846b081d120d8fcd394627fd672fe823cfdcf7af07b20b40e8e5efce8e93e8414744efd2723798aad9dabd8e23efc08983db6c65cf3c43d5b759ca52d118fad7a1bb23e5b3578f616fc42e304c797e640d8b985987274766adbf424e4e9a78c29dc436636e0df6e9255ebdd2c7c0cd261d42631cc49df231d0bd080da2928bcab9a0546b404b658f75fca9d8e506f3f6639bca2a13eae6bded0081fd2239bd8c0ab2382d23eecfb8985da82fe5ed32a96ac1e198d7f8cf5752cfb296af0a2d59ed19022cb084b525d44d8c773a14743a706baf209aebb270104b16181fdc2462d356341d89ba8024171c462640abfc3bd6f602c3bbd710f6ae6a2cef146f27002f78051d6687b83dac0cc627e0af1ed8765396d9783c6429b4063a8d58728c60ec88416c5dbdf362b891d278db21c9a4558c724b06547fc5f641801dd0da8403e57cff37d407fab07bb389c40555af869af263265333bf8aa4290d7cdb9a78573362d608a549165f13323c0107aa4dfac934fef838cf6e5f06b9324a5d8474183f077de97287eaf3c85cb74165b189d7547d3fccc4c763d02ce57d59c70f39e8065cdeb5fd13c4c14609f98941b73b16fed60bc55a2d8ef92104568b595f4a31f6428d527b34c470715d1300cd41ea992763f46a739ba387f359ee1d97c51e889e5599cebd800dbeef1496e3dbacaafc403d0dc7cd3c7d193788536aa5b0f5f25482744107d74795f27a8a8832596166fdcaa548b90c48890715526a52518f16d697d65beb6321befa003dc56432e3dd4b01cede5447813eb429dce845bf9702e5063fe571d8cb6cfecf12870e373b42c4f86f75b7b249f1bdb397113dfd7a23f1930f8533e300e8d0dc1674acb3ce38342b01edcaa09a0f4502f0ba94efeb853fa917612fc16a3829b437663a1e1", 0xfc1}], 0x1, 0xf) close(0x3) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv6_deladdrlabel={0x30, 0x49, 0x117, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x30}}, 0x240088c0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r7, 0x0, 0x0}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x40}], 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r8, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) getsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000580)={r5, 0xfc49, 0x20}, 0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r9) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x2, 0x6, 0x628, 0x0, 0x340, 0x120, 0x120, 0x340, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffff00], 'bridge0\x00', 'veth1_vlan\x00', {}, {0xff}}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x1f, @ipv6=@empty, 0x4e22}}}, {{@ipv6={@ipv4, @dev={0xfe, 0x80, '\x00', 0x32}, [0x0, 0x0, 0x0, 0xff000000], [], 'nicvf0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9b, 0x4, 0x9, 0x4, 0x3, 0x1000, 0x3, 0x9]}}}, {{@ipv6={@loopback, @local, [0xffffff00, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'pimreg\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'team_slave_0\x00', {0x1, 0x7, 0x7, 0x2, 0xb, 0x1, 0x5}, {0x400}}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 32.603670177s ago: executing program 0 (id=12257): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000200000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x4c094}, 0x10) 32.466125627s ago: executing program 0 (id=12258): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000a00000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 32.408162859s ago: executing program 3 (id=12259): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003b80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x8, @mcast1, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x20000}}], 0x1, 0x8000) 32.388321057s ago: executing program 2 (id=12260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e040000000000000000000000000000020000000002000000000000040300800000000000000000090300000000005f5f61"], 0x0, 0x52}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x1ff, 0x0, 0x0, 0xa, 0x81, 0x1000, 0x0, 0xff, 0x0, 0x8, 'syz1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) unshare(0x22020600) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0xffffffff, 0x8}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x1d, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x3, 0x0, 0x3, 0x1df, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0xc0000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}, @sadb_key={0x1ce, 0x8, 0x7328, 0x0, "c387bbe622e4220559515a632d3a36a563b76e314ea0ecfd905d0c5d21c51731475bcbcd40df04f699b66ac3ffe42c73877a9946d2dff45f5f84a55914059048dba979393a1d1e88f9c43fc5ee6a357b21560d43cc53a715563758a65bccfda23dc1848fd04c4a1674d104ace166c53c5c033e3c63e9b76a4e71b4774f77e8c0a67290b8a8d39d8e38872b709cba42e8d38f8e36031806a1616d423f64080cb378cb1d496f6aed194b96b585f7ef7a21021af397cf05b9097415a648b4649e02cb703a1460a4f971f1fd2cd9d75175182c7fa78f33af9c3e918a5284ea0d0e21b85233bbd635e0bc486d9687f0f8e83d1cb833bc6375a8e1b82df1c47ab26a0f1aa24131e75302a0ce7d9bef1f9138d7e29699c65246d73d93d948cb80648cd9dae383c44b71fc405d23ab51a3018a743f543ba94e013e7470f923934a083a250f2d12d42dd8d51fb5ab1caafa3ba9277711156eb1c567ea60691769a4386821e5bf64a818c9cc2dab123c8846879d08b01288e75e785f08dd7680d3afebfeaeb2be4a31c96a02bce45de70253a82eb6676616651f2a23883ecbd4b1d995a914ea1696553d7d97903eafc9a5ec1919ee9b0cf8431f9481a7e28644321a5b7b25cdcda01d56c78fa94f98dfe36faa236adb87f7b8663e0417a17108255e54c0d5901c0ba0e5aa2e9b8ca3b795a66130bece60c079270514de28c9a33c89f177361f5c8d147b882b457048f2aea6f2d785b7e1cd39d9c20f2bb4567c2900cd0b5677b01ebe8398c356f0ab0c655b9b54de5a8f7baa8afcc37da43e87ecfc151858176a1e507f08b0430f454c0b6e086815359e72077bf927a5520bd533d6b6fd6dae32f73753d3cac03bbbcd44a4dbddcbd854f1b24805c65d8bb76f5e4e5db8e5647ce0c8c7636ff8bf47397fb8dc5f85284c051d11bdc961418ab6fc08e4f10a5fe0a050833eb31c4c7e90c31c0e10cb6bf85963a8e493eec797552571eabb56b0209cc98f69abf678e7332698e097d7290b0904060e31de1b030f2f5a576acadd6c40a08b04cd3c9ecce2a4dfa13d94641f530eb8eb4b9008cfe21b9db214a98aebaa2fe4141e6075de4f9a2c0313795112f45c193492a05a1690a61245f5a2f6f1f52eded3330129e02f547a76e638d51e3f526e1fd754e0422ff7726abc0c318e4b51e06ab90ceb3ac678e5e45334104a2681c527ea69710009c6bed91783b877cf5a5a7e99f522edfaf5c50f8edf0348f94a7e2a115d9984864da930b5b8ae5b183c24454623803609135fd8d2f73a9f252eca05d8dff1e3db8488f3026eb33b2032f5e6dc7f0d5d34b037b10b681b744f5115ea29138663e735fb842ff68acfa0722c74123e0003209bac0ff26c693808fb41ee72886cf9bbe311968e4a96743dd26e09ca163b030563d8890dd131f3d15fcaaf8c0c07737dbb3989b527aafb74908c507b8a3fd274cf35b6a1b0b6822fcac465bb01e7b91169f5a729e046f22f4a24a9dee1393af9ff5136b0d02aeea95b6de2ead47231058ea83b4b7754e1bf24fd9dbb64f798d8d659a3288b6df1077357f449e2d58e764f695d1b72919e5ea10af16c5ab163aeb0b9955fce6486b0a91c6aa94e4c9f17fac2d065059022077ce342810109a6e9e1e8fd0e0f482906a239e8c2ea62082305297830e96258f0a5367a48e7253dee498cf109380c26429c2c1d8b2e8ae3910b67341eba9b13aca225e0ab65ce53a88b10d94f074a7b82e977f3d19df670616ef965f557e94a01cf5eb0e731d0a67874bf701cb6969c914e90386b0ba0f2ff0d47c9936db2d244559e7dccd88a983699ca4a542120045e1d751f3f422295f8e5b9f10d51d1524cbe33705c34e91ae0a9498d7f52ec4ff636595687f9e448695457bb018d3c6a8e355f3a1e89a154d6e52fe5cfaf96a7ef7810482ec433dab376896e4cb2761721eb877554bec12428a3537dd66c8485fb78d59c91c770410ac1f6ae3855c059b48f7c506bd22e7bf39170a9083b24d074769cba966244389e5b4ba50a409d947be60df2f4ad24288009ea7cad413388dab6cc20e4bae82f04ad23a374c1afdc809d1ac513ae1c85d8561bf6142202945e2acd373e45e954a151bcc592fe6363b8a72ebe1752d4ff83c147cb5d2ff70f79cbd43690d815ab2b0167c2dfd0f2b7cf87356cb87869d5a336bf5332afe201235940c790523c71cd321efa41def0c0768b91875e3f464231a5f5ac5e778ad94d8dada6f8c82da4fdf140d7d715c62a22653f236dc3fce9ac41de658c32800dca59e5eb4626fd1e10106ee50d79ab0b387cc88bd36d96a8a9e82d2a1e0235a5e1e65143773b78d28e1e4a7c5d1d5eb4d01f21b47dca016a415bf8a67e62446ab521716725dd0434099ccdbc205d1ce3f57113571f8efa1c0ef7fe74307732a507d3db56d5ca3c9b78ea6605ee3edf922ae4a7387b951e96e0bd428272d84760859d07c4145f4d33809a2780fca5450a11416c4e3847ecd236894fcbd5da276a06f18ff1a8795af805ac3977b5bf88e7b4af461d1eb51603f4b7f270faecf73454fba5c19b435bfbe10b6bde0dcec28ea4493aec2c5fa6e4fdde0c6d028b5a73a9ee7e632554afa7b12a0aea0347c18ba9ac3e94d8c96fa618bd625d8e6eb15879b29eaa2f0eb6fcf7f30b72d23e04c46368d6b1c4d0be34b8da5ac2062d7e0928ad9c07cef5038f8e62d93a7cf05581641556ad786056587cd7acc9cf4a6d55ea2976a9ad61136abf9817f933baccd2a0145c90f1c632da1a39829c6bb7050c5c05ba411b5269ad9398654b27a68e53918f492f1496ef643ecc673d7173c4da0aff813900ecd72958d66c7ad73232fcef02ee729743db41c5f14430bc2075ba80adfc03b07d808a2e822f590b736fa35014e4849fcca2db01ef29e6b9e948629d80d02ad706e51bb1175b6731a9c877d26ec1b86fb8c83452fc018001106320b97180783115b34736baa49e6b65ef121ad8ac95b6f9533369f8f5681afa563a567ee3ce6ded749aa77f80412d802680e0ae1f562399e35933b7463e21b540281ea32f670300428b66d6d49ba1f7eef495ba34fb4714383434830f37b206caa20f12bb4f76a5055449bcaf83df96748fba2a4de36daa4bbfac9efda32cb4c8972b8500a2b6eee542ea881e8f1617c23d8925918eafb2fb1396c0c2844d5d4c703ae3d3c06b8d687d838949c55ad02895fa2cb4fe0401561885507deadc1c9de71d616913509b77e5dd92ad648dd9046a2c94051b92ab9a8e812df75fd13d1976762b6ab94edb681bc567f41725987b724745b94cc0f69dc5d8f39ace40790a4e15da32d517bdec49ce797dfd25461a746226c0b9bf1ee7ead18685797993d0f504aac9550f11f159e0a270ab27a2e10aea9d9c018484f169529af07a2d24b57a7c856fbb997e94c5649e96540ce443e472588f5bc6aae5406a7344d627fc6a98e3131d594ff7bce95e3e6e127e7491734f4da79418e54b1d11ab193ef291efed4258d57df123a643b3b711d0e230792cff0236c47274239e1d454b24bd9420eaeb262d5f84b24289766ffb3f74a2deb08590914b20c1e5e4552f531810c72513bf70d56160186c16b09c4ab1a5a9ee3dfb79f25ada8276911e5f2e191b93e56070e6d6206efb582d27e7781e066091aa06bf5b7f4f3e3fa6e72da4668bea738572c87eb938971ff69c456d72017275fa50034dc918f3feb13a13a9391e9b019b215e2a71363fa8166d01df90ede8372009e82e6822b2ecf2480989299470057f8abbc77408699fa281ae022224f59c88e83d3ddf7362b2e6c1661f98646f05fd56f2d1c1717af21bfa0e11b03c170e857090a9d453a32b26e254a7880dd5aee8f2321b14818c80f39d91ec47bf1912cf9c61aff816d57ddafbfaf53285225998cf2f6a3ac5b5008974f1e0ed1bab89b6a41f217474bce6760c85a7ad453f45edc341df07f126152fa105b332af8457e03d0d54430cacd818b5ae3f76666d401ac2fc1ca849c0c5601a3def4530ded16f85017586d3690eefedea6bc57b53d0cb8dd980c60cb8bbc32f30f3ff37b37f6eb226c783bb8fafa4471a2f4a8e9e59925bb9179e6590d8dc44e877371222062d30277abc1cd0ce2a436460b1ce065fae4c74a27d438acdb25a3d21aec20fe24dc44407876aa52f78951b7c429b2e43b2631b12559c5fac81603e6345de7fe3672317ac91df5865c4a180878b440c0d132f3ae5b8e544fc0bc853ffce2befdf99868e34a09873f6d28e8e0c1a6c75938e540c1d4976ab9ae278914e0117c907cbf15f8a31e4aaf56afcb9c808e986436cc9c279706c31a645b57b982621d7b2943b6ad5f8ed3d4327daba44a5c49e729939128a4667b3ef8bd0c67f21a7e09a401df8c18f1d6c5ee2a56561acd951c8bc95b260f93815f2845fe829df685a03565c1f25a187f29c11f2824903c65dc63fde8888289b27a5604091cbd4f47ddb550c4d14f220db22f63b730193cbf88376140648e8b875fdf511bb8367115fb0656da7f4f1bb8331b5e0ffa4ad983695551643fd3f1f899cccbd038d7eb4102993b5b0e42b489b11e694097881e0df1b05c54d88e3d0886ed2c5811174737b2d16fb5ea2086bd1374515527c933f316e6a554d023c0a3815778190b0300f09fd7ccb92eb90ac29915c489829b3711cc75ebec221fbacd7c6f0780e6a041ff80bb4fd7397cd13975789995c04a5fbd0c0a4c7577f57856e30e1b8c70203bfd66d0efbe80aa11be48deb86c5f9054400786a6f883286441df6d3d486527d5762076ddcb727d5b61f8cff0a06956f1ead48c7973c2716c79d213d16a6b5f8881d3d044c33cb94d473405b0f7f08324235989d5128f65eb2e63b3c332ab831729c680977898c1b52c764ebe07c81febae22b3e3fed6d01a9774761e5d3fedb6118a4477bddc6b9cece2de3e6ec4e1c1c0ea3854dcd4e49bb217755ce0c418ba4e70d4b2c3f0aa4b49fb2b2362633df7bd329798b9ddce6923883928237003fa3227e33ae5cd56ce239b0ab92fdd24b5f53bb6098dee788f058abf19aabdd08325583ea756b530154119b68700099ae112c0b3beee32c7c1110a320dc992b3094db6a4633fbf718ca7b40be6fc5e16f785264c11a1831814cb6c6067cd4c710cf4bcc6acafab917313a88f38c9c8e3b049bcfd130552793075d65417ba22cb746d14283316d34"}]}, 0xef8}, 0x1, 0x7}, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r8, 0x8080583a, &(0x7f0000000140)={0x0, 0x7f, 0x3, 0x7, 0xa000, 0x0, 0xffffffffffffff01}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 32.281801484s ago: executing program 0 (id=12261): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x4000}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0xfffffffb, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b1d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0xfdbf, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x38, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0xc800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newnexthop={0x18, 0x68, 0x1, 0x100004, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) socket$xdp(0x2c, 0x3, 0x0) 32.261919716s ago: executing program 3 (id=12262): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x300}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x500, 0x300}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x4000) 32.217761738s ago: executing program 2 (id=12263): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48901, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x48001}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000200ad556a5c5c0601020a0040000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c041}, 0x200480d0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c6174650000"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x4000, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8, 0xfffffffffffffffc, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x20000844) r7 = socket(0x26, 0x800, 0xffffffff) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000500)={0x6, {{0xa, 0x4e21, 0xffffffda, @mcast2, 0x72}}, 0x1, 0x4, [{{0xa, 0x4e23, 0xff, @rand_addr=' \x01\x00', 0xffe}}, {{0xa, 0x4e20, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e20, 0x1ff, @private0}}, {{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd6}}]}, 0x290) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="000022f0ff07ffffffff0180c200000e6400350008004500001c000000000011907800000800e0000001000017c100089078"], 0x32) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) 31.997792111s ago: executing program 1 (id=12264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000700000000001400020077673000000000000000000000000000fc010880080100801400040002004e207f0000010000000000000000c40009801c000080060001000200000008000200ac141432050003000000000058000080060001000200000008000200640101020500030003000000060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000200000008000200ac141481050003000300007218647c8781a39040021d4be87e73c100ff0100000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030001000000240001000000000000000000000000000000000000000000000000000000000000000000060005"], 0x22c}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x400c084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe200000000726564697265637400000000000000000000000000000000000000000000000008000000"]}, 0x1f2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x1f, &(0x7f0000000240)={@local, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, 'c', "f876a7", 0x6c0c, "ee145e4c67651dcaac"}}}}}, 0x0) close(0x4) unshare(0x6a040000) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c) unshare(0x2000000) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) unshare(0x2010100) sendmsg$sock(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 31.805088764s ago: executing program 0 (id=12265): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89b1, &(0x7f0000000000)={'bond0\x00', 0x200}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000900)=0xffffffffffffffff, 0x4) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@gettfilter={0x24, 0x2e, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0xe}, {0xffe0, 0xb}, {0xffff, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40080b0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000400)='GPL\x00', 0xd, 0x100a, &(0x7f0000000940)=""/4106, 0x1f00, 0x68, '\x00', 0x0, 0x0, r6, 0x19c00, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0x2, 0x5b, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r4, @ANYBLOB="08000200ac1414aab2c9f47d6e50a2c07a479bf12fd42027dead2f2f50ff3b7132d50bccd92a63e9416d0e2fe2081304928c1f5edd44b546691a02"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r8 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x1c) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 31.083978395s ago: executing program 3 (id=12266): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000feffffff950000000000000068b77eeeee8533be3ea516e1e80087bec668eb030662ab626f0f170e581e48fdd034ed4b788ab1bb406323e4f2178b84511cde7162d216ec96000000000000007362a25bb08042037e5348d6926e9dbcb51c94643324234e45decca7ea5d5534cf4977092712cc215f171c5441afca46a1b2646500d364d36c7eb5efaf38a7ef6934133f3afe96c48c"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 30.956383389s ago: executing program 0 (id=12267): r0 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)'], 0x28}, 0xffffff7f}], 0x1, 0x0) 30.909348396s ago: executing program 3 (id=12268): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x29, 0xf4, 0x6, 0x7, 0x4c, @private0, @local, 0x8000, 0x8, 0x8, 0x7}}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) 30.729843926s ago: executing program 3 (id=12269): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000400000008fc230001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffff00000000}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r3) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x3, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000940)=ANY=[@ANYBLOB="bbbbbbf7ffbbffffffffffff86dd6020c0d100143a00fe8000000000000000000000000000bbff02000000000000000000000000000187009078ff010000000000000000000000000001"], 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x184, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x134, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}, {@in6=@mcast2, @in6=@private0, @in6=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x2, 0xa}, {@in=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6c, 0x2, 0x0, 0x3507, 0x0, 0xa}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) unshare(0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r6) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="030725bd7000000000001f0000001e9febd23f69cf300c4d38acb6b8ddc37c5ac4d92d129475e40873fefcc457115758083509ac53774177eb911e3d1a164c1bea94efedab05a2"], 0x14}, 0x1, 0x0, 0x0, 0x2000c094}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r6) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x44800) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0xc080}, 0x40) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r9 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0xc, &(0x7f0000000840)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f00000009c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x200}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x48080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xfffffffffffffff4}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x94) 28.52755962s ago: executing program 2 (id=12270): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x40408d4) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x10, 0xffec}, {0x4, 0xe}, {0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x8000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x6}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff08000740000000012c0006801400040000000000000000000000000000000001"], 0xc0}}, 0x0) 10.968071015s ago: executing program 32 (id=12267): r0 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)'], 0x28}, 0xffffff7f}], 