last executing test programs: 3m2.337209759s ago: executing program 4 (id=3654): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ipvlan0\x00'}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c000000020000000000000018e8ffff1f"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112de000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r4 = socket$igmp6(0xa, 0x3, 0x2) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$tun(r0, &(0x7f00000005c0)=ANY=[], 0x72) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x2c, r10, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x2c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r9, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1c, r10, 0x200, 0x70bd2b, 0x2, {{}, {@val={0x8, 0x3, r13}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000) 2m59.215582074s ago: executing program 4 (id=3674): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x65, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="0020000000060000580012800b00010067726574617000004800028006000e0002000000050017000100000006000300070000000800050008002200050008148000000005001600010000000500080005000000040012"], 0x78}}, 0x0) 2m59.093509765s ago: executing program 4 (id=3678): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x82, &(0x7f0000000180)={0x2}, &(0x7f0000000280)=0x20) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x74, 0x40, 0x4, 0xfffffffe, 0x0, {0x13, 0x7c}, [@nested={0x4, 0x142}, @nested={0x50, 0x1, 0x0, 0x1, [@typed={0x4b, 0x6, 0x0, 0x0, @str='\x80\n\x1b\x02^\xf7\xf7\xbc\xe0\x04\xb4W\xce \x8d\xd5\x9b\xb6W=M\xaa\x82\x10;\x15\x88\xd7\xe9M\x88\xc2\xde\xb1b\xb8\xc2\x91< $\x82+\x9c\xfdI\x9b\xb3 vS*\x1a\xa0\x03\xac\xaa3\xdeR\x02\xd8\x16\xd0\x03\x02n\x86\xa8\b~'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}, @nested={0x4, 0x29}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="09d60cd53ef449b2d4b50a2a0ac91dcbbc7fe56f8c6bf09f4eda456c", 0x1c}, {&(0x7f00000000c0)='[&', 0x2}], 0x2, &(0x7f00000001c0)}, 0x80800) 2m58.895183982s ago: executing program 4 (id=3681): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000540)={0x276a7ece4bfa0994}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x1d, 0x2, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001000010829bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000e30000ea07001b0000000000080028004dcb0000"], 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@ipmr_getroute={0x1c, 0x1a, 0x2, 0x70bd2d, 0x25dfdbfc, {0x80, 0x80, 0x80, 0x1, 0xfc, 0x2, 0xc8, 0x9, 0x200}, [""]}, 0x1c}, 0x1, 0x7500}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311a300000000008500f500000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2m58.446102623s ago: executing program 4 (id=3688): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f00000086c0)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, 0x0}}], 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x828}, 0x0) ppoll(&(0x7f0000001080)=[{}], 0x13, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000500)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0xc, 0x103ba, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r6, &(0x7f0000000180), 0x0}, 0x20) r7 = socket$inet(0x2, 0x3, 0x2) recvmmsg(r7, &(0x7f0000003580)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2000, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000225ffdbdf257300000008000300000000", @ANYRES32=r9, @ANYBLOB="0500ee0098000000"], 0x24}, 0x1, 0x0, 0x0, 0x2000}, 0x4) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe8, r8, 0x201, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3b5, 0x55}}}}, [@NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) r10 = gettid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)={0x1c, 0x33, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid=r10}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3e9, 0x4, 0x70bd29, 0x25dfdbfe, {0x22, 0x0, 0x0, r10, 0x80, 0x4, 0x8, 0x7f, 0x0, 0x80000000, 0x80000000}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x44010}, 0x80) 2m58.244956258s ago: executing program 4 (id=3692): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x70bd24, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0xc890) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x45, &(0x7f0000000000), 