0x1, 0x0) 4.666238779s ago: executing program 33 (id=12264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x400c084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe200000000726564697265637400000000000000000000000000000000000000000000000008000000"]}, 0x1f2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x1f, &(0x7f0000000240)={@local, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, 'c', "f876a7", 0x6c0c, "ee145e4c67651dcaac"}}}}}, 0x0) close(0x4) unshare(0x6a040000) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c) unshare(0x2000000) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) unshare(0x2010100) sendmsg$sock(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 2.677321026s ago: executing program 34 (id=12269): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000400000008fc230001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffff00000000}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r3) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x3, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000940)=ANY=[@ANYBLOB="bbbbbbf7ffbbffffffffffff86dd6020c0d100143a00fe8000000000000000000000000000bbff02000000000000000000000000000187009078ff010000000000000000000000000001"], 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x184, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x134, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}, {@in6=@mcast2, @in6=@private0, @in6=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x2, 0xa}, {@in=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6c, 0x2, 0x0, 0x3507, 0x0, 0xa}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) unshare(0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r6) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="030725bd7000000000001f0000001e9febd23f69cf300c4d38acb6b8ddc37c5ac4d92d129475e40873fefcc457115758083509ac53774177eb911e3d1a164c1bea94efedab05a2"], 0x14}, 0x1, 0x0, 0x0, 0x2000c094}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r6) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x44800) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0xc080}, 0x40) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r9 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0xc, &(0x7f0000000840)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f00000009c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x200}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x48080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xfffffffffffffff4}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x94) 696.81772ms ago: executing program 35 (id=12234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x400c084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x28b) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x1f, &(0x7f0000000240)={@local, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, 'c', "f876a7", 0x6c0c, "ee145e4c67651dcaac"}}}}}, 0x0) close(0x4) unshare(0x6a040000) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c) unshare(0x2000000) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) unshare(0x2010100) sendmsg$sock(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 0s ago: executing program 36 (id=12270): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x40408d4) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x10, 0xffec}, {0x4, 0xe}, {0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x8000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x6}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff08000740000000012c0006801400040000000000000000000000000000000001"], 0xc0}}, 0x0) kernel console output (not intermixed with test programs): 7219] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1521.178871][ T7219] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.191202][ T7219] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.220880][ T7219] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1521.230464][ T7219] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.334517][T12622] can: request_module (can-proto-0) failed. [ 1521.467710][T12632] __nla_validate_parse: 220 callbacks suppressed [ 1521.467733][T12632] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11335'. [ 1521.597580][T12639] IPv6: addrconf: prefix option has invalid lifetime [ 1521.614877][T12640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11336'. [ 1521.665476][T12640] veth1_to_team: entered promiscuous mode [ 1521.707100][T12640] veth1_to_team: left promiscuous mode [ 1521.814710][T12645] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 1521.964651][T12629] ±ÿ speed is unknown, defaulting to 1000 [ 1521.978184][T12629] ip6tnl0 speed is unknown, defaulting to 1000 [ 1522.441616][T12661] FAULT_INJECTION: forcing a failure. [ 1522.441616][T12661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1522.459034][T12661] CPU: 1 UID: 0 PID: 12661 Comm: syz.0.11344 Not tainted syzkaller #0 PREEMPT(full) [ 1522.459064][T12661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1522.459078][T12661] Call Trace: [ 1522.459087][T12661] [ 1522.459096][T12661] dump_stack_lvl+0xe8/0x150 [ 1522.459126][T12661] should_fail_ex+0x412/0x560 [ 1522.459152][T12661] _copy_to_user+0x31/0xb0 [ 1522.459177][T12661] bpf_test_finish+0x53c/0x6b0 [ 1522.459206][T12661] ? __pfx_bpf_test_finish+0x10/0x10 [ 1522.459227][T12661] ? eth_type_trans+0x484/0x7e0 [ 1522.459262][T12661] bpf_prog_test_run_skb+0x1250/0x2260 [ 1522.459303][T12661] ? __fget_files+0x3a0/0x420 [ 1522.459326][T12661] ? __fget_files+0x2a/0x420 [ 1522.459356][T12661] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1522.459377][T12661] bpf_prog_test_run+0x2c7/0x340 [ 1522.459399][T12661] __sys_bpf+0x643/0x950 [ 1522.459430][T12661] ? __pfx___sys_bpf+0x10/0x10 [ 1522.459474][T12661] ? ksys_write+0x242/0x270 [ 1522.459507][T12661] ? __pfx_ksys_write+0x10/0x10 [ 1522.459543][T12661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.459562][T12661] __x64_sys_bpf+0x7c/0x90 [ 1522.459586][T12661] do_syscall_64+0x174/0x580 [ 1522.459604][T12661] ? trace_irq_disable+0x3b/0x140 [ 1522.459629][T12661] ? clear_bhb_loop+0x40/0x90 [ 1522.459651][T12661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.459667][T12661] RIP: 0033:0x7f52fa99ce59 [ 1522.459684][T12661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1522.459699][T12661] RSP: 002b:00007f52fb7a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1522.459717][T12661] RAX: ffffffffffffffda RBX: 00007f52fac15fa0 RCX: 00007f52fa99ce59 [ 1522.459739][T12661] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 1522.459750][T12661] RBP: 00007f52fb7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1522.459761][T12661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1522.459771][T12661] R13: 00007f52fac16038 R14: 00007f52fac15fa0 R15: 00007ffd4eeb6af8 [ 1522.459798][T12661] [ 1523.261217][T12675] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 1523.877746][T12696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11357'. [ 1523.944814][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11359'. [ 1523.955508][T12699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1524.006913][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11361'. [ 1525.410033][T12720] mac80211_hwsim hwsim15 syzkaller0: Caught tx_queue_len zero misconfig [ 1525.486863][ T7223] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.521057][ T7223] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.550231][ T7223] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.566530][ T7223] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.601887][T12735] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11371'. [ 1525.811261][T12750] netlink: 'syz.4.11377': attribute type 6 has an invalid length. [ 1525.922808][T12754] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 1526.076564][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11381'. [ 1526.874108][T12789] netlink: 'syz.3.11390': attribute type 2 has an invalid length. [ 1526.910304][T12789] netlink: 'syz.3.11390': attribute type 1 has an invalid length. [ 1526.970713][T12789] netlink: 'syz.3.11390': attribute type 1 has an invalid length. [ 1527.585720][T12823] FAULT_INJECTION: forcing a failure. [ 1527.585720][T12823] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1527.620291][T12823] CPU: 1 UID: 0 PID: 12823 Comm: syz.3.11399 Not tainted syzkaller #0 PREEMPT(full) [ 1527.620326][T12823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1527.620342][T12823] Call Trace: [ 1527.620352][T12823] [ 1527.620364][T12823] dump_stack_lvl+0xe8/0x150 [ 1527.620400][T12823] should_fail_ex+0x412/0x560 [ 1527.620434][T12823] prepare_alloc_pages+0x22a/0x650 [ 1527.620483][T12823] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1527.620513][T12823] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1527.620556][T12823] ? __pfx_policy_nodemask+0x10/0x10 [ 1527.620597][T12823] alloc_pages_mpol+0x235/0x490 [ 1527.620629][T12823] alloc_pages_noprof+0xac/0x2a0 [ 1527.620657][T12823] __pud_alloc+0x3a/0x460 [ 1527.620693][T12823] handle_mm_fault+0x2b2c/0x3170 [ 1527.620733][T12823] ? mt_find+0x186/0x630 [ 1527.620771][T12823] ? __pfx_mt_find+0x10/0x10 [ 1527.620799][T12823] ? handle_mm_fault+0xf1/0x3170 [ 1527.620841][T12823] ? __pfx_handle_mm_fault+0x10/0x10 [ 1527.620890][T12823] ? __lock_acquire+0x6b5/0x2cf0 [ 1527.620924][T12823] ? lock_mm_and_find_vma+0xa7/0x340 [ 1527.620963][T12823] do_user_addr_fault+0x75b/0x1340 [ 1527.621014][T12823] exc_page_fault+0x6a/0xc0 [ 1527.621041][T12823] asm_exc_page_fault+0x26/0x30 [ 1527.621065][T12823] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1527.621097][T12823] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1527.621117][T12823] RSP: 0018:ffffc90003817a18 EFLAGS: 00050206 [ 1527.621140][T12823] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038 [ 1527.621157][T12823] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: ffffc90003817aa0 [ 1527.621174][T12823] RBP: ffffc90003817c30 R08: ffffc90003817ad7 R09: 1ffff92000702f5a [ 1527.621192][T12823] R10: dffffc0000000000 R11: fffff52000702f5b R12: ffffc90003817ba0 [ 1527.621211][T12823] R13: dffffc0000000000 R14: ffffc90003817aa0 R15: 00002000000004c0 [ 1527.621279][T12823] _copy_from_user+0x7a/0xb0 [ 1527.621311][T12823] ___sys_recvmsg+0x175/0x590 [ 1527.621350][T12823] ? __pfx____sys_recvmsg+0x10/0x10 [ 1527.621385][T12823] ? __fget_files+0x2a/0x420 [ 1527.621440][T12823] ? __fget_files+0x3a0/0x420 [ 1527.621484][T12823] do_recvmmsg+0x334/0x800 [ 1527.621525][T12823] ? __pfx_do_recvmmsg+0x10/0x10 [ 1527.621571][T12823] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1527.621622][T12823] __x64_sys_recvmmsg+0x198/0x250 [ 1527.621656][T12823] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1527.621698][T12823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.621725][T12823] do_syscall_64+0x174/0x580 [ 1527.621749][T12823] ? trace_irq_disable+0x3b/0x140 [ 1527.621795][T12823] ? clear_bhb_loop+0x40/0x90 [ 1527.621825][T12823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.621849][T12823] RIP: 0033:0x7fd9bdd9ce59 [ 1527.621871][T12823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1527.621891][T12823] RSP: 002b:00007fd9bebcb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1527.621915][T12823] RAX: ffffffffffffffda RBX: 00007fd9be015fa0 RCX: 00007fd9bdd9ce59 [ 1527.621933][T12823] RDX: 0000000000000f02 RSI: 00002000000004c0 RDI: 0000000000000004 [ 1527.621949][T12823] RBP: 00007fd9bebcb090 R08: 0000000000000000 R09: 0000000000000000 [ 1527.621964][T12823] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000001 [ 1527.621979][T12823] R13: 00007fd9be016038 R14: 00007fd9be015fa0 R15: 00007ffc6b1ca548 [ 1527.622020][T12823] [ 1531.065437][T12828] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1531.242353][T12895] netlink: 'syz.4.11419': attribute type 29 has an invalid length. [ 1531.261559][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11419'. [ 1531.298222][T12896] netlink: 'syz.4.11419': attribute type 29 has an invalid length. [ 1531.333474][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11419'. [ 1531.354178][T12900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11420'. [ 1531.357608][T12896] netlink: 'syz.4.11419': attribute type 29 has an invalid length. [ 1531.396834][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11419'. [ 1531.428610][T12900] 8021q: adding VLAN 0 to HW filter on device bond85 [ 1531.443014][T12896] netlink: 'syz.4.11419': attribute type 29 has an invalid length. [ 1531.461976][T12905] bond85: entered promiscuous mode [ 1531.470202][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11419'. [ 1531.488563][T12905] bond85: entered allmulticast mode [ 1531.544911][T12905] 8021q: adding VLAN 0 to HW filter on device bond85 [ 1531.567744][T12905] team0: Port device bond85 added [ 1531.582442][T12896] netlink: 'syz.4.11419': attribute type 29 has an invalid length. [ 1531.599543][T12900] bond84: (slave team_slave_1): Releasing backup interface [ 1531.607369][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11419'. [ 1531.621235][T12900] team_slave_1: left allmulticast mode [ 1531.653574][T12900] team_slave_1: entered allmulticast mode [ 1531.661278][T12900] bond85: (slave team_slave_1): Enslaving as an active interface with an up link [ 1531.672804][T12896] netlink: 'syz.4.11419': attribute type 29 has an invalid length. [ 1531.695423][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11419'. [ 1531.719196][T12896] netlink: 'syz.4.11419': attribute type 29 has an invalid length. [ 1531.745012][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11419'. [ 1531.760350][T12896] netlink: 'syz.4.11419': attribute type 29 has an invalid length. [ 1531.791890][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11419'. [ 1531.804304][T12896] netlink: 'syz.4.11419': attribute type 29 has an invalid length. [ 1531.815740][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11419'. [ 1531.825865][T12896] netlink: 'syz.4.11419': attribute type 29 has an invalid length. [ 1532.091095][T12928] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1532.130531][T12928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1533.121439][T12987] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1533.151345][T12987] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1533.241249][T12994] macvtap1: entered promiscuous mode [ 1533.253275][T12994] macvtap1: entered allmulticast mode [ 1533.261335][T12994] veth1_vlan: entered allmulticast mode [ 1533.304590][T12994] macvtap2: entered promiscuous mode [ 1533.310181][T12994] macvtap2: entered allmulticast mode [ 1533.341673][T12987] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1533.360662][T12987] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1533.404941][T12996] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1533.427119][T12996] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.477921][T12987] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1533.501887][T12987] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1533.587297][T12996] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1533.620353][T12996] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.683483][T12987] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1533.710936][T12987] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1533.763026][T12996] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1533.798172][T12996] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.820740][T13018] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1533.966338][T12996] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1533.977824][T12996] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.019522][ T7230] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1534.039440][ T7230] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1534.055344][ T7230] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1534.064096][ T7230] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1534.096914][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1534.105894][ T36] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1534.147041][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1534.159470][ T36] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1534.183514][ T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1534.203474][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.256957][ T7230] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1534.268829][ T7230] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.301003][ T9147] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1534.317986][ T9147] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.350933][ T6463] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1534.373162][ T6463] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.697567][T13042] FAULT_INJECTION: forcing a failure. [ 1534.697567][T13042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1534.722341][T13042] CPU: 1 UID: 0 PID: 13042 Comm: syz.3.11465 Not tainted syzkaller #0 PREEMPT(full) [ 1534.722371][T13042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1534.722385][T13042] Call Trace: [ 1534.722395][T13042] [ 1534.722406][T13042] dump_stack_lvl+0xe8/0x150 [ 1534.722437][T13042] should_fail_ex+0x412/0x560 [ 1534.722467][T13042] _copy_to_user+0x31/0xb0 [ 1534.722496][T13042] simple_read_from_buffer+0xe1/0x170 [ 1534.722530][T13042] proc_fail_nth_read+0x1bb/0x230 [ 1534.722563][T13042] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1534.722596][T13042] ? rw_verify_area+0x2a6/0x4d0 [ 1534.722625][T13042] ? __fget_files+0x2a/0x420 [ 1534.722650][T13042] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1534.722688][T13042] vfs_read+0x20c/0xa70 [ 1534.722725][T13042] ? __pfx___mutex_lock+0x10/0x10 [ 1534.722752][T13042] ? __pfx_vfs_read+0x10/0x10 [ 1534.722784][T13042] ? __fget_files+0x2a/0x420 [ 1534.722815][T13042] ? __fget_files+0x3a0/0x420 [ 1534.722840][T13042] ? __fget_files+0x2a/0x420 [ 1534.722880][T13042] ksys_read+0x150/0x270 [ 1534.722914][T13042] ? __pfx_ksys_read+0x10/0x10 [ 1534.722955][T13042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.722978][T13042] do_syscall_64+0x174/0x580 [ 1534.723000][T13042] ? trace_irq_disable+0x3b/0x140 [ 1534.723034][T13042] ? clear_bhb_loop+0x40/0x90 [ 1534.723062][T13042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.723084][T13042] RIP: 0033:0x7fd9bdd5d68e [ 1534.723104][T13042] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1534.723122][T13042] RSP: 002b:00007fd9bebcafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1534.723144][T13042] RAX: ffffffffffffffda RBX: 00007fd9bebcb6c0 RCX: 00007fd9bdd5d68e [ 1534.723160][T13042] RDX: 000000000000000f RSI: 00007fd9bebcb0a0 RDI: 0000000000000004 [ 1534.723174][T13042] RBP: 00007fd9bebcb090 R08: 0000000000000000 R09: 0000000000000000 [ 1534.723188][T13042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1534.723201][T13042] R13: 00007fd9be016038 R14: 00007fd9be015fa0 R15: 00007ffc6b1ca548 [ 1534.723237][T13042] [ 1535.501974][T13079] syzkaller0: entered promiscuous mode [ 1535.521264][T13079] syzkaller0: entered allmulticast mode [ 1535.947360][T13102] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 1536.361887][T13124] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 1536.611484][T13136] __nla_validate_parse: 79 callbacks suppressed [ 1536.611508][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11499'. [ 1536.661543][T13136] validate_nla: 62 callbacks suppressed [ 1536.661626][T13136] netlink: 'syz.0.11499': attribute type 1 has an invalid length. [ 1536.700786][T13136] netlink: 'syz.0.11499': attribute type 2 has an invalid length. [ 1537.147589][T13163] bond82: (slave team_slave_1): Releasing backup interface [ 1537.183165][T13173] netlink: 'syz.3.11511': attribute type 1 has an invalid length. [ 1537.193732][T13163] team_slave_1: left allmulticast mode [ 1537.212621][T13163] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1537.424782][T13179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11515'. [ 1537.477020][T13185] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11519'. [ 1537.803943][T13204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11525'. [ 1537.856355][T13204] bridge0: port 2(erspan0) entered blocking state [ 1537.863309][T13204] bridge0: port 2(erspan0) entered disabled state [ 1537.870509][T13204] erspan0: entered allmulticast mode [ 1537.882656][T13204] erspan0: entered promiscuous mode [ 1537.888588][T13204] bridge0: port 2(erspan0) entered blocking state [ 1537.895250][T13204] bridge0: port 2(erspan0) entered forwarding state [ 1537.909563][T13206] erspan0: left allmulticast mode [ 1537.914780][T13206] erspan0: left promiscuous mode [ 1537.920827][T13206] bridge0: port 2(erspan0) entered disabled state [ 1537.974947][T13204] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11525'. [ 1537.995266][T13204] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11525'. [ 1538.109920][T13208] bond86: entered promiscuous mode [ 1538.128093][T13208] bond86: entered allmulticast mode [ 1538.134616][T13208] 8021q: adding VLAN 0 to HW filter on device bond86 [ 1538.213437][T13223] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11531'. [ 1538.487499][T13240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11540'. [ 1538.507094][T13240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11540'. [ 1538.518115][T13240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11540'. [ 1538.680204][T13250] netlink: 'syz.2.11542': attribute type 4 has an invalid length. [ 1538.700685][T13249] netlink: 'syz.0.11544': attribute type 11 has an invalid length. [ 1538.724497][T13252] netlink: 'syz.4.11546': attribute type 6 has an invalid length. [ 1538.946452][ T6853] ±ÿ speed is unknown, defaulting to 1000 [ 1538.967052][ T6853] syz2: Port: 1 Link DOWN [ 1539.051365][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1539.561455][T13289] netlink: 'syz.1.11561': attribute type 30 has an invalid length. [ 1540.252282][T13320] 8021q: adding VLAN 0 to HW filter on device bond87 [ 1540.293860][T13320] bond87: entered promiscuous mode [ 1540.325816][T13320] bond87: entered allmulticast mode [ 1540.362073][T13320] 8021q: adding VLAN 0 to HW filter on device bond87 [ 1540.406183][T13320] team0: Port device bond87 added [ 1540.435699][T13324] team_slave_1: entered allmulticast mode [ 1540.453716][T13324] bond87: (slave team_slave_1): Enslaving as an active interface with an up link [ 1540.484378][T13299] ±ÿ speed is unknown, defaulting to 1000 [ 1540.512540][T13299] ip6tnl0 speed is unknown, defaulting to 1000 [ 1541.217217][T13344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1542.372181][T13389] netlink: 'syz.2.11593': attribute type 13 has an invalid length. [ 1542.395866][T13389] netlink: 'syz.2.11593': attribute type 13 has an invalid length. [ 1543.096613][T13414] FAULT_INJECTION: forcing a failure. [ 1543.096613][T13414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1543.139562][T13414] CPU: 0 UID: 0 PID: 13414 Comm: syz.4.11602 Not tainted syzkaller #0 PREEMPT(full) [ 1543.139592][T13414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1543.139606][T13414] Call Trace: [ 1543.139615][T13414] [ 1543.139624][T13414] dump_stack_lvl+0xe8/0x150 [ 1543.139656][T13414] should_fail_ex+0x412/0x560 [ 1543.139686][T13414] _copy_from_iter+0x1d3/0x1670 [ 1543.139714][T13414] ? rcu_is_watching+0x15/0xb0 [ 1543.139747][T13414] ? __pfx__copy_from_iter+0x10/0x10 [ 1543.139779][T13414] ? netlink_sendmsg+0x650/0xb40 [ 1543.139803][T13414] ? skb_put+0x11b/0x210 [ 1543.139831][T13414] netlink_sendmsg+0x6c0/0xb40 [ 1543.139914][T13414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1543.139945][T13414] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1543.139983][T13414] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1543.140017][T13414] ____sys_sendmsg+0x972/0x9f0 [ 1543.140042][T13414] ? __might_fault+0xaf/0x130 [ 1543.140077][T13414] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1543.140113][T13414] ? import_iovec+0x73/0xa0 [ 1543.140143][T13414] ___sys_sendmsg+0x2a5/0x360 [ 1543.140167][T13414] ? __lock_acquire+0x6b5/0x2cf0 [ 1543.140197][T13414] ? __pfx____sys_sendmsg+0x10/0x10 [ 1543.140261][T13414] ? __fget_files+0x2a/0x420 [ 1543.140287][T13414] ? __fget_files+0x3a0/0x420 [ 1543.140326][T13414] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1543.140354][T13414] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1543.140390][T13414] ? __pfx_ksys_write+0x10/0x10 [ 1543.140431][T13414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.140456][T13414] do_syscall_64+0x174/0x580 [ 1543.140479][T13414] ? trace_irq_disable+0x3b/0x140 [ 1543.140511][T13414] ? clear_bhb_loop+0x40/0x90 [ 1543.140538][T13414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.140559][T13414] RIP: 0033:0x7f0c4f79ce59 [ 1543.140580][T13414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1543.140599][T13414] RSP: 002b:00007f0c5066e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1543.140622][T13414] RAX: ffffffffffffffda RBX: 00007f0c4fa15fa0 RCX: 00007f0c4f79ce59 [ 1543.140638][T13414] RDX: 0000000000000000 RSI: 0000200000000e40 RDI: 0000000000000005 [ 1543.140652][T13414] RBP: 00007f0c5066e090 R08: 0000000000000000 R09: 0000000000000000 [ 1543.140665][T13414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1543.140679][T13414] R13: 00007f0c4fa16038 R14: 00007f0c4fa15fa0 R15: 00007ffd57b45f98 [ 1543.140715][T13414] [ 1543.467763][T13418] __nla_validate_parse: 5 callbacks suppressed [ 1543.467787][T13418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11603'. [ 1543.703635][T13418] 8021q: adding VLAN 0 to HW filter on device bond83 [ 1543.739025][T13428] bond83: entered promiscuous mode [ 1543.744415][T13428] bond83: entered allmulticast mode [ 1543.778446][T13429] bond82: (slave team_slave_1): Releasing backup interface [ 1543.826997][T13429] team_slave_1: left allmulticast mode [ 1543.895595][T13429] team_slave_1: entered allmulticast mode [ 1543.916766][T13429] bond83: (slave team_slave_1): Enslaving as an active interface with an up link [ 1543.946678][T13409] ±ÿ speed is unknown, defaulting to 1000 [ 1543.973007][T13409] ip6tnl0 speed is unknown, defaulting to 1000 [ 1543.993708][T13438] netlink: 566 bytes leftover after parsing attributes in process `syz.1.11608'. [ 1544.051877][T13441] netlink: 'syz.4.11609': attribute type 10 has an invalid length. [ 1544.069046][T13441] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11609'. [ 1544.357102][T13454] FAULT_INJECTION: forcing a failure. [ 1544.357102][T13454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1544.401777][T13454] CPU: 0 UID: 0 PID: 13454 Comm: syz.3.11614 Not tainted syzkaller #0 PREEMPT(full) [ 1544.401808][T13454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1544.401822][T13454] Call Trace: [ 1544.401831][T13454] [ 1544.401840][T13454] dump_stack_lvl+0xe8/0x150 [ 1544.401872][T13454] should_fail_ex+0x412/0x560 [ 1544.401901][T13454] _copy_from_user+0x2d/0xb0 [ 1544.401928][T13454] __copy_msghdr+0x3c5/0x5b0 [ 1544.401959][T13454] ___sys_sendmsg+0x213/0x360 [ 1544.401982][T13454] ? __lock_acquire+0x6b5/0x2cf0 [ 1544.402011][T13454] ? __pfx____sys_sendmsg+0x10/0x10 [ 1544.402042][T13454] ? kstrtouint+0x6e/0xe0 [ 1544.402102][T13454] ? __fget_files+0x2a/0x420 [ 1544.402128][T13454] ? __fget_files+0x3a0/0x420 [ 1544.402165][T13454] __sys_sendmmsg+0x27c/0x4e0 [ 1544.402197][T13454] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1544.402220][T13454] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1544.402281][T13454] ? ksys_write+0x242/0x270 [ 1544.402315][T13454] ? __pfx_ksys_write+0x10/0x10 [ 1544.402354][T13454] __x64_sys_sendmmsg+0xa0/0xc0 [ 1544.402378][T13454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.402401][T13454] do_syscall_64+0x174/0x580 [ 1544.402422][T13454] ? trace_irq_disable+0x3b/0x140 [ 1544.402454][T13454] ? clear_bhb_loop+0x40/0x90 [ 1544.402481][T13454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.402503][T13454] RIP: 0033:0x7fd9bdd9ce59 [ 1544.402523][T13454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1544.402541][T13454] RSP: 002b:00007fd9bebcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1544.402563][T13454] RAX: ffffffffffffffda RBX: 00007fd9be015fa0 RCX: 00007fd9bdd9ce59 [ 1544.402579][T13454] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 000000000000000c [ 1544.402593][T13454] RBP: 00007fd9bebcb090 R08: 0000000000000000 R09: 0000000000000000 [ 1544.402606][T13454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1544.402619][T13454] R13: 00007fd9be016038 R14: 00007fd9be015fa0 R15: 00007ffc6b1ca548 [ 1544.402654][T13454] [ 1544.840958][T13465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11619'. [ 1544.979971][T13469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11621'. [ 1545.224900][T13481] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 1545.251015][T13481] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 1545.282554][T13481] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1545.914376][T13507] IPv6: NLM_F_CREATE should be specified when creating new route [ 1546.154149][T13469] ±ÿ speed is unknown, defaulting to 1000 [ 1546.175274][T13469] ip6tnl0 speed is unknown, defaulting to 1000 [ 1546.303428][T13516] bond74: (slave team_slave_1): Releasing backup interface [ 1546.317874][T13516] team_slave_1: left allmulticast mode [ 1547.075999][T13544] netlink: 'syz.3.11644': attribute type 6 has an invalid length. [ 1547.182255][T13549] syzkaller1: entered promiscuous mode [ 1547.187978][T13549] syzkaller1: entered allmulticast mode [ 1547.437043][T13557] netlink: 'syz.2.11650': attribute type 4 has an invalid length. [ 1547.523194][T13559] netlink: 'syz.3.11649': attribute type 8 has an invalid length. [ 1547.689825][T13565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1547.704361][ T36] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 1547.712726][T13566] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1548.741971][T13608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11666'. [ 1548.792298][T13608] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11666'. [ 1549.101309][T13622] netlink: 'syz.4.11671': attribute type 66 has an invalid length. [ 1549.466610][T13638] syzkaller1: entered promiscuous mode [ 1549.480586][T13638] syzkaller1: entered allmulticast mode [ 1549.943613][T13657] syzkaller0: entered promiscuous mode [ 1549.966554][T13657] syzkaller0: entered allmulticast mode [ 1550.175241][T13672] netlink: 504 bytes leftover after parsing attributes in process `syz.4.11693'. [ 1550.318291][T13677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11694'. [ 1550.342220][T13677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11694'. [ 1550.426548][T13682] bridge0: port 2(dummy0) entered disabled state [ 1550.433197][T13682] bridge0: port 1(vlan2) entered disabled state [ 1550.460458][T13682] bridge0: entered allmulticast mode [ 1550.488381][T13681] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.518793][T13681] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1550.886464][T13698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11703'. [ 1550.945214][T13700] FAULT_INJECTION: forcing a failure. [ 1550.945214][T13700] name failslab, interval 1, probability 0, space 0, times 0 [ 1550.981866][T13700] CPU: 1 UID: 0 PID: 13700 Comm: syz.3.11704 Not tainted syzkaller #0 PREEMPT(full) [ 1550.981898][T13700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1550.981913][T13700] Call Trace: [ 1550.981922][T13700] [ 1550.981933][T13700] dump_stack_lvl+0xe8/0x150 [ 1550.981964][T13700] should_fail_ex+0x412/0x560 [ 1550.981994][T13700] should_failslab+0xa8/0x100 [ 1550.982016][T13700] ? skb_clone+0x212/0x3a0 [ 1550.982043][T13700] kmem_cache_alloc_noprof+0x87/0x650 [ 1550.982074][T13700] ? __netlink_lookup+0xc6/0x8b0 [ 1550.982107][T13700] skb_clone+0x212/0x3a0 [ 1550.982137][T13700] __netlink_deliver_tap+0x404/0x850 [ 1550.982176][T13700] ? netlink_deliver_tap+0x2e/0x1b0 [ 1550.982204][T13700] netlink_deliver_tap+0x19c/0x1b0 [ 1550.982231][T13700] netlink_unicast+0x730/0x8e0 [ 1550.982266][T13700] netlink_sendmsg+0x813/0xb40 [ 1550.982291][T13700] ? irqentry_exit+0x218/0x8b0 [ 1550.982323][T13700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1550.982353][T13700] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1550.982387][T13700] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1550.982421][T13700] ____sys_sendmsg+0x972/0x9f0 [ 1550.982445][T13700] ? __might_fault+0xaf/0x130 [ 1550.982482][T13700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1550.982517][T13700] ? import_iovec+0x73/0xa0 [ 1550.982549][T13700] ___sys_sendmsg+0x2a5/0x360 [ 1550.982573][T13700] ? __lock_acquire+0x6b5/0x2cf0 [ 1550.982602][T13700] ? __pfx____sys_sendmsg+0x10/0x10 [ 1550.982670][T13700] ? __fget_files+0x2a/0x420 [ 1550.982730][T13700] ? __fget_files+0x3a0/0x420 [ 1550.982770][T13700] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1550.982798][T13700] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1550.982835][T13700] ? __pfx_ksys_write+0x10/0x10 [ 1550.982878][T13700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.982902][T13700] do_syscall_64+0x174/0x580 [ 1550.982924][T13700] ? trace_irq_disable+0x3b/0x140 [ 1550.982956][T13700] ? clear_bhb_loop+0x40/0x90 [ 1550.982984][T13700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.983006][T13700] RIP: 0033:0x7fd9bdd9ce59 [ 1550.983026][T13700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1550.983044][T13700] RSP: 002b:00007fd9bebcb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1550.983068][T13700] RAX: ffffffffffffffda RBX: 00007fd9be015fa0 RCX: 00007fd9bdd9ce59 [ 1550.983084][T13700] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 1550.983102][T13700] RBP: 00007fd9bebcb090 R08: 0000000000000000 R09: 0000000000000000 [ 1550.983116][T13700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1550.983129][T13700] R13: 00007fd9be016038 R14: 00007fd9be015fa0 R15: 00007ffc6b1ca548 [ 1550.983166][T13700] [ 1551.323006][T13705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11705'. [ 1551.678976][T13686] erspan0: left allmulticast mode [ 1551.787730][T13682] bridge0: port 2(dummy0) entered disabled state [ 1551.797989][T13682] vlan2: left allmulticast mode [ 1551.803617][T13682] bridge_slave_1: left allmulticast mode [ 1551.812778][T13682] vlan2: left promiscuous mode [ 1551.817706][T13682] bridge_slave_1: left promiscuous mode [ 1551.825141][T13682] bridge0: port 1(vlan2) entered disabled state [ 1551.859507][T13673] ±ÿ speed is unknown, defaulting to 1000 [ 1551.916196][T13705] 8021q: adding VLAN 0 to HW filter on device bond84 [ 1551.946412][T13709] bond84: entered promiscuous mode [ 1551.955220][T13709] bond84: entered allmulticast mode [ 1551.986388][T13706] bond83: (slave team_slave_1): Releasing backup interface [ 1551.998080][T13706] team_slave_1: left allmulticast mode [ 1552.010430][T13706] team_slave_1: entered allmulticast mode [ 1552.017023][T13706] bond84: (slave team_slave_1): Enslaving as an active interface with an up link [ 1552.027181][ T9147] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.036368][ T9147] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.049124][T13681] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.059487][T13681] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1552.078104][T13673] ip6tnl0 speed is unknown, defaulting to 1000 [ 1552.089123][ T9147] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.103428][ T9147] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.141686][T13681] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.178886][T13681] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1552.263359][T13681] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.277209][T13717] netlink: 'syz.0.11708': attribute type 1 has an invalid length. [ 1552.285397][T13681] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1552.297441][T13715] xt_hashlimit: size too large, truncated to 1048576 [ 1552.451389][T13718] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1552.565524][T13717] netlink: 'syz.0.11708': attribute type 3 has an invalid length. [ 1552.573918][T13717] netlink: 3 bytes leftover after parsing attributes in process `syz.0.11708'. [ 1552.644017][ T6463] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.652887][ T6463] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1552.739372][T13728] netlink: 'syz.3.11710': attribute type 3 has an invalid length. [ 1552.747510][ T6463] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.756520][ T6463] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1552.787785][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.800132][ T36] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1552.822094][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.839571][ T36] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1553.155746][T13735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11713'. [ 1553.253336][T13744] netlink: 'syz.0.11715': attribute type 1 has an invalid length. [ 1553.277625][T13744] netlink: 96 bytes leftover after parsing attributes in process `syz.0.11715'. [ 1553.558869][T13755] netlink: 'syz.3.11717': attribute type 1 has an invalid length. [ 1553.880736][T13766] __nla_validate_parse: 4 callbacks suppressed [ 1553.880758][T13766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11722'. [ 1554.079709][T13768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11723'. [ 1554.174313][T13759] ±ÿ speed is unknown, defaulting to 1000 [ 1554.194373][T13759] ip6tnl0 speed is unknown, defaulting to 1000 [ 1554.364592][T13762] dvmrp0: entered allmulticast mode [ 1554.414976][T13780] nbd: must specify an index to disconnect [ 1554.433618][T13782] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 1554.522740][T13787] netlink: 328 bytes leftover after parsing attributes in process `syz.3.11729'. [ 1554.553737][T13787] syzkaller0: entered promiscuous mode [ 1554.561307][T13787] syzkaller0: entered allmulticast mode [ 1554.570768][T13787] tipc: Enabled bearer , priority 0 [ 1554.582977][T13786] tipc: Resetting bearer [ 1554.628379][T13786] tipc: Disabling bearer [ 1555.120743][T13804] FAULT_INJECTION: forcing a failure. [ 1555.120743][T13804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1555.139166][T13804] CPU: 0 UID: 0 PID: 13804 Comm: syz.3.11736 Not tainted syzkaller #0 PREEMPT(full) [ 1555.139197][T13804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1555.139211][T13804] Call Trace: [ 1555.139220][T13804] [ 1555.139229][T13804] dump_stack_lvl+0xe8/0x150 [ 1555.139259][T13804] should_fail_ex+0x412/0x560 [ 1555.139290][T13804] _copy_from_user+0x2d/0xb0 [ 1555.139318][T13804] kstrtouint_from_user+0xd6/0x180 [ 1555.139343][T13804] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1555.139386][T13804] proc_fail_nth_write+0x8e/0x210 [ 1555.139416][T13804] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1555.139452][T13804] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1555.139484][T13804] vfs_write+0x29a/0xb90 [ 1555.139526][T13804] ? __pfx_vfs_write+0x10/0x10 [ 1555.139559][T13804] ? __fget_files+0x2a/0x420 [ 1555.139592][T13804] ? __fget_files+0x3a0/0x420 [ 1555.139617][T13804] ? __fget_files+0x2a/0x420 [ 1555.139655][T13804] ksys_write+0x150/0x270 [ 1555.139690][T13804] ? __pfx_ksys_write+0x10/0x10 [ 1555.139731][T13804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.139756][T13804] do_syscall_64+0x174/0x580 [ 1555.139780][T13804] ? trace_irq_disable+0x3b/0x140 [ 1555.139812][T13804] ? clear_bhb_loop+0x40/0x90 [ 1555.139847][T13804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.139870][T13804] RIP: 0033:0x7fd9bdd5d68e [ 1555.139890][T13804] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1555.139910][T13804] RSP: 002b:00007fd9bebcafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1555.139933][T13804] RAX: ffffffffffffffda RBX: 00007fd9bebcb6c0 RCX: 00007fd9bdd5d68e [ 1555.139949][T13804] RDX: 0000000000000001 RSI: 00007fd9bebcb0a0 RDI: 0000000000000005 [ 1555.139963][T13804] RBP: 00007fd9bebcb090 R08: 0000000000000000 R09: 0000000000000000 [ 1555.139977][T13804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1555.139990][T13804] R13: 00007fd9be016038 R14: 00007fd9be015fa0 R15: 00007ffc6b1ca548 [ 1555.140028][T13804] [ 1555.220114][T13808] syzkaller1: entered promiscuous mode [ 1555.436246][T13808] syzkaller1: entered allmulticast mode [ 1555.757776][T13819] netlink: 'syz.3.11741': attribute type 1 has an invalid length. [ 1555.802995][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11743'. [ 1555.824618][T13825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11741'. [ 1555.891770][T13819] bond85: option mode: invalid value (25) [ 1555.912563][T13819] bond85 (unregistering): Released all slaves [ 1555.963627][T13831] netlink: 5000 bytes leftover after parsing attributes in process `syz.4.11744'. [ 1556.379557][T13851] netlink: 'syz.3.11751': attribute type 7 has an invalid length. [ 1556.416821][T13851] netlink: 'syz.3.11751': attribute type 6 has an invalid length. [ 1556.433869][T13848] netlink: 'syz.1.11749': attribute type 1 has an invalid length. [ 1556.584341][T13867] FAULT_INJECTION: forcing a failure. [ 1556.584341][T13867] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.586865][T13848] 8021q: adding VLAN 0 to HW filter on device bond88 [ 1556.599286][T13867] CPU: 1 UID: 0 PID: 13867 Comm: syz.2.11756 Not tainted syzkaller #0 PREEMPT(full) [ 1556.599352][T13867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1556.599400][T13867] Call Trace: [ 1556.599435][T13867] [ 1556.599471][T13867] dump_stack_lvl+0xe8/0x150 [ 1556.599565][T13867] should_fail_ex+0x412/0x560 [ 1556.599640][T13867] should_failslab+0xa8/0x100 [ 1556.599701][T13867] ? radix_tree_node_alloc+0x7e/0x3a0 [ 1556.599781][T13867] kmem_cache_alloc_noprof+0x87/0x650 [ 1556.599855][T13867] ? radix_tree_node_alloc+0x7e/0x3a0 [ 1556.599930][T13867] ? __kasan_slab_free+0x5c/0x80 [ 1556.600012][T13867] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 1556.600104][T13867] radix_tree_node_alloc+0x7e/0x3a0 [ 1556.600238][T13867] idr_get_free+0x2b3/0xa70 [ 1556.600362][T13867] idr_alloc_u32+0x18d/0x320 [ 1556.600413][T13867] ? __radix_tree_preload+0x82/0x870 [ 1556.600511][T13867] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1556.600580][T13867] ? do_raw_spin_lock+0x12b/0x2f0 [ 1556.600673][T13867] idr_alloc_cyclic+0x9b/0x1b0 [ 1556.600745][T13867] btf_new_fd+0x894/0xd40 [ 1556.600856][T13867] ? __pfx_btf_new_fd+0x10/0x10 [ 1556.600940][T13867] ? bpf_token_put+0x143/0x160 [ 1556.601002][T13867] ? bpf_btf_load+0x126/0x190 [ 1556.601063][T13867] __sys_bpf+0x4e5/0x950 [ 1556.601151][T13867] ? __pfx___sys_bpf+0x10/0x10 [ 1556.601284][T13867] ? ksys_write+0x242/0x270 [ 1556.601363][T13867] ? __pfx_ksys_write+0x10/0x10 [ 1556.601455][T13867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.601517][T13867] __x64_sys_bpf+0x7c/0x90 [ 1556.601593][T13867] do_syscall_64+0x174/0x580 [ 1556.601655][T13867] ? trace_irq_disable+0x3b/0x140 [ 1556.601737][T13867] ? clear_bhb_loop+0x40/0x90 [ 1556.601813][T13867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.601865][T13867] RIP: 0033:0x7f4e94b9ce59 [ 1556.601918][T13867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1556.601969][T13867] RSP: 002b:00007f4e92df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1556.602040][T13867] RAX: ffffffffffffffda RBX: 00007f4e94e15fa0 RCX: 00007f4e94b9ce59 [ 1556.602080][T13867] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 1556.602112][T13867] RBP: 00007f4e92df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1556.602143][T13867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1556.602187][T13867] R13: 00007f4e94e16038 R14: 00007f4e94e15fa0 R15: 00007ffdcf8e2318 [ 1556.602307][T13867] [ 1557.119519][T13885] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 1557.315261][T13891] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1557.482693][T13896] netlink: 173 bytes leftover after parsing attributes in process `syz.1.11767'. [ 1558.037247][T13921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11774'. [ 1558.174742][T13921] 8021q: adding VLAN 0 to HW filter on device bond76 [ 1558.298897][T13926] bond76: entered promiscuous mode [ 1558.304273][T13926] bond76: entered allmulticast mode [ 1558.335678][T13926] 8021q: adding VLAN 0 to HW filter on device bond76 [ 1558.353835][T13926] team0: Port device bond76 added [ 1558.381042][T13929] team_slave_1: entered allmulticast mode [ 1558.402601][T13929] bond76: (slave team_slave_1): Enslaving as an active interface with an up link [ 1558.562342][T13934] vti0: entered promiscuous mode [ 1558.567524][T13934] vti0: entered allmulticast mode [ 1559.261769][T13957] netlink: 'syz.1.11787': attribute type 4 has an invalid length. [ 1559.404785][T13961] netlink: 'syz.4.11788': attribute type 10 has an invalid length. [ 1559.418016][T13961] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11788'. [ 1559.523668][T13965] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.11788'. [ 1559.796116][T13976] FAULT_INJECTION: forcing a failure. [ 1559.796116][T13976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1559.832204][T13976] CPU: 0 UID: 0 PID: 13976 Comm: syz.2.11793 Not tainted syzkaller #0 PREEMPT(full) [ 1559.832235][T13976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1559.832247][T13976] Call Trace: [ 1559.832256][T13976] [ 1559.832266][T13976] dump_stack_lvl+0xe8/0x150 [ 1559.832295][T13976] should_fail_ex+0x412/0x560 [ 1559.832324][T13976] _copy_from_user+0x2d/0xb0 [ 1559.832353][T13976] ___sys_sendmsg+0x1c6/0x360 [ 1559.832377][T13976] ? __lock_acquire+0x6b5/0x2cf0 [ 1559.832406][T13976] ? __pfx____sys_sendmsg+0x10/0x10 [ 1559.832469][T13976] ? __fget_files+0x2a/0x420 [ 1559.832495][T13976] ? __fget_files+0x3a0/0x420 [ 1559.832538][T13976] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1559.832565][T13976] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1559.832600][T13976] ? rcu_is_watching+0x15/0xb0 [ 1559.832636][T13976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.832665][T13976] do_syscall_64+0x174/0x580 [ 1559.832688][T13976] ? trace_irq_disable+0x3b/0x140 [ 1559.832720][T13976] ? clear_bhb_loop+0x40/0x90 [ 1559.832747][T13976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.832768][T13976] RIP: 0033:0x7f4e94b9ce59 [ 1559.832789][T13976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1559.832806][T13976] RSP: 002b:00007f4e92df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1559.832826][T13976] RAX: ffffffffffffffda RBX: 00007f4e94e15fa0 RCX: 00007f4e94b9ce59 [ 1559.832843][T13976] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1559.832856][T13976] RBP: 00007f4e92df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1559.832870][T13976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1559.832883][T13976] R13: 00007f4e94e16038 R14: 00007f4e94e15fa0 R15: 00007ffdcf8e2318 [ 1559.832918][T13976] [ 1560.448848][T13984] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.503893][T13984] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1560.660888][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1560.693195][T13984] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.768052][T13984] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1560.917518][T13984] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.927542][T13984] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1560.994052][T13990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11798'. [ 1561.136192][T13992] netlink: 'syz.2.11799': attribute type 4 has an invalid length. [ 1561.148439][T13984] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.158858][T13984] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1561.447248][T13994] FAULT_INJECTION: forcing a failure. [ 1561.447248][T13994] name failslab, interval 1, probability 0, space 0, times 0 [ 1561.462251][T13994] CPU: 1 UID: 0 PID: 13994 Comm: syz.1.11800 Not tainted syzkaller #0 PREEMPT(full) [ 1561.462280][T13994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1561.462294][T13994] Call Trace: [ 1561.462303][T13994] [ 1561.462312][T13994] dump_stack_lvl+0xe8/0x150 [ 1561.462343][T13994] should_fail_ex+0x412/0x560 [ 1561.462373][T13994] should_failslab+0xa8/0x100 [ 1561.462397][T13994] __kmalloc_noprof+0xe8/0x760 [ 1561.462429][T13994] ? tomoyo_encode+0x28b/0x550 [ 1561.462456][T13994] tomoyo_encode+0x28b/0x550 [ 1561.462488][T13994] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1561.462512][T13994] ? tomoyo_domain+0xd7/0x130 [ 1561.462540][T13994] ? tomoyo_path_number_perm+0x219/0x630 [ 1561.462570][T13994] tomoyo_path_number_perm+0x246/0x630 [ 1561.462602][T13994] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1561.462630][T13994] ? __lock_acquire+0x6b5/0x2cf0 [ 1561.462671][T13994] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1561.462721][T13994] ? __fget_files+0x2a/0x420 [ 1561.462752][T13994] ? __fget_files+0x2a/0x420 [ 1561.462783][T13994] ? __fget_files+0x3a0/0x420 [ 1561.462808][T13994] ? __fget_files+0x2a/0x420 [ 1561.462840][T13994] security_file_ioctl+0xc3/0x2a0 [ 1561.462871][T13994] __se_sys_ioctl+0x47/0x170 [ 1561.462903][T13994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.462928][T13994] do_syscall_64+0x174/0x580 [ 1561.462949][T13994] ? trace_irq_disable+0x3b/0x140 [ 1561.462981][T13994] ? clear_bhb_loop+0x40/0x90 [ 1561.463008][T13994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.463029][T13994] RIP: 0033:0x7f9cec99ce59 [ 1561.463049][T13994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1561.463067][T13994] RSP: 002b:00007f9ced93f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1561.463090][T13994] RAX: ffffffffffffffda RBX: 00007f9cecc15fa0 RCX: 00007f9cec99ce59 [ 1561.463106][T13994] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000006 [ 1561.463120][T13994] RBP: 00007f9ced93f090 R08: 0000000000000000 R09: 0000000000000000 [ 1561.463133][T13994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1561.463174][T13994] R13: 00007f9cecc16038 R14: 00007f9cecc15fa0 R15: 00007ffda88ee818 [ 1561.463211][T13994] [ 1561.463257][T13994] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1561.756488][ T6463] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.766814][ T6463] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1561.776014][ T6463] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.784437][ T6463] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1561.820739][ T6463] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.883186][ T6463] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1561.903155][ T6463] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.920299][ T6463] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1561.990975][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11804'. [ 1562.276504][T14021] netlink: 'syz.2.11811': attribute type 4 has an invalid length. [ 1562.312422][T14009] sctp: [Deprecated]: syz.4.11807 (pid 14009) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1562.312422][T14009] Use struct sctp_sack_info instead [ 1562.496836][T14026] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 1562.552440][T14031] FAULT_INJECTION: forcing a failure. [ 1562.552440][T14031] name failslab, interval 1, probability 0, space 0, times 0 [ 1562.566130][T14031] CPU: 1 UID: 0 PID: 14031 Comm: syz.1.11815 Not tainted syzkaller #0 PREEMPT(full) [ 1562.566160][T14031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1562.566175][T14031] Call Trace: [ 1562.566185][T14031] [ 1562.566194][T14031] dump_stack_lvl+0xe8/0x150 [ 1562.566226][T14031] should_fail_ex+0x412/0x560 [ 1562.566256][T14031] should_failslab+0xa8/0x100 [ 1562.566280][T14031] __kmalloc_cache_noprof+0x88/0x660 [ 1562.566314][T14031] ? tcx_link_attach+0x162/0x860 [ 1562.566343][T14031] tcx_link_attach+0x162/0x860 [ 1562.566372][T14031] ? __pfx_tcx_link_attach+0x10/0x10 [ 1562.566392][T14031] ? __fget_files+0x2a/0x420 [ 1562.566424][T14031] ? __fget_files+0x3a0/0x420 [ 1562.566450][T14031] ? __fget_files+0x2a/0x420 [ 1562.566480][T14031] ? bpf_prog_attach_check_attach_type+0x1e5/0x540 [ 1562.566511][T14031] link_create+0x528/0x850 [ 1562.566539][T14031] __sys_bpf+0x468/0x950 [ 1562.566574][T14031] ? __pfx___sys_bpf+0x10/0x10 [ 1562.566629][T14031] ? ksys_write+0x242/0x270 [ 1562.566663][T14031] ? __pfx_ksys_write+0x10/0x10 [ 1562.566700][T14031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.566723][T14031] __x64_sys_bpf+0x7c/0x90 [ 1562.566754][T14031] do_syscall_64+0x174/0x580 [ 1562.566784][T14031] ? trace_irq_disable+0x3b/0x140 [ 1562.566817][T14031] ? clear_bhb_loop+0x40/0x90 [ 1562.566843][T14031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.566865][T14031] RIP: 0033:0x7f9cec99ce59 [ 1562.566884][T14031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1562.566902][T14031] RSP: 002b:00007f9ced93f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1562.566925][T14031] RAX: ffffffffffffffda RBX: 00007f9cecc15fa0 RCX: 00007f9cec99ce59 [ 1562.566941][T14031] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 000000000000001c [ 1562.566955][T14031] RBP: 00007f9ced93f090 R08: 0000000000000000 R09: 0000000000000000 [ 1562.566968][T14031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1562.566982][T14031] R13: 00007f9cecc16038 R14: 00007f9cecc15fa0 R15: 00007ffda88ee818 [ 1562.567018][T14031] [ 1562.880366][T14033] netlink: 'syz.0.11816': attribute type 1 has an invalid length. [ 1562.956827][T13887] Set syz1 is full, maxelem 65536 reached [ 1563.008219][T14040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11818'. [ 1563.052751][T14040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11818'. [ 1563.073997][T14041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11818'. [ 1563.104365][T14047] FAULT_INJECTION: forcing a failure. [ 1563.104365][T14047] name failslab, interval 1, probability 0, space 0, times 0 [ 1563.105113][T14048] netlink: 'syz.0.11816': attribute type 3 has an invalid length. [ 1563.130996][T14047] CPU: 0 UID: 0 PID: 14047 Comm: syz.4.11819 Not tainted syzkaller #0 PREEMPT(full) [ 1563.131024][T14047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1563.131038][T14047] Call Trace: [ 1563.131047][T14047] [ 1563.131057][T14047] dump_stack_lvl+0xe8/0x150 [ 1563.131087][T14047] should_fail_ex+0x412/0x560 [ 1563.131117][T14047] should_failslab+0xa8/0x100 [ 1563.131146][T14047] ? alloc_empty_file+0x5b/0x1d0 [ 1563.131172][T14047] kmem_cache_alloc_noprof+0x87/0x650 [ 1563.131212][T14047] alloc_empty_file+0x5b/0x1d0 [ 1563.131238][T14047] alloc_file_pseudo+0x155/0x240 [ 1563.131269][T14047] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1563.131310][T14047] anon_inode_getfd+0xc8/0x1f0 [ 1563.131379][T14047] btf_new_fd+0xa41/0xd40 [ 1563.131417][T14047] ? __pfx_btf_new_fd+0x10/0x10 [ 1563.131445][T14047] ? bpf_token_put+0x143/0x160 [ 1563.131469][T14047] ? bpf_btf_load+0x126/0x190 [ 1563.131494][T14047] __sys_bpf+0x4e5/0x950 [ 1563.131529][T14047] ? __pfx___sys_bpf+0x10/0x10 [ 1563.131578][T14047] ? ksys_write+0x242/0x270 [ 1563.131612][T14047] ? __pfx_ksys_write+0x10/0x10 [ 1563.131647][T14047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.131671][T14047] __x64_sys_bpf+0x7c/0x90 [ 1563.131702][T14047] do_syscall_64+0x174/0x580 [ 1563.131725][T14047] ? trace_irq_disable+0x3b/0x140 [ 1563.131756][T14047] ? clear_bhb_loop+0x40/0x90 [ 1563.131782][T14047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.131804][T14047] RIP: 0033:0x7f0c4f79ce59 [ 1563.131825][T14047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1563.131844][T14047] RSP: 002b:00007f0c5066e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1563.131867][T14047] RAX: ffffffffffffffda RBX: 00007f0c4fa15fa0 RCX: 00007f0c4f79ce59 [ 1563.131883][T14047] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 1563.131898][T14047] RBP: 00007f0c5066e090 R08: 0000000000000000 R09: 0000000000000000 [ 1563.131911][T14047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1563.131924][T14047] R13: 00007f0c4fa16038 R14: 00007f0c4fa15fa0 R15: 00007ffd57b45f98 [ 1563.131960][T14047] [ 1563.150458][T14048] netlink: 3 bytes leftover after parsing attributes in process `syz.0.11816'. [ 1563.467934][T14055] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11822'. [ 1563.503357][T14057] netlink: 'syz.4.11823': attribute type 4 has an invalid length. [ 1563.694535][T14068] tipc: Enabling of bearer rejected, already enabled [ 1563.704059][T14068] syz_tun: left allmulticast mode [ 1563.822018][T14072] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 1563.844752][T14070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11828'. [ 1564.110758][T14091] FAULT_INJECTION: forcing a failure. [ 1564.110758][T14091] name failslab, interval 1, probability 0, space 0, times 0 [ 1564.174637][T14091] CPU: 1 UID: 0 PID: 14091 Comm: syz.4.11836 Not tainted syzkaller #0 PREEMPT(full) [ 1564.174668][T14091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1564.174682][T14091] Call Trace: [ 1564.174691][T14091] [ 1564.174700][T14091] dump_stack_lvl+0xe8/0x150 [ 1564.174730][T14091] should_fail_ex+0x412/0x560 [ 1564.174759][T14091] should_failslab+0xa8/0x100 [ 1564.174785][T14091] __kmalloc_cache_noprof+0x88/0x660 [ 1564.174818][T14091] ? sctp_datamsg_from_user+0x88/0xef0 [ 1564.174856][T14091] sctp_datamsg_from_user+0x88/0xef0 [ 1564.174889][T14091] ? __sk_mem_raise_allocated+0x290/0x1290 [ 1564.174918][T14091] ? __genradix_ptr+0x1e1/0x220 [ 1564.174954][T14091] ? sctp_primitive_ASSOCIATE+0x95/0xc0 [ 1564.174985][T14091] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 1564.175008][T14091] ? __asan_memcpy+0x40/0x70 [ 1564.175043][T14091] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 1564.175081][T14091] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1564.175105][T14091] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1564.175138][T14091] ? __local_bh_enable_ip+0xd0/0x130 [ 1564.175159][T14091] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1564.175198][T14091] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1564.175230][T14091] sctp_sendmsg+0x1b85/0x2c50 [ 1564.175271][T14091] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1564.175298][T14091] ? aa_sk_perm+0x6d5/0x900 [ 1564.175337][T14091] ? __pfx_aa_sk_perm+0x10/0x10 [ 1564.175371][T14091] ? sock_rps_record_flow+0x19/0x350 [ 1564.175407][T14091] ? inet_sendmsg+0x2f4/0x370 [ 1564.175441][T14091] ____sys_sendmsg+0x80a/0x9f0 [ 1564.175477][T14091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1564.175513][T14091] ? import_iovec+0x73/0xa0 [ 1564.175543][T14091] ___sys_sendmsg+0x2a5/0x360 [ 1564.175566][T14091] ? __lock_acquire+0x6b5/0x2cf0 [ 1564.175595][T14091] ? __pfx____sys_sendmsg+0x10/0x10 [ 1564.175626][T14091] ? kstrtouint+0x6e/0xe0 [ 1564.175688][T14091] ? __fget_files+0x2a/0x420 [ 1564.175715][T14091] ? __fget_files+0x3a0/0x420 [ 1564.175753][T14091] __sys_sendmmsg+0x27c/0x4e0 [ 1564.175784][T14091] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1564.175806][T14091] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1564.175860][T14091] ? ksys_write+0x242/0x270 [ 1564.175894][T14091] ? __pfx_ksys_write+0x10/0x10 [ 1564.175934][T14091] __x64_sys_sendmmsg+0xa0/0xc0 [ 1564.175960][T14091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.175983][T14091] do_syscall_64+0x174/0x580 [ 1564.176009][T14091] ? trace_irq_disable+0x3b/0x140 [ 1564.176041][T14091] ? clear_bhb_loop+0x40/0x90 [ 1564.176077][T14091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.176099][T14091] RIP: 0033:0x7f0c4f79ce59 [ 1564.176121][T14091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1564.176140][T14091] RSP: 002b:00007f0c5066e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1564.176163][T14091] RAX: ffffffffffffffda RBX: 00007f0c4fa15fa0 RCX: 00007f0c4f79ce59 [ 1564.176188][T14091] RDX: 0000000000000002 RSI: 0000200000000d00 RDI: 0000000000000003 [ 1564.176202][T14091] RBP: 00007f0c5066e090 R08: 0000000000000000 R09: 0000000000000000 [ 1564.176214][T14091] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000002 [ 1564.176228][T14091] R13: 00007f0c4fa16038 R14: 00007f0c4fa15fa0 R15: 00007ffd57b45f98 [ 1564.176265][T14091] [ 1564.600259][T14106] netlink: 'syz.2.11837': attribute type 1 has an invalid length. [ 1564.637475][T14106] 8021q: adding VLAN 0 to HW filter on device bond77 [ 1564.654322][T14106] netlink: 'syz.2.11837': attribute type 13 has an invalid length. [ 1564.871021][T14117] bridge0: port 2(syz_tun) entered blocking state [ 1564.910060][T14117] bridge0: port 2(syz_tun) entered disabled state [ 1564.954259][T14117] syz_tun: entered allmulticast mode [ 1564.962770][T14118] xt_TCPMSS: Only works on TCP SYN packets [ 1564.973471][T14117] syz_tun: entered promiscuous mode [ 1564.981699][T14117] bridge0: port 2(syz_tun) entered blocking state [ 1564.988337][T14117] bridge0: port 2(syz_tun) entered forwarding state [ 1565.009421][T14120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11841'. [ 1565.575723][T14122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11842'. [ 1565.645248][T14092] ±ÿ speed is unknown, defaulting to 1000 [ 1565.762570][T14122] 8021q: adding VLAN 0 to HW filter on device bond75 [ 1565.811227][T14123] bond75: entered promiscuous mode [ 1565.817969][T14123] bond75: entered allmulticast mode [ 1565.828154][T14123] 8021q: adding VLAN 0 to HW filter on device bond75 [ 1565.835673][T14131] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11844'. [ 1565.842598][T14123] team0: Port device bond75 added [ 1565.855130][T14092] ip6tnl0 speed is unknown, defaulting to 1000 [ 1565.868247][T14125] bond74: (slave team_slave_1): Releasing backup interface [ 1565.894228][T14125] team_slave_1: left allmulticast mode [ 1565.914222][T14125] team_slave_1: entered allmulticast mode [ 1565.922200][T14125] bond75: (slave team_slave_1): Enslaving as an active interface with an up link [ 1566.008972][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1566.109697][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11847'. [ 1566.119638][T14140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11847'. [ 1566.294980][T14143] syzkaller1: entered promiscuous mode [ 1566.307127][T14143] syzkaller1: entered allmulticast mode [ 1566.454908][T14150] netlink: 173 bytes leftover after parsing attributes in process `syz.2.11852'. [ 1566.634638][T14159] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11854'. [ 1566.837896][T14169] FAULT_INJECTION: forcing a failure. [ 1566.837896][T14169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1566.876197][T14169] CPU: 0 UID: 0 PID: 14169 Comm: syz.0.11857 Not tainted syzkaller #0 PREEMPT(full) [ 1566.876228][T14169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1566.876242][T14169] Call Trace: [ 1566.876251][T14169] [ 1566.876260][T14169] dump_stack_lvl+0xe8/0x150 [ 1566.876293][T14169] should_fail_ex+0x412/0x560 [ 1566.876324][T14169] _copy_from_iter+0x1d3/0x1670 [ 1566.876353][T14169] ? rcu_is_watching+0x15/0xb0 [ 1566.876386][T14169] ? __pfx__copy_from_iter+0x10/0x10 [ 1566.876419][T14169] ? netlink_sendmsg+0x650/0xb40 [ 1566.876445][T14169] ? skb_put+0x11b/0x210 [ 1566.876472][T14169] netlink_sendmsg+0x6c0/0xb40 [ 1566.876513][T14169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1566.876542][T14169] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1566.876578][T14169] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1566.876611][T14169] ____sys_sendmsg+0x972/0x9f0 [ 1566.876636][T14169] ? __might_fault+0xaf/0x130 [ 1566.876672][T14169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1566.876707][T14169] ? import_iovec+0x73/0xa0 [ 1566.876736][T14169] ___sys_sendmsg+0x2a5/0x360 [ 1566.876760][T14169] ? __lock_acquire+0x6b5/0x2cf0 [ 1566.876788][T14169] ? __pfx____sys_sendmsg+0x10/0x10 [ 1566.876853][T14169] ? __fget_files+0x2a/0x420 [ 1566.876879][T14169] ? __fget_files+0x3a0/0x420 [ 1566.876918][T14169] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1566.876954][T14169] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1566.876991][T14169] ? __pfx_ksys_write+0x10/0x10 [ 1566.877032][T14169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.877057][T14169] do_syscall_64+0x174/0x580 [ 1566.877081][T14169] ? trace_irq_disable+0x3b/0x140 [ 1566.877113][T14169] ? clear_bhb_loop+0x40/0x90 [ 1566.877140][T14169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.877162][T14169] RIP: 0033:0x7f52fa99ce59 [ 1566.877187][T14169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1566.877207][T14169] RSP: 002b:00007f52fb7a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1566.877233][T14169] RAX: ffffffffffffffda RBX: 00007f52fac15fa0 RCX: 00007f52fa99ce59 [ 1566.877249][T14169] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1566.877263][T14169] RBP: 00007f52fb7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1566.877277][T14169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1566.877290][T14169] R13: 00007f52fac16038 R14: 00007f52fac15fa0 R15: 00007ffd4eeb6af8 [ 1566.877326][T14169] [ 1567.159226][T14174] netlink: 'syz.4.11859': attribute type 4 has an invalid length. [ 1567.403019][T14178] Bluetooth: MGMT ver 1.23 [ 1567.481650][T14183] netlink: 'syz.4.11861': attribute type 10 has an invalid length. [ 1567.710690][T14190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11865'. [ 1567.823753][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11858'. [ 1567.829612][T14140] ±ÿ speed is unknown, defaulting to 1000 [ 1567.880266][T14140] ip6tnl0 speed is unknown, defaulting to 1000 [ 1567.883340][T14171] ±ÿ speed is unknown, defaulting to 1000 [ 1567.902712][T14197] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11867'. [ 1568.261041][T14171] ip6tnl0 speed is unknown, defaulting to 1000 [ 1568.736775][T14202] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1569.067951][T14209] netlink: 'syz.0.11871': attribute type 4 has an invalid length. [ 1569.396946][T14215] netlink: 'syz.4.11873': attribute type 4 has an invalid length. [ 1570.256516][T14238] FAULT_INJECTION: forcing a failure. [ 1570.256516][T14238] name failslab, interval 1, probability 0, space 0, times 0 [ 1570.274773][T14238] CPU: 0 UID: 0 PID: 14238 Comm: syz.0.11880 Not tainted syzkaller #0 PREEMPT(full) [ 1570.274801][T14238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1570.274828][T14238] Call Trace: [ 1570.274836][T14238] [ 1570.274845][T14238] dump_stack_lvl+0xe8/0x150 [ 1570.274875][T14238] should_fail_ex+0x412/0x560 [ 1570.274904][T14238] should_failslab+0xa8/0x100 [ 1570.274926][T14238] ? alloc_empty_file+0x5b/0x1d0 [ 1570.274952][T14238] kmem_cache_alloc_noprof+0x87/0x650 [ 1570.274990][T14238] alloc_empty_file+0x5b/0x1d0 [ 1570.275017][T14238] alloc_file_pseudo+0x155/0x240 [ 1570.275046][T14238] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1570.275098][T14238] anon_inode_getfile+0xc5/0x1a0 [ 1570.275123][T14238] bpf_link_prime+0xfc/0x220 [ 1570.275153][T14238] tcx_link_attach+0x1ec/0x860 [ 1570.275198][T14238] ? __pfx_tcx_link_attach+0x10/0x10 [ 1570.275217][T14238] ? __fget_files+0x2a/0x420 [ 1570.275248][T14238] ? __fget_files+0x3a0/0x420 [ 1570.275272][T14238] ? __fget_files+0x2a/0x420 [ 1570.275300][T14238] ? bpf_prog_attach_check_attach_type+0x1e5/0x540 [ 1570.275329][T14238] link_create+0x528/0x850 [ 1570.275354][T14238] __sys_bpf+0x468/0x950 [ 1570.275388][T14238] ? __pfx___sys_bpf+0x10/0x10 [ 1570.275437][T14238] ? ksys_write+0x242/0x270 [ 1570.275470][T14238] ? __pfx_ksys_write+0x10/0x10 [ 1570.275514][T14238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1570.275538][T14238] __x64_sys_bpf+0x7c/0x90 [ 1570.275569][T14238] do_syscall_64+0x174/0x580 [ 1570.275591][T14238] ? trace_irq_disable+0x3b/0x140 [ 1570.275622][T14238] ? clear_bhb_loop+0x40/0x90 [ 1570.275649][T14238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1570.275671][T14238] RIP: 0033:0x7f52fa99ce59 [ 1570.275690][T14238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1570.275720][T14238] RSP: 002b:00007f52fb7a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1570.275741][T14238] RAX: ffffffffffffffda RBX: 00007f52fac15fa0 RCX: 00007f52fa99ce59 [ 1570.275755][T14238] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 000000000000001c [ 1570.275766][T14238] RBP: 00007f52fb7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1570.275778][T14238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1570.275789][T14238] R13: 00007f52fac16038 R14: 00007f52fac15fa0 R15: 00007ffd4eeb6af8 [ 1570.275821][T14238] [ 1570.873577][T14257] bond75: (slave team_slave_1): Releasing backup interface [ 1570.901633][T14257] team_slave_1: left allmulticast mode [ 1571.135285][T14271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11891'. [ 1571.275438][T14271] 8021q: adding VLAN 0 to HW filter on device bond78 [ 1571.361404][T14276] bond78: entered promiscuous mode [ 1571.400412][T14276] bond78: entered allmulticast mode [ 1571.431002][T14276] 8021q: adding VLAN 0 to HW filter on device bond78 [ 1571.489837][T14276] team0: Port device bond78 added [ 1571.543717][T14280] bond76: (slave team_slave_1): Releasing backup interface [ 1571.589368][T14280] team_slave_1: left allmulticast mode [ 1571.652128][T14280] team_slave_1: entered allmulticast mode [ 1571.680127][T14280] bond78: (slave team_slave_1): Enslaving as an active interface with an up link [ 1571.809457][T14262] ±ÿ speed is unknown, defaulting to 1000 [ 1571.829455][T14262] ip6tnl0 speed is unknown, defaulting to 1000 [ 1571.904812][T14287] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1572.217739][T14299] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11901'. [ 1572.385096][T14302] tipc: Enabling of bearer rejected, already enabled [ 1572.480451][T14306] bond76: entered promiscuous mode [ 1572.486897][T14306] 8021q: adding VLAN 0 to HW filter on device bond76 [ 1572.564610][T14311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11906'. [ 1572.621940][T14312] bridge39: entered promiscuous mode [ 1572.640637][T14312] bond76: (slave bridge39): Enslaving as an active interface with an up link [ 1573.291633][T14330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11911'. [ 1573.315574][T14330] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11911'. [ 1573.382181][T14337] netlink: 173 bytes leftover after parsing attributes in process `syz.1.11913'. [ 1573.554241][T14346] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1573.745694][T14359] FAULT_INJECTION: forcing a failure. [ 1573.745694][T14359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1573.783328][T14359] CPU: 1 UID: 0 PID: 14359 Comm: syz.0.11922 Not tainted syzkaller #0 PREEMPT(full) [ 1573.783358][T14359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1573.783370][T14359] Call Trace: [ 1573.783378][T14359] [ 1573.783385][T14359] dump_stack_lvl+0xe8/0x150 [ 1573.783412][T14359] should_fail_ex+0x412/0x560 [ 1573.783436][T14359] _copy_from_user+0x2d/0xb0 [ 1573.783458][T14359] ___sys_sendmsg+0x1c6/0x360 [ 1573.783478][T14359] ? get_pid_task+0x20/0x1f0 [ 1573.783505][T14359] ? __pfx____sys_sendmsg+0x10/0x10 [ 1573.783555][T14359] ? sb_end_write+0xe9/0x1c0 [ 1573.783584][T14359] ? __pfx_vfs_write+0x10/0x10 [ 1573.783616][T14359] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1573.783637][T14359] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1573.783664][T14359] ? __pfx_ksys_write+0x10/0x10 [ 1573.783696][T14359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.783716][T14359] do_syscall_64+0x174/0x580 [ 1573.783734][T14359] ? trace_irq_disable+0x3b/0x140 [ 1573.783760][T14359] ? clear_bhb_loop+0x40/0x90 [ 1573.783781][T14359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.783797][T14359] RIP: 0033:0x7f52fa99ce59 [ 1573.783813][T14359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1573.783826][T14359] RSP: 002b:00007f52fb7a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1573.783845][T14359] RAX: ffffffffffffffda RBX: 00007f52fac15fa0 RCX: 00007f52fa99ce59 [ 1573.783857][T14359] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c [ 1573.783868][T14359] RBP: 00007f52fb7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1573.783878][T14359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1573.783888][T14359] R13: 00007f52fac16038 R14: 00007f52fac15fa0 R15: 00007ffd4eeb6af8 [ 1573.783914][T14359] [ 1574.001627][T14361] FAULT_INJECTION: forcing a failure. [ 1574.001627][T14361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1574.024083][T14361] CPU: 0 UID: 0 PID: 14361 Comm: syz.4.11926 Not tainted syzkaller #0 PREEMPT(full) [ 1574.024112][T14361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1574.024125][T14361] Call Trace: [ 1574.024134][T14361] [ 1574.024143][T14361] dump_stack_lvl+0xe8/0x150 [ 1574.024174][T14361] should_fail_ex+0x412/0x560 [ 1574.024204][T14361] _copy_from_user+0x2d/0xb0 [ 1574.024231][T14361] generic_map_update_batch+0x648/0x990 [ 1574.024269][T14361] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1574.024296][T14361] ? __fget_files+0x2a/0x420 [ 1574.024331][T14361] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1574.024357][T14361] bpf_map_do_batch+0x39b/0x630 [ 1574.024387][T14361] __sys_bpf+0x7c1/0x950 [ 1574.024421][T14361] ? __pfx___sys_bpf+0x10/0x10 [ 1574.024471][T14361] ? ksys_write+0x242/0x270 [ 1574.024506][T14361] ? __pfx_ksys_write+0x10/0x10 [ 1574.024543][T14361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.024567][T14361] __x64_sys_bpf+0x7c/0x90 [ 1574.024598][T14361] do_syscall_64+0x174/0x580 [ 1574.024621][T14361] ? trace_irq_disable+0x3b/0x140 [ 1574.024660][T14361] ? clear_bhb_loop+0x40/0x90 [ 1574.024687][T14361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.024708][T14361] RIP: 0033:0x7f0c4f79ce59 [ 1574.024728][T14361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1574.024748][T14361] RSP: 002b:00007f0c5066e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1574.024772][T14361] RAX: ffffffffffffffda RBX: 00007f0c4fa15fa0 RCX: 00007f0c4f79ce59 [ 1574.024787][T14361] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 1574.024802][T14361] RBP: 00007f0c5066e090 R08: 0000000000000000 R09: 0000000000000000 [ 1574.024816][T14361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1574.024829][T14361] R13: 00007f0c4fa16038 R14: 00007f0c4fa15fa0 R15: 00007ffd57b45f98 [ 1574.024865][T14361] [ 1574.717657][T14399] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.745287][T14399] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1574.825950][T14399] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.846266][T14399] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1574.926220][T14399] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.937891][T14399] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1575.019017][T14399] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.044269][T14399] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1575.216227][T14412] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1575.367730][ T7223] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.379428][ T7223] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1575.442626][ T9147] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.460375][ T9147] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1575.543650][ T9147] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.562405][ T9147] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1575.572235][ T9147] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.581114][ T9147] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1575.756898][T14430] netlink: 'syz.1.11952': attribute type 39 has an invalid length. [ 1575.770052][T14437] netlink: 'syz.0.11955': attribute type 11 has an invalid length. [ 1575.792424][T14436] netlink: 'syz.4.11951': attribute type 1 has an invalid length. [ 1576.252442][T14455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11960'. [ 1576.396722][T14461] netlink: 'syz.2.11961': attribute type 1 has an invalid length. [ 1576.419547][T14461] netlink: 244 bytes leftover after parsing attributes in process `syz.2.11961'. [ 1576.662569][T14468] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20000 [ 1576.682292][T14470] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11964'. [ 1577.083088][T14485] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1577.410372][T14506] pim6reg: entered allmulticast mode [ 1577.850114][T14527] netlink: 180 bytes leftover after parsing attributes in process `syz.0.11984'. [ 1577.870116][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11984'. [ 1577.920370][T14527] bridge0: entered promiscuous mode [ 1577.938776][T14527] 8021q: adding VLAN 0 to HW filter on device team0 [ 1577.985386][T14527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1578.295935][T14527] veth1_vlan: left promiscuous mode [ 1578.309862][T14527] veth0_vlan: left promiscuous mode [ 1578.327188][T14527] veth0_vlan: entered promiscuous mode [ 1578.347870][T14527] veth1_vlan: entered promiscuous mode [ 1578.393592][T14527] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1578.523388][T30855] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.545047][T30855] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.632971][T30855] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.660110][T30855] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.694900][T14547] FAULT_INJECTION: forcing a failure. [ 1578.694900][T14547] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.757329][T14547] CPU: 0 UID: 0 PID: 14547 Comm: syz.3.11989 Not tainted syzkaller #0 PREEMPT(full) [ 1578.757361][T14547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1578.757376][T14547] Call Trace: [ 1578.757386][T14547] [ 1578.757397][T14547] dump_stack_lvl+0xe8/0x150 [ 1578.757430][T14547] should_fail_ex+0x412/0x560 [ 1578.757463][T14547] should_failslab+0xa8/0x100 [ 1578.757491][T14547] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1578.757526][T14547] ? __alloc_skb+0x186/0x7d0 [ 1578.757549][T14547] ? __alloc_skb+0x1d0/0x7d0 [ 1578.757570][T14547] ? __local_bh_enable_ip+0xd0/0x130 [ 1578.757603][T14547] __alloc_skb+0x1d0/0x7d0 [ 1578.757640][T14547] pfkey_sendmsg+0x212/0x1120 [ 1578.757677][T14547] ? unwind_next_frame+0xa6/0x2550 [ 1578.757724][T14547] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1578.757772][T14547] ? aa_sk_perm+0x6d5/0x900 [ 1578.757817][T14547] ? __pfx_aa_sk_perm+0x10/0x10 [ 1578.757848][T14547] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1578.757894][T14547] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1578.757931][T14547] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1578.757968][T14547] ____sys_sendmsg+0x972/0x9f0 [ 1578.757997][T14547] ? __might_fault+0xaf/0x130 [ 1578.758042][T14547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1578.758082][T14547] ? import_iovec+0x73/0xa0 [ 1578.758115][T14547] ___sys_sendmsg+0x2a5/0x360 [ 1578.758142][T14547] ? __lock_acquire+0x6b5/0x2cf0 [ 1578.758174][T14547] ? __pfx____sys_sendmsg+0x10/0x10 [ 1578.758247][T14547] ? __fget_files+0x2a/0x420 [ 1578.758277][T14547] ? __fget_files+0x3a0/0x420 [ 1578.758320][T14547] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1578.758353][T14547] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1578.758394][T14547] ? __pfx_ksys_write+0x10/0x10 [ 1578.758441][T14547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.758469][T14547] do_syscall_64+0x174/0x580 [ 1578.758494][T14547] ? trace_irq_disable+0x3b/0x140 [ 1578.758530][T14547] ? clear_bhb_loop+0x40/0x90 [ 1578.758561][T14547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.758585][T14547] RIP: 0033:0x7fd9bdd9ce59 [ 1578.758611][T14547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1578.758631][T14547] RSP: 002b:00007fd9bebcb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1578.758657][T14547] RAX: ffffffffffffffda RBX: 00007fd9be015fa0 RCX: 00007fd9bdd9ce59 [ 1578.758674][T14547] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b [ 1578.758690][T14547] RBP: 00007fd9bebcb090 R08: 0000000000000000 R09: 0000000000000000 [ 1578.758705][T14547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1578.758720][T14547] R13: 00007fd9be016038 R14: 00007fd9be015fa0 R15: 00007ffc6b1ca548 [ 1578.758769][T14547] [ 1578.774156][T14553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11992'. [ 1579.143592][T14554] bond78: (slave team_slave_1): Releasing backup interface [ 1579.152379][T14560] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1579.167950][T14554] team_slave_1: left allmulticast mode [ 1579.225800][T14553] 8021q: adding VLAN 0 to HW filter on device bond79 [ 1579.443620][T14570] sctp: [Deprecated]: syz.0.11999 (pid 14570) Use of int in max_burst socket option. [ 1579.443620][T14570] Use struct sctp_assoc_value instead [ 1579.495899][T14575] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1579.956336][T14597] netlink: 'syz.4.12009': attribute type 58 has an invalid length. [ 1579.997342][T14597] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12009'. [ 1580.008182][T14600] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12010'. [ 1580.022440][T14601] netlink: 88 bytes leftover after parsing attributes in process `syz.4.12009'. [ 1580.597156][T14624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12017'. [ 1580.621057][T14626] netlink: 'syz.1.12019': attribute type 3 has an invalid length. [ 1581.302457][T14630] __nla_validate_parse: 2 callbacks suppressed [ 1581.302483][T14630] netlink: 84 bytes leftover after parsing attributes in process `syz.3.12020'. [ 1581.459757][T14657] syzkaller1: entered promiscuous mode [ 1581.472966][T14657] syzkaller1: entered allmulticast mode [ 1581.481732][T14661] FAULT_INJECTION: forcing a failure. [ 1581.481732][T14661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1581.499094][T14661] CPU: 1 UID: 0 PID: 14661 Comm: syz.4.12031 Not tainted syzkaller #0 PREEMPT(full) [ 1581.499138][T14661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1581.499154][T14661] Call Trace: [ 1581.499164][T14661] [ 1581.499175][T14661] dump_stack_lvl+0xe8/0x150 [ 1581.499208][T14661] should_fail_ex+0x412/0x560 [ 1581.499242][T14661] _copy_from_user+0x2d/0xb0 [ 1581.499274][T14661] get_user_ifreq+0x6b/0x180 [ 1581.499307][T14661] sock_ioctl+0x704/0x7f0 [ 1581.499340][T14661] ? __pfx_sock_ioctl+0x10/0x10 [ 1581.499374][T14661] ? __fget_files+0x3a0/0x420 [ 1581.499404][T14661] ? __fget_files+0x2a/0x420 [ 1581.499438][T14661] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1581.499474][T14661] ? __pfx_sock_ioctl+0x10/0x10 [ 1581.499506][T14661] __se_sys_ioctl+0xfc/0x170 [ 1581.499545][T14661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.499573][T14661] do_syscall_64+0x174/0x580 [ 1581.499599][T14661] ? trace_irq_disable+0x3b/0x140 [ 1581.499638][T14661] ? clear_bhb_loop+0x40/0x90 [ 1581.499666][T14661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.499689][T14661] RIP: 0033:0x7f0c4f79ce59 [ 1581.499710][T14661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1581.499729][T14661] RSP: 002b:00007f0c5066e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1581.499753][T14661] RAX: ffffffffffffffda RBX: 00007f0c4fa15fa0 RCX: 00007f0c4f79ce59 [ 1581.499770][T14661] RDX: 0000200000000580 RSI: 00000000000089f6 RDI: 0000000000000003 [ 1581.499785][T14661] RBP: 00007f0c5066e090 R08: 0000000000000000 R09: 0000000000000000 [ 1581.499799][T14661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1581.499813][T14661] R13: 00007f0c4fa16038 R14: 00007f0c4fa15fa0 R15: 00007ffd57b45f98 [ 1581.499854][T14661] [ 1581.806604][T14664] FAULT_INJECTION: forcing a failure. [ 1581.806604][T14664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1581.825040][T14664] CPU: 0 UID: 0 PID: 14664 Comm: syz.3.12033 Not tainted syzkaller #0 PREEMPT(full) [ 1581.825070][T14664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1581.825084][T14664] Call Trace: [ 1581.825093][T14664] [ 1581.825102][T14664] dump_stack_lvl+0xe8/0x150 [ 1581.825133][T14664] should_fail_ex+0x412/0x560 [ 1581.825163][T14664] _copy_from_user+0x2d/0xb0 [ 1581.825191][T14664] generic_map_update_batch+0x648/0x990 [ 1581.825229][T14664] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1581.825257][T14664] ? __fget_files+0x2a/0x420 [ 1581.825292][T14664] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1581.825318][T14664] bpf_map_do_batch+0x39b/0x630 [ 1581.825347][T14664] __sys_bpf+0x7c1/0x950 [ 1581.825381][T14664] ? __pfx___sys_bpf+0x10/0x10 [ 1581.825430][T14664] ? ksys_write+0x242/0x270 [ 1581.825464][T14664] ? __pfx_ksys_write+0x10/0x10 [ 1581.825501][T14664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.825526][T14664] __x64_sys_bpf+0x7c/0x90 [ 1581.825556][T14664] do_syscall_64+0x174/0x580 [ 1581.825579][T14664] ? trace_irq_disable+0x3b/0x140 [ 1581.825610][T14664] ? clear_bhb_loop+0x40/0x90 [ 1581.825636][T14664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.825658][T14664] RIP: 0033:0x7fd9bdd9ce59 [ 1581.825678][T14664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1581.825696][T14664] RSP: 002b:00007fd9bebcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1581.825718][T14664] RAX: ffffffffffffffda RBX: 00007fd9be015fa0 RCX: 00007fd9bdd9ce59 [ 1581.825734][T14664] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 1581.825748][T14664] RBP: 00007fd9bebcb090 R08: 0000000000000000 R09: 0000000000000000 [ 1581.825765][T14664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1581.825778][T14664] R13: 00007fd9be016038 R14: 00007fd9be015fa0 R15: 00007ffc6b1ca548 [ 1581.825814][T14664] [ 1582.237186][T14677] netlink: 'syz.1.12039': attribute type 6 has an invalid length. [ 1582.672121][T14701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12046'. [ 1582.866535][T14705] netlink: 'syz.3.12047': attribute type 1 has an invalid length. [ 1583.226938][T14721] FAULT_INJECTION: forcing a failure. [ 1583.226938][T14721] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.239684][T14721] CPU: 0 UID: 0 PID: 14721 Comm: syz.2.12054 Not tainted syzkaller #0 PREEMPT(full) [ 1583.239712][T14721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1583.239725][T14721] Call Trace: [ 1583.239735][T14721] [ 1583.239745][T14721] dump_stack_lvl+0xe8/0x150 [ 1583.239775][T14721] should_fail_ex+0x412/0x560 [ 1583.239806][T14721] should_failslab+0xa8/0x100 [ 1583.239836][T14721] ? dst_alloc+0x105/0x170 [ 1583.239865][T14721] kmem_cache_alloc_noprof+0x87/0x650 [ 1583.239894][T14721] ? ip6_pol_route+0x160/0x13d0 [ 1583.239924][T14721] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1583.239947][T14721] dst_alloc+0x105/0x170 [ 1583.239979][T14721] ip6_pol_route+0xafb/0x13d0 [ 1583.240003][T14721] ? ip6_pol_route+0x160/0x13d0 [ 1583.240031][T14721] ? __pfx_ip6_pol_route+0x10/0x10 [ 1583.240063][T14721] ? unwind_next_frame+0xa6/0x2550 [ 1583.240101][T14721] fib6_rule_action+0x265/0xc00 [ 1583.240201][T14721] ? fib_rules_lookup+0x9b/0xea0 [ 1583.240258][T14721] ? __pfx_fib6_rule_action+0x10/0x10 [ 1583.240283][T14721] ? ip6_compressed_string+0xa79/0xb60 [ 1583.240322][T14721] ? fib6_rule_match+0x79a/0xa80 [ 1583.240343][T14721] ? __pfx_fib6_rule_action+0x10/0x10 [ 1583.240377][T14721] fib_rules_lookup+0x768/0xea0 [ 1583.240406][T14721] ? fib_rules_lookup+0x9b/0xea0 [ 1583.240443][T14721] ? __pfx_fib_rules_lookup+0x10/0x10 [ 1583.240467][T14721] ? l3mdev_update_flow+0x29/0x640 [ 1583.240493][T14721] ? l3mdev_update_flow+0x4d1/0x640 [ 1583.240522][T14721] fib6_rule_lookup+0x1a0/0x730 [ 1583.240546][T14721] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1583.240572][T14721] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1583.240598][T14721] ? ip6_route_output_flags+0x2e/0x5d0 [ 1583.240624][T14721] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1583.240668][T14721] ip6_route_output_flags+0x364/0x5d0 [ 1583.240694][T14721] ? ip6_route_output_flags+0x2e/0x5d0 [ 1583.240724][T14721] ip6_dst_lookup_tail+0x1c3/0x15a0 [ 1583.240757][T14721] ? txopt_get+0x79/0x3f0 [ 1583.240796][T14721] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 1583.240825][T14721] ? txopt_get+0x79/0x3f0 [ 1583.240853][T14721] ? txopt_get+0x79/0x3f0 [ 1583.240880][T14721] ? txopt_get+0x79/0x3f0 [ 1583.240911][T14721] ? txopt_get+0x343/0x3f0 [ 1583.240943][T14721] ? __pfx_txopt_get+0x10/0x10 [ 1583.240983][T14721] ip6_dst_lookup_flow+0x89/0x150 [ 1583.241017][T14721] rawv6_sendmsg+0xe1d/0x18e0 [ 1583.241064][T14721] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1583.241110][T14721] ? aa_sk_perm+0x6d5/0x900 [ 1583.241150][T14721] ? __pfx_aa_sk_perm+0x10/0x10 [ 1583.241185][T14721] ? sock_rps_record_flow+0x19/0x350 [ 1583.241221][T14721] ? inet_sendmsg+0x2f4/0x370 [ 1583.241251][T14721] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1583.241285][T14721] ____sys_sendmsg+0x80a/0x9f0 [ 1583.241322][T14721] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1583.241365][T14721] ? import_iovec+0x73/0xa0 [ 1583.241398][T14721] ___sys_sendmsg+0x2a5/0x360 [ 1583.241421][T14721] ? __lock_acquire+0x6b5/0x2cf0 [ 1583.241450][T14721] ? __pfx____sys_sendmsg+0x10/0x10 [ 1583.241482][T14721] ? kstrtouint+0x6e/0xe0 [ 1583.241547][T14721] ? __fget_files+0x2a/0x420 [ 1583.241573][T14721] ? __fget_files+0x3a0/0x420 [ 1583.241613][T14721] __sys_sendmmsg+0x27c/0x4e0 [ 1583.241646][T14721] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1583.241667][T14721] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1583.241723][T14721] ? ksys_write+0x242/0x270 [ 1583.241757][T14721] ? __pfx_ksys_write+0x10/0x10 [ 1583.241797][T14721] __x64_sys_sendmmsg+0xa0/0xc0 [ 1583.241822][T14721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.241845][T14721] do_syscall_64+0x174/0x580 [ 1583.241867][T14721] ? trace_irq_disable+0x3b/0x140 [ 1583.241899][T14721] ? clear_bhb_loop+0x40/0x90 [ 1583.241927][T14721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.241948][T14721] RIP: 0033:0x7f4e94b9ce59 [ 1583.241968][T14721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1583.241987][T14721] RSP: 002b:00007f4e92df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1583.242010][T14721] RAX: ffffffffffffffda RBX: 00007f4e94e15fa0 RCX: 00007f4e94b9ce59 [ 1583.242026][T14721] RDX: 0000000000000001 RSI: 0000200000004580 RDI: 0000000000000003 [ 1583.242040][T14721] RBP: 00007f4e92df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1583.242054][T14721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1583.242067][T14721] R13: 00007f4e94e16038 R14: 00007f4e94e15fa0 R15: 00007ffdcf8e2318 [ 1583.242105][T14721] [ 1583.991562][T14736] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1584.220906][T14746] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12062'. [ 1584.367319][T14724] ±ÿ speed is unknown, defaulting to 1000 [ 1584.377180][T14724] ip6tnl0 speed is unknown, defaulting to 1000 [ 1584.682368][T14766] FAULT_INJECTION: forcing a failure. [ 1584.682368][T14766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1584.727003][T14766] CPU: 1 UID: 0 PID: 14766 Comm: syz.1.12068 Not tainted syzkaller #0 PREEMPT(full) [ 1584.727033][T14766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1584.727046][T14766] Call Trace: [ 1584.727055][T14766] [ 1584.727065][T14766] dump_stack_lvl+0xe8/0x150 [ 1584.727096][T14766] should_fail_ex+0x412/0x560 [ 1584.727126][T14766] _copy_from_user+0x2d/0xb0 [ 1584.727154][T14766] ___sys_recvmsg+0x175/0x590 [ 1584.727188][T14766] ? __pfx____sys_recvmsg+0x10/0x10 [ 1584.727219][T14766] ? __fget_files+0x2a/0x420 [ 1584.727290][T14766] do_recvmmsg+0x334/0x800 [ 1584.727326][T14766] ? __pfx_do_recvmmsg+0x10/0x10 [ 1584.727366][T14766] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1584.727411][T14766] __x64_sys_recvmmsg+0x198/0x250 [ 1584.727441][T14766] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1584.727478][T14766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.727502][T14766] do_syscall_64+0x174/0x580 [ 1584.727523][T14766] ? trace_irq_disable+0x3b/0x140 [ 1584.727556][T14766] ? clear_bhb_loop+0x40/0x90 [ 1584.727582][T14766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.727604][T14766] RIP: 0033:0x7f9cec99ce59 [ 1584.727624][T14766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1584.727643][T14766] RSP: 002b:00007f9ced93f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1584.727666][T14766] RAX: ffffffffffffffda RBX: 00007f9cecc15fa0 RCX: 00007f9cec99ce59 [ 1584.727682][T14766] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000006 [ 1584.727697][T14766] RBP: 00007f9ced93f090 R08: 0000000000000000 R09: 0000000000000000 [ 1584.727711][T14766] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 1584.727725][T14766] R13: 00007f9cecc16038 R14: 00007f9cecc15fa0 R15: 00007ffda88ee818 [ 1584.727761][T14766] [ 1585.030796][T14770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12070'. [ 1585.040973][T14770] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12070'. [ 1585.224216][T14733] ±ÿ speed is unknown, defaulting to 1000 [ 1585.287495][T14733] ip6tnl0 speed is unknown, defaulting to 1000 [ 1585.709871][T14784] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1585.739396][T14784] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1585.953026][T14793] syzkaller1: entered promiscuous mode [ 1585.965514][T14793] syzkaller1: entered allmulticast mode [ 1586.231791][T14784] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1586.257295][T14784] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1588.416750][T14784] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1588.427264][T14784] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1588.507300][T14784] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1588.538404][T14784] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1588.559056][T14819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12080'. [ 1588.725326][T14819] 8021q: adding VLAN 0 to HW filter on device bond77 [ 1588.771236][T14825] bond77: entered promiscuous mode [ 1588.784573][T14825] bond77: entered allmulticast mode [ 1588.797637][T14825] 8021q: adding VLAN 0 to HW filter on device bond77 [ 1588.820468][T14825] team0: Port device bond77 added [ 1588.876387][T14828] team_slave_1: entered allmulticast mode [ 1588.894188][T14828] bond77: (slave team_slave_1): Enslaving as an active interface with an up link [ 1589.015070][ T7230] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1589.044964][ T7230] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1589.123557][T14841] FAULT_INJECTION: forcing a failure. [ 1589.123557][T14841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1589.160749][T14841] CPU: 1 UID: 0 PID: 14841 Comm: syz.4.12086 Not tainted syzkaller #0 PREEMPT(full) [ 1589.160780][T14841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1589.160794][T14841] Call Trace: [ 1589.160803][T14841] [ 1589.160813][T14841] dump_stack_lvl+0xe8/0x150 [ 1589.160847][T14841] should_fail_ex+0x412/0x560 [ 1589.160884][T14841] _copy_from_user+0x2d/0xb0 [ 1589.160912][T14841] sctp_setsockopt+0x1c4/0x12c0 [ 1589.160937][T14841] ? sock_common_setsockopt+0x36/0xc0 [ 1589.160969][T14841] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1589.161003][T14841] do_sock_setsockopt+0x17c/0x1b0 [ 1589.161032][T14841] __x64_sys_setsockopt+0x13d/0x1b0 [ 1589.161058][T14841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.161081][T14841] do_syscall_64+0x174/0x580 [ 1589.161103][T14841] ? trace_irq_disable+0x3b/0x140 [ 1589.161135][T14841] ? clear_bhb_loop+0x40/0x90 [ 1589.161162][T14841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.161183][T14841] RIP: 0033:0x7f0c4f79ce59 [ 1589.161203][T14841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1589.161221][T14841] RSP: 002b:00007f0c5066e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1589.161244][T14841] RAX: ffffffffffffffda RBX: 00007f0c4fa15fa0 RCX: 00007f0c4f79ce59 [ 1589.161259][T14841] RDX: 000000000000000d RSI: 0000000000000084 RDI: 0000000000000003 [ 1589.161272][T14841] RBP: 00007f0c5066e090 R08: 0000000000000008 R09: 0000000000000000 [ 1589.161285][T14841] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1589.161298][T14841] R13: 00007f0c4fa16038 R14: 00007f0c4fa15fa0 R15: 00007ffd57b45f98 [ 1589.161334][T14841] [ 1589.403968][T30855] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1589.413283][T30855] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1589.543032][T30855] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1589.601098][T30855] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1589.644809][ T7230] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1589.653283][ T7230] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1590.261319][T14884] mac80211_hwsim hwsim15 syzkaller0: Caught tx_queue_len zero misconfig [ 1590.394367][T14893] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20000 [ 1590.473608][T14898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12107'. [ 1590.631525][T14913] netlink: 'syz.4.12109': attribute type 2 has an invalid length. [ 1590.690138][T14917] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12112'. [ 1590.804611][T14919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12113'. [ 1591.396223][T14954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12125'. [ 1591.635225][T14968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12130'. [ 1591.661703][T14971] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12131'. [ 1592.566869][T15001] netlink: 244 bytes leftover after parsing attributes in process `syz.2.12139'. [ 1592.904218][T15013] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1592.963684][T15015] : entered promiscuous mode [ 1593.004580][T15017] syzkaller1: entered promiscuous mode [ 1593.027966][T15017] syzkaller1: entered allmulticast mode [ 1593.343309][T15029] netlink: 'syz.1.12150': attribute type 1 has an invalid length. [ 1593.369909][T15029] netlink: 88 bytes leftover after parsing attributes in process `syz.1.12150'. [ 1593.391246][T15029] netlink: 'syz.1.12150': attribute type 1 has an invalid length. [ 1593.401562][T15029] netlink: 634 bytes leftover after parsing attributes in process `syz.1.12150'. [ 1593.673569][T15051] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12158'. [ 1593.700471][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12158'. [ 1593.751203][T15058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12158'. [ 1593.857271][T15058] 8021q: adding VLAN 0 to HW filter on device bond90 [ 1593.874761][T15064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12156'. [ 1594.134199][T15069] netlink: 332 bytes leftover after parsing attributes in process `syz.4.12162'. [ 1594.148957][T15069] netlink: 'syz.4.12162': attribute type 9 has an invalid length. [ 1594.170474][T15069] netlink: 108 bytes leftover after parsing attributes in process `syz.4.12162'. [ 1594.189284][T15069] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12162'. [ 1594.205849][T15073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12163'. [ 1594.511745][T15085] openvswitch: netlink: Key 19 has unexpected len 12 expected 4 [ 1594.801517][T15096] bond77: (slave team_slave_1): Releasing backup interface [ 1594.821203][T15096] team_slave_1: left allmulticast mode [ 1594.957764][T15104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12176'. [ 1594.988029][T15104] netlink: 'syz.4.12176': attribute type 5 has an invalid length. [ 1595.010240][T15107] netlink: 'syz.4.12176': attribute type 9 has an invalid length. [ 1595.020450][T15104] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12176'. [ 1595.072477][T15104] geneve8: entered promiscuous mode [ 1595.085450][T15104] geneve8: entered allmulticast mode [ 1595.097304][ T7230] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 256 - 0 [ 1595.118361][ T7230] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 256 - 0 [ 1595.141352][ T7230] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 256 - 0 [ 1595.167844][ T7230] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 256 - 0 [ 1595.359900][T15120] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1595.459902][T15128] netlink: 'syz.3.12187': attribute type 1 has an invalid length. [ 1595.773454][T15147] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1596.818478][T15193] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1596.971948][T15196] 8021q: adding VLAN 0 to HW filter on device bond80 [ 1597.026061][T15196] bond80: entered promiscuous mode [ 1597.046935][T15196] bond80: entered allmulticast mode [ 1597.090413][T15196] 8021q: adding VLAN 0 to HW filter on device bond80 [ 1597.131171][T15196] team0: Port device bond80 added [ 1597.175148][T15203] team_slave_1: entered allmulticast mode [ 1597.201732][T15203] bond80: (slave team_slave_1): Enslaving as an active interface with an up link [ 1597.353830][T15209] veth1_to_team: entered promiscuous mode [ 1597.395277][T15209] veth1_to_team: left promiscuous mode [ 1597.410504][T15189] ±ÿ speed is unknown, defaulting to 1000 [ 1597.424104][T15189] ip6tnl0 speed is unknown, defaulting to 1000 [ 1597.546446][T15221] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 1597.600280][T15223] FAULT_INJECTION: forcing a failure. [ 1597.600280][T15223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1597.631648][T15223] CPU: 0 UID: 0 PID: 15223 Comm: syz.0.12220 Not tainted syzkaller #0 PREEMPT(full) [ 1597.631691][T15223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1597.631711][T15223] Call Trace: [ 1597.631720][T15223] [ 1597.631729][T15223] dump_stack_lvl+0xe8/0x150 [ 1597.631759][T15223] should_fail_ex+0x412/0x560 [ 1597.631788][T15223] _copy_from_user+0x2d/0xb0 [ 1597.631816][T15223] ___sys_sendmsg+0x1c6/0x360 [ 1597.631841][T15223] ? __lock_acquire+0x6b5/0x2cf0 [ 1597.631869][T15223] ? __pfx____sys_sendmsg+0x10/0x10 [ 1597.631898][T15223] ? kstrtouint+0x6e/0xe0 [ 1597.631956][T15223] ? __fget_files+0x2a/0x420 [ 1597.631983][T15223] ? __fget_files+0x3a0/0x420 [ 1597.632021][T15223] __sys_sendmmsg+0x27c/0x4e0 [ 1597.632053][T15223] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1597.632076][T15223] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1597.632140][T15223] ? ksys_write+0x242/0x270 [ 1597.632174][T15223] ? __pfx_ksys_write+0x10/0x10 [ 1597.632213][T15223] __x64_sys_sendmmsg+0xa0/0xc0 [ 1597.632238][T15223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.632261][T15223] do_syscall_64+0x174/0x580 [ 1597.632282][T15223] ? trace_irq_disable+0x3b/0x140 [ 1597.632315][T15223] ? clear_bhb_loop+0x40/0x90 [ 1597.632342][T15223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.632361][T15223] RIP: 0033:0x7f52fa99ce59 [ 1597.632381][T15223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1597.632399][T15223] RSP: 002b:00007f52fb7a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1597.632422][T15223] RAX: ffffffffffffffda RBX: 00007f52fac15fa0 RCX: 00007f52fa99ce59 [ 1597.632438][T15223] RDX: 0000000000000001 RSI: 0000200000003b80 RDI: 0000000000000003 [ 1597.632452][T15223] RBP: 00007f52fb7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1597.632466][T15223] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 1597.632479][T15223] R13: 00007f52fac16038 R14: 00007f52fac15fa0 R15: 00007ffd4eeb6af8 [ 1597.632515][T15223] [ 1599.103739][T15276] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1599.244104][T15278] __nla_validate_parse: 8 callbacks suppressed [ 1599.244129][T15278] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.12236'. [ 1599.384771][T15278] netlink: 'syz.3.12236': attribute type 10 has an invalid length. [ 1599.825835][T15284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12239'. [ 1599.851610][T15284] nbd: must specify a size in bytes for the device [ 1600.367991][T15276] ±ÿ speed is unknown, defaulting to 1000 [ 1600.394072][T15276] ip6tnl0 speed is unknown, defaulting to 1000 [ 1600.896929][T15317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12249'. [ 1600.920921][T15319] netlink: 'syz.2.12251': attribute type 29 has an invalid length. [ 1600.933720][T15321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12250'. [ 1600.985590][T15321] vlan6: entered promiscuous mode [ 1601.004359][T15321] .30ªî{X¹¦: entered promiscuous mode [ 1601.277893][T15342] netlink: 'syz.3.12255': attribute type 1 has an invalid length. [ 1601.325690][T15339] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12254'. [ 1601.364699][T15346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12255'. [ 1601.473396][T15342] bond85: option mode: invalid value (25) [ 1601.489463][T15342] bond85 (unregistering): Released all slaves [ 1601.745464][T15332] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1602.001923][T15358] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 1602.137092][T15364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12262'. [ 1602.293302][T15373] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12263'. [ 1602.345996][T15364] 8021q: adding VLAN 0 to HW filter on device bond85 [ 1602.403087][T15371] ±ÿ: entered promiscuous mode [ 1602.484926][T15371] tunl0: entered promiscuous mode [ 1602.524550][T15371] gre0: entered promiscuous mode [ 1602.563809][T15383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12265'. [ 1602.586586][T15371] gretap0: entered promiscuous mode [ 1602.643868][T15371] erspan0: left promiscuous mode [ 1602.664895][T15371] erspan0: entered promiscuous mode [ 1602.693121][T15371] ip_vti0: entered promiscuous mode [ 1602.706920][T15371] ip6_vti0: entered promiscuous mode [ 1602.718231][T15371] sit0: entered promiscuous mode [ 1602.731523][T15371] ip6tnl0: entered promiscuous mode [ 1602.741139][T15371] ip6gre0: entered promiscuous mode [ 1602.750535][T15371] syz_tun: entered promiscuous mode [ 1602.781269][T15371] ip6gretap0: entered promiscuous mode [ 1602.821808][T15371] bond0: entered promiscuous mode [ 1602.871213][T15371] team0: entered promiscuous mode [ 1602.887584][T15371] 8021q: adding VLAN 0 to HW filter on device team0 [ 1602.899321][T15371] nlmon0: entered promiscuous mode [ 1602.906290][T15371] batadv0: entered promiscuous mode [ 1602.922456][T15371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1602.933367][T15371] wg0: entered promiscuous mode [ 1602.941715][T15371] wg2: entered promiscuous mode [ 1602.949009][T15371] veth0_to_bridge: entered promiscuous mode [ 1602.956736][T15371] bridge_slave_0: entered promiscuous mode [ 1602.963708][T15371] veth1_to_bridge: entered promiscuous mode [ 1602.972350][T15371] bridge_slave_1: entered promiscuous mode [ 1602.980520][T15371] veth0_to_bond: entered promiscuous mode [ 1602.988304][T15371] ÿÿÿÿÿÿ: entered promiscuous mode [ 1602.995123][T15371] veth1_to_bond: entered promiscuous mode [ 1603.003867][T15371] bond_slave_1: entered promiscuous mode [ 1603.011072][T15371] veth1_to_team: entered promiscuous mode [ 1603.019624][T15371] xfrm0: entered promiscuous mode [ 1603.027906][T15371] veth0_to_hsr: entered promiscuous mode [ 1603.035777][T15371] hsr_slave_0: entered promiscuous mode [ 1603.042668][T15371] veth1_to_hsr: entered promiscuous mode [ 1603.051078][T15371] hsr_slave_1: entered promiscuous mode [ 1603.057823][T15371] veth1_virt_wifi: entered promiscuous mode [ 1603.068374][T15371] veth0_virt_wifi: entered promiscuous mode [ 1603.087283][T15371] geneve0: entered promiscuous mode [ 1603.094688][T15371] geneve1: entered promiscuous mode [ 1603.102615][T15371] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1603.110350][T15371] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1603.126552][T15372] bond85: entered promiscuous mode [ 1603.132267][T15372] bond85: entered allmulticast mode [ 1603.147142][T15368] bond84: (slave team_slave_1): Releasing backup interface [ 1603.155727][T15368] team_slave_1: left allmulticast mode [ 1603.173161][T15368] team_slave_1: entered allmulticast mode [ 1603.179865][T15368] bond85: (slave team_slave_1): Enslaving as an active interface with an up link [ 1603.190077][ T6459] ±ÿ speed is unknown, defaulting to 1000 [ 1603.197182][ T6459] syz2: Port: 1 Link ACTIVE [ 1603.274353][ T7219] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.395418][ T7219] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.419924][ T7230] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.430743][ T7230] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.528658][ C1] sched: DL replenish lagged too much [ 1638.587429][T10845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1638.698491][T10845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1638.719286][T10845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1638.763718][T10845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1638.788896][T10845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1640.013334][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1640.106459][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1640.129096][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1640.209838][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1640.323891][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1640.343484][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1640.358917][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1640.394805][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1640.432732][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1640.528995][T10845] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1640.979084][T15421] Bluetooth: hci5: command tx timeout [ 1641.099595][T15415] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1641.213647][T15415] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1641.248804][T15415] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1641.288915][T15415] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1641.318795][T15415] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1642.812704][T15415] Bluetooth: hci6: command tx timeout [ 1642.820412][ T5633] Bluetooth: hci7: command tx timeout [ 1643.050700][T15415] Bluetooth: hci5: command tx timeout [ 1643.173090][T15384] ±ÿ speed is unknown, defaulting to 1000 [ 1643.343520][T15384] ip6tnl0 speed is unknown, defaulting to 1000 [ 1645.289221][T15415] Bluetooth: hci6: command tx timeout [ 1645.294694][T15415] Bluetooth: hci7: command tx timeout [ 1645.303396][T15415] Bluetooth: hci5: command tx timeout [ 1647.369531][T10845] Bluetooth: hci5: command tx timeout [ 1647.375005][T10845] Bluetooth: hci7: command tx timeout [ 1647.380998][T15421] Bluetooth: hci6: command tx timeout [ 1648.343539][T15415] Bluetooth: hci8: command tx timeout [ 1648.491805][T15415] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1648.837188][T15415] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1648.859192][T15415] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1648.992206][T15415] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1649.022055][T15415] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1649.738919][T15421] Bluetooth: hci7: command tx timeout [ 1649.744390][T15421] Bluetooth: hci6: command tx timeout [ 1650.578648][T10845] Bluetooth: hci8: command tx timeout [ 1652.199328][T10845] Bluetooth: hci9: command tx timeout [ 1652.649005][T10845] Bluetooth: hci8: command tx timeout [ 1654.249596][T10845] Bluetooth: hci9: command tx timeout [ 1654.729420][T10845] Bluetooth: hci8: command tx timeout [ 1656.404056][T10845] Bluetooth: hci9: command tx timeout [ 1657.327934][ T5968] bridge0: port 2(syz_tun) entered disabled state [ 1658.527301][T10845] Bluetooth: hci9: command tx timeout [ 1659.338881][ T5968] syz_tun (unregistering): left allmulticast mode [ 1659.627889][ T5968] syz_tun (unregistering): left promiscuous mode [ 1659.658198][ T5968] bridge0: port 2(syz_tun) entered disabled state [ 1670.299303][T15400] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1679.668829][T15400] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.648970][T15400] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.909211][T15400] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.223656][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1691.259225][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1691.273598][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1691.336677][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1691.363053][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1693.689249][T10845] Bluetooth: hci0: command tx timeout [ 1694.053226][T15410] ±ÿ speed is unknown, defaulting to 1000 [ 1695.769274][T10845] Bluetooth: hci0: command tx timeout [ 1696.804600][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1696.865433][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1696.886837][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1696.984987][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1697.005327][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1697.877984][T15415] Bluetooth: hci0: command tx timeout [ 1698.015553][T15415] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1698.062478][T15415] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1698.099017][T15415] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1698.192259][T15415] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1698.221952][T15415] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1698.314915][T15400] dvmrp0: left allmulticast mode [ 1698.593135][T15400] veth1: left allmulticast mode [ 1699.789829][ T5633] Bluetooth: hci1: command tx timeout [ 1699.828537][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1700.091702][ T5633] Bluetooth: hci0: command tx timeout [ 1700.139112][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1700.228890][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1700.267676][ T5633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1700.293160][ T5633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1700.432923][ T5633] Bluetooth: hci3: command tx timeout [ 1701.464040][T10845] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1701.500619][T10845] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1701.526662][T10845] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1701.568929][T10845] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1701.593093][T10845] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1701.863128][T15415] Bluetooth: hci1: command tx timeout [ 1702.688184][T15415] Bluetooth: hci3: command tx timeout [ 1703.929099][T10845] Bluetooth: hci1: command tx timeout [ 1704.729365][T15415] Bluetooth: hci3: command tx timeout [ 1706.043138][T15415] Bluetooth: hci1: command tx timeout [ 1706.089017][T15415] Bluetooth: hci4: command tx timeout [ 1706.099807][ T5633] Bluetooth: hci10: command tx timeout [ 1707.019587][T15415] Bluetooth: hci3: command tx timeout [ 1708.169441][T15415] Bluetooth: hci10: command tx timeout [ 1708.187199][T15415] Bluetooth: hci4: command tx timeout [ 1710.249361][T15415] Bluetooth: hci4: command tx timeout [ 1710.260136][ T5633] Bluetooth: hci10: command tx timeout [ 1712.329584][T15415] Bluetooth: hci4: command tx timeout [ 1712.335055][T15415] Bluetooth: hci10: command tx timeout [ 1758.857045][T15415] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1758.928410][T15415] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1759.037583][T15415] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1759.153791][T15415] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1759.198885][T15415] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1761.819140][T15421] Bluetooth: hci2: command tx timeout [ 1763.219366][T15421] Bluetooth: hci6: command 0x0406 tx timeout [ 1763.226945][T15421] Bluetooth: hci5: command 0x0406 tx timeout [ 1763.249929][T15421] Bluetooth: hci7: command 0x0406 tx timeout [ 1763.858354][T15516] Bluetooth: hci2: command tx timeout [ 1766.063939][T15415] Bluetooth: hci2: command tx timeout [ 1766.723898][ T50] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1766.778879][ T50] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1766.799101][ T50] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1766.856041][ T50] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1766.895140][ T50] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1768.169245][T10845] Bluetooth: hci2: command tx timeout [ 1768.759689][T10845] Bluetooth: hci8: command 0x0406 tx timeout [ 1769.016401][T15516] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1769.038868][T15516] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1769.052159][T15516] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1769.299364][ T5633] Bluetooth: hci11: command tx timeout [ 1769.417860][T15516] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1769.448795][T15516] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1769.669924][T10845] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1769.692840][T10845] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1769.717188][T10845] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1769.745808][T10845] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1769.772801][T10845] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1771.005572][T10845] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1771.046036][T10845] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1771.068448][T10845] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1771.127259][T10845] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1771.152927][T10845] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1771.795074][T10845] Bluetooth: hci11: command tx timeout [ 1771.803765][T10845] Bluetooth: hci12: command tx timeout [ 1772.408995][T10845] Bluetooth: hci13: command tx timeout [ 1773.382948][T10845] Bluetooth: hci14: command tx timeout [ 1773.858740][T10845] Bluetooth: hci9: command 0x0406 tx timeout [ 1773.864862][T10845] Bluetooth: hci12: command tx timeout [ 1773.872256][T15516] Bluetooth: hci11: command tx timeout [ 1774.490593][T10845] Bluetooth: hci13: command tx timeout [ 1775.449289][T15415] Bluetooth: hci14: command tx timeout [ 1775.929116][T15415] Bluetooth: hci12: command tx timeout [ 1775.934686][T15415] Bluetooth: hci11: command tx timeout [ 1776.569554][T15415] Bluetooth: hci13: command tx timeout [ 1777.547624][T15415] Bluetooth: hci14: command tx timeout [ 1778.009279][T15415] Bluetooth: hci12: command tx timeout [ 1778.657389][T15415] Bluetooth: hci13: command tx timeout [ 1779.619684][T10845] Bluetooth: hci14: command tx timeout [ 1812.423950][T10845] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1812.452656][T10845] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1812.477584][T10845] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1812.538689][T10845] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1812.595136][T10845] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1814.431892][T15415] Bluetooth: hci0: command 0x0406 tx timeout [ 1814.758997][T15415] Bluetooth: hci15: command tx timeout [ 1816.815996][T15516] Bluetooth: hci15: command tx timeout [ 1818.909518][T15516] Bluetooth: hci15: command tx timeout [ 1819.910014][T15415] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1819.935963][T15415] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1819.958773][T15415] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1819.998801][T15415] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1820.032632][T15415] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1820.449982][T10845] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1820.979161][T10845] Bluetooth: hci15: command tx timeout [ 1821.223228][T10845] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1821.268848][T10845] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1821.792662][T10845] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1821.823379][T10845] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1822.359102][T15415] Bluetooth: hci16: command tx timeout [ 1824.419196][ T50] Bluetooth: hci16: command tx timeout [ 1824.738644][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 1824.745475][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 1824.758445][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 1825.689591][T15415] Bluetooth: hci17: command tx timeout [ 1826.493618][T15415] Bluetooth: hci16: command tx timeout [ 1827.779138][T15516] Bluetooth: hci17: command tx timeout [ 1829.509553][T15516] Bluetooth: hci16: command tx timeout [ 1829.770068][T15516] Bluetooth: hci10: command 0x0406 tx timeout [ 1829.849705][T15415] Bluetooth: hci17: command tx timeout [ 1829.860096][T10845] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1829.903658][T10845] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1830.031721][T10845] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1830.076808][T10845] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1830.098891][T10845] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1831.907375][T15516] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1831.932183][T15415] Bluetooth: hci17: command tx timeout [ 1831.946462][T15516] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1831.962174][T15516] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1831.999512][T15516] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1832.146015][T15516] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1832.334933][T15516] Bluetooth: hci18: command tx timeout [ 1834.427743][T15516] Bluetooth: hci18: command tx timeout [ 1834.489286][T15516] Bluetooth: hci19: command tx timeout [ 1836.489303][T15516] Bluetooth: hci18: command tx timeout [ 1836.569098][T15516] Bluetooth: hci19: command tx timeout [ 1838.569284][T15516] Bluetooth: hci18: command tx timeout [ 1838.649420][T15516] Bluetooth: hci19: command tx timeout [ 1840.777121][T15516] Bluetooth: hci19: command tx timeout [ 1845.039552][T15400] bond75 (unregistering): (slave bridge26): Releasing backup interface [ 1847.879313][ T31] INFO: task kworker/u8:2:36 blocked for more than 143 seconds. [ 1847.887026][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1848.529272][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1848.538554][ T31] task:kworker/u8:2 state:D stack:21208 pid:36 tgid:36 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1848.599084][ T31] Workqueue: events_unbound linkwatch_event [ 1848.623567][ T31] Call Trace: [ 1848.641245][ T31] [ 1848.644700][ T31] __schedule+0x1821/0x5740 [ 1848.654815][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1848.668882][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1848.691100][ T31] ? __pfx___schedule+0x10/0x10 [ 1848.756646][ T31] ? schedule+0x90/0x360 [ 1849.254560][ T31] schedule+0x164/0x360 [ 1849.312053][ T31] schedule_preempt_disabled+0x13/0x30 [ 1849.370715][ T31] __mutex_lock+0x7f7/0x1550 [ 1849.399506][ T31] ? __mutex_lock+0x608/0x1550 [ 1849.418807][ T31] ? linkwatch_event+0xe/0x60 [ 1849.440889][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1849.503188][ T31] ? process_scheduled_works+0xa70/0x1860 [ 1849.528622][ T31] ? process_scheduled_works+0xa70/0x1860 [ 1849.538106][ T31] linkwatch_event+0xe/0x60 [ 1849.558553][ T31] process_scheduled_works+0xb5d/0x1860 [ 1849.566995][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1849.588801][ T31] ? assign_work+0x3d5/0x5e0 [ 1849.596802][ T31] worker_thread+0xa53/0xfc0 [ 1849.618665][ T31] kthread+0x389/0x470 [ 1849.763560][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1849.807995][ T31] ? __pfx_kthread+0x10/0x10 [ 1849.817486][ T31] ret_from_fork+0x514/0xb70 [ 1849.828763][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1849.872639][ T31] ? __switch_to+0xc79/0x1410 [ 1849.905810][ T31] ? __pfx_kthread+0x10/0x10 [ 1849.917581][ T31] ret_from_fork_asm+0x1a/0x30 [ 1849.938825][ T31] [ 1849.942846][ T31] INFO: task dhcpcd:5293 blocked for more than 145 seconds. [ 1850.006127][ T31] Not tainted syzkaller #0 [ 1850.415306][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1850.438770][ T31] task:dhcpcd state:D stack:21368 pid:5293 tgid:5293 ppid:5292 task_flags:0x400140 flags:0x00080000 [ 1850.471267][ T31] Call Trace: [ 1850.481284][ T31] [ 1850.490948][ T31] __schedule+0x1821/0x5740 [ 1850.503931][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1850.518734][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1850.531907][ T31] ? stack_depot_save_flags+0x33/0x810 [ 1850.548756][ T31] ? __pfx___schedule+0x10/0x10 [ 1850.556182][ T31] ? schedule+0x90/0x360 [ 1850.578854][ T31] schedule+0x164/0x360 [ 1850.584195][ T31] schedule_preempt_disabled+0x13/0x30 [ 1850.598897][ T31] __mutex_lock+0x7f7/0x1550 [ 1850.610916][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 1850.626092][ T31] ? __mutex_lock+0x608/0x1550 [ 1850.638580][ T31] ? rtnl_newlink+0x883/0x1bb0 [ 1850.673502][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1850.691951][ T31] ? ns_capable+0x89/0xe0 [ 1850.708861][ T31] ? rtnl_link_get_net_capable+0xd3/0x310 [ 1850.716838][ T31] rtnl_newlink+0x883/0x1bb0 [ 1851.259479][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1851.279008][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1851.292167][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1851.304157][ T31] ? unwind_next_frame+0xa6/0x2550 [ 1851.318723][ T31] ? unwind_next_frame+0xa6/0x2550 [ 1851.329573][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1851.341399][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1851.354416][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1851.816497][ T31] ? kernel_text_address+0xa5/0xe0 [ 1851.866599][ T31] ? __kernel_text_address+0xd/0x30 [ 1851.902689][ T31] ? unwind_get_return_address+0x4d/0x90 [ 1851.918674][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1851.928055][ T31] ? arch_stack_walk+0xfb/0x150 [ 1851.941780][ T31] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1851.968380][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1851.988966][ T31] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1852.001899][ T31] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 1852.324026][ T31] ? netlink_sendmsg+0x5d4/0xb40 [ 1852.356023][ T31] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1852.368802][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1852.404486][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1852.431027][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1852.452792][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1852.468780][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1852.484905][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1852.501278][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1852.513358][ T31] netlink_unicast+0x75c/0x8e0 [ 1852.524866][ T31] netlink_sendmsg+0x813/0xb40 [ 1852.538931][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1852.573666][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1852.602493][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1852.619793][ T31] ____sys_sendmsg+0x972/0x9f0 [ 1852.625103][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1852.648601][ T31] ? import_iovec+0x73/0xa0 [ 1852.654130][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1852.666416][ T31] ? __asan_memcpy+0x40/0x70 [ 1852.688743][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1852.695117][ T31] ? __pfx_vfs_read+0x10/0x10 [ 1852.709013][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1852.745076][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1852.778814][ T31] ? __pfx_ksys_read+0x10/0x10 [ 1852.791408][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.808947][ T31] do_syscall_64+0x174/0x580 [ 1852.815902][ T31] ? trace_irq_disable+0x3b/0x140 [ 1852.833391][ T31] ? clear_bhb_loop+0x40/0x90 [ 1852.848884][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.865422][ T31] RIP: 0033:0x7fd32a49a407 [ 1852.876672][ T31] RSP: 002b:00007ffd8956b490 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 1852.931046][ T31] RAX: ffffffffffffffda RBX: 00007fd32a410780 RCX: 00007fd32a49a407 [ 1852.962401][ T31] RDX: 0000000000000000 RSI: 00007ffd8957f670 RDI: 0000000000000004 [ 1852.983286][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1853.003083][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd8958f8a0 [ 1853.022915][ T31] R13: 00007fd32a410708 R14: 0000000000000030 R15: 00007ffd8957f670 [ 1853.048951][ T31] [ 1853.053128][ T31] INFO: task kworker/0:3:6459 blocked for more than 148 seconds. [ 1853.088763][ T31] Not tainted syzkaller #0 [ 1853.102837][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1853.122411][ T31] task:kworker/0:3 state:D stack:25048 pid:6459 tgid:6459 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1853.158717][ T31] Workqueue: events netdev_rx_mode_work [ 1853.169547][ T31] Call Trace: [ 1853.180845][ T31] [ 1853.186016][ T31] __schedule+0x1821/0x5740 [ 1853.228946][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1853.241404][ T31] ? process_scheduled_works+0xb5d/0x1860 [ 1853.263975][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1853.277523][ T31] ? wq_worker_sleeping+0x101/0x250 [ 1853.298581][ T31] ? __pfx___schedule+0x10/0x10 [ 1853.498819][ T31] ? schedule+0x90/0x360 [ 1853.503184][ T31] schedule+0x164/0x360 [ 1853.507392][ T31] schedule_preempt_disabled+0x13/0x30 [ 1853.528880][ T31] __mutex_lock+0x7f7/0x1550 [ 1853.536181][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1853.548819][ T31] ? __mutex_lock+0x608/0x1550 [ 1853.556254][ T31] ? netdev_rx_mode_work+0x19/0x3c0 [ 1853.713700][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1853.745905][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1853.758919][ T31] ? process_scheduled_works+0xa70/0x1860 [ 1853.775332][ T31] ? process_scheduled_works+0xa70/0x1860 [ 1853.788545][ T31] ? process_scheduled_works+0xa70/0x1860 [ 1853.803131][ T31] netdev_rx_mode_work+0x19/0x3c0 [ 1853.818765][ T31] ? process_scheduled_works+0xa70/0x1860 [ 1853.866261][ T31] process_scheduled_works+0xb5d/0x1860 [ 1853.888961][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1853.899887][ T31] ? assign_work+0x3d5/0x5e0 [ 1853.918702][ T31] worker_thread+0xa53/0xfc0 [ 1854.049841][ T31] kthread+0x389/0x470 [ 1854.056547][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1854.078858][ T31] ? __pfx_kthread+0x10/0x10 [ 1854.084025][ T31] ret_from_fork+0x514/0xb70 [ 1854.124327][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1854.139273][ T31] ? __switch_to+0xc79/0x1410 [ 1854.157119][ T31] ? __pfx_kthread+0x10/0x10 [ 1854.178644][ T31] ret_from_fork_asm+0x1a/0x30 [ 1854.189368][ T31] [ 1854.329560][ T31] INFO: task syz.1.12264:15384 blocked for more than 150 seconds. [ 1854.398878][ T31] Not tainted syzkaller #0 [ 1854.408041][ T31] Blocked by coredump. [ 1854.988644][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1855.758838][ T31] task:syz.1.12264 state:D stack:25448 pid:15384 tgid:15377 ppid:5640 task_flags:0x40054c flags:0x00080001 [ 1855.788857][ T31] Call Trace: [ 1855.795357][ T31] [ 1855.806885][ T31] __schedule+0x1821/0x5740 [ 1855.818725][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1855.832314][ T31] ? __pfx___schedule+0x10/0x10 [ 1856.244801][ T31] ? schedule+0x90/0x360 [ 1856.267824][ T31] schedule+0x164/0x360 [ 1856.295903][ T31] schedule_preempt_disabled+0x13/0x30 [ 1856.313408][ T31] __mutex_lock+0x7f7/0x1550 [ 1856.328688][ T31] ? __pfx_locks_remove_file+0x10/0x10 [ 1856.334853][ T31] ? __mutex_lock+0x608/0x1550 [ 1856.358833][ T31] ? tun_chr_close+0x3e/0x1c0 [ 1856.368627][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1856.388748][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1856.657517][ T31] tun_chr_close+0x3e/0x1c0 [ 1856.669471][ T31] __fput+0x44f/0xa60 [ 1856.678953][ T31] task_work_run+0x1d9/0x270 [ 1856.684054][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1856.719085][ T31] ? do_exit+0x70a/0x22c0 [ 1856.757787][ T31] ? kmem_cache_free+0x182/0x650 [ 1856.778877][ T31] ? put_net+0x191/0x260 [ 1856.783973][ T31] do_exit+0x70f/0x22c0 [ 1856.795394][ T31] ? __pfx_do_exit+0x10/0x10 [ 1856.879223][ T31] ? cgroup1_freezing+0x20/0x350 [ 1856.892548][ T31] ? cgroup1_freezing+0x20/0x350 [ 1856.999382][ T31] do_group_exit+0x21b/0x2d0 [ 1857.004553][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1857.017380][ T31] get_signal+0x1284/0x1330 [ 1857.038590][ T31] arch_do_signal_or_restart+0xbc/0x840 [ 1857.044670][ T31] ? unshare_nsproxy_namespaces+0x172/0x190 [ 1857.058548][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1857.108642][ T31] ? ksys_unshare+0x8f1/0x9f0 [ 1857.329383][ T31] exit_to_user_mode_loop+0xa9/0x680 [ 1857.334787][ T31] ? rcu_is_watching+0x15/0xb0 [ 1857.358900][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1857.367997][ T31] do_syscall_64+0x353/0x580 [ 1857.388795][ T31] ? trace_irq_disable+0x3b/0x140 [ 1857.518559][ T31] ? clear_bhb_loop+0x40/0x90 [ 1857.526185][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1857.561214][ T31] RIP: 0033:0x7f9cec99ce59 [ 1857.583149][ T31] RSP: 002b:00007f9ced8fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1857.608929][ T31] RAX: fffffffffffffffc RBX: 00007f9cecc16180 RCX: 00007f9cec99ce59 [ 1857.631370][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1857.668663][ T31] RBP: 00007f9ceca32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1857.688642][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1857.711112][ T31] R13: 00007f9cecc16218 R14: 00007f9cecc16180 R15: 00007ffda88ee818 [ 1857.730550][ T31] [ 1857.745891][ T31] INFO: task syz-executor:15410 blocked for more than 153 seconds.