0x4) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x3, 0x0, @vifc_lcl_addr=@remote, @local}, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0xfd, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x0, 0x0, 0xfffffffc}, [@TCA_NETEM_RATE={0x14, 0xe, {0x2, 0x0, 0x80000}}]}}}]}, 0x60}}, 0x8c0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0xc}, 0x13}) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x561f8501482454f8, 0x80, 0x8, 0x0, 0xff, @link_local}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETTXFILTER(r9, 0x400454d1, 0x0) getpeername$llc(r8, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0}, 0x300080c1) writev(r6, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x42000358}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031423a025bd7000fbdbdf250900020073797a31000000000800410072786500330064766d85703100800000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r10 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="180000006a007f00b1c465d0d8c535f55c0102cf57fa9e7f", 0x18}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES16=r4, @ANYBLOB="13088abf2d578bffea3faa9646c5b342e70c55ed9c51f040623103d074e85ef0e62b62e18a832685a64cfca5a578dc5309f69c288bb5f77747e64cd9174336a6a5afcd5a8d2f258a75559711dada67dc360f86eeda75a03533a168664afbcacc2bf22d03c855becb9bb5904176fdc6e938285627b14be186321b5c2c031a", @ANYRESDEC], 0xa0}, 0x1, 0x0, 0x0, 0x14}, 0x4040) 2m44.727335932s ago: executing program 3 (id=3845): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f00000035c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="b180dccc16eb67ee66fc6ff09b3e4ef26f701d", 0x13}, {&(0x7f00000000c0)="185f70788926e08ce31809863a7db4d975e887eea5dcd974fef9c6ed45a821773237e5d2d329c07c7e1bb2e75ecccfb76e11781c5daab14253f6959a0400da0bf98a0ab829816250cf32206089785600f7c3ee056ab6fdd436f0c3e71740000000d5d70f35c3c55403e6a22e4560ac69", 0x70}], 0x2, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10}], 0x1, 0x48080) recvmsg$can_raw(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000440)=""/127, 0x7f}, {&(0x7f0000000840)=""/205, 0xcd}], 0x2}, 0x40) sendto$inet6(r0, &(0x7f0000000180)="a401", 0x2, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x20000, @mcast2, 0x4}, 0x1c) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0xa, 0x100c, 0x0, 0x7, 0x1}) 2m44.47430143s ago: executing program 3 (id=3849): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x4000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000f00)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x800, 0x0, 0x7, 0x51, 0x67, 0x0, 0x5, 0x6, 0x7fffffff, 0x100, 0x200, 0x7, 0x681e, 0xbeb, 0x76e1, 0x0, 0x1, 0x401, 0x2, 0xfe, 0x8001, 0x5, 0x2, 0x4, 0xffff52b3, 0x8, 0x629, 0x6, 0x1e1, 0x1000, 0x4, 0xde, 0x7ff, 0x3, 0x7, 0x8, 0x1ff, 0x8e1b087, 0x0, 0x2, 0x1, 0xfffffffa, 0x1875, 0xffff, 0x7, 0x81, 0x3, 0x6, 0xff25, 0x4, 0x0, 0x7fff, 0x2, 0x6, 0xd7, 0x7ff, 0x2, 0xd, 0x4, 0x1, 0xef, 0x200, 0x5, 0x9, 0x0, 0x1, 0x0, 0x3, 0xb, 0x9, 0xffffff81, 0x0, 0x6, 0x101, 0xfffffffe, 0x8, 0x7, 0x2, 0x1, 0x800, 0x7, 0x85, 0x3, 0x4, 0xe0, 0x8001, 0x10, 0x8, 0x7, 0x0, 0x200, 0xffff2338, 0x8, 0x8, 0x80, 0xe, 0x4, 0x6c0, 0x80000000, 0x1, 0x200, 0xfffffffd, 0x8, 0x6, 0x3, 0x80000000, 0x2, 0x8, 0x3, 0x42, 0xe, 0x6, 0x8, 0x0, 0xa, 0xd, 0x4, 0x5, 0x8, 0x80, 0x5, 0x4, 0xdcb, 0x4, 0x9, 0x1000, 0x80000001, 0x3, 0x7, 0x100, 0x0, 0x4, 0xed00, 0x7fff, 0x401, 0x1130debc, 0x2, 0x2, 0x7, 0x2c1, 0xe, 0x0, 0x1, 0x2, 0x7, 0xc7, 0xe68, 0x1000, 0x7, 0x3, 0xc, 0x6, 0x6, 0xf, 0x7, 0x5, 0x6, 0x4a3b, 0x3, 0x0, 0x3, 0x3ff, 0x5, 0x8, 0x0, 0x3d6f, 0x8, 0x6, 0xc73, 0x429, 0x1, 0x6, 0x8001, 0x6, 0x101, 0x9, 0x3, 0x2, 0x8, 0x81, 0xb573, 0x2, 0xfffffff7, 0x7c, 0xfffffffb, 0x7, 0x9, 0x200, 0xfffffffb, 0x0, 0x8, 0x200, 0x8e, 0x566f, 0x0, 0x300000, 0x3, 0x2, 0x80000001, 0x6, 0x4, 0xfff, 0x2, 0xd7f5, 0x2, 0x9, 0x7, 0x0, 0xffffffff, 0x9, 0x1, 0x9, 0x8, 0x81, 0x9, 0x5, 0x3, 0x3, 0xa, 0x7fffffff, 0x7fffffff, 0xd, 0x8, 0x9, 0x3, 0x6, 0x0, 0x59, 0x401, 0x0, 0xffff, 0x2, 0x1, 0x38, 0x2, 0x4, 0x7, 0x4, 0x9, 0x1, 0xfffffffe, 0x0, 0x1, 0x7fffffff, 0x1, 0x6, 0x8, 0x1, 0x8, 0x2e32, 0xfffffffe, 0x7, 0x9be, 0x4, 0x6, 0xa]}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x3, 0x4, 0x9, 0x9, 0x1, 0x6, 0x3, 0xe, 0x0, 0x0, 0xe, 0x0, 0x9, 0xffffff32, 0x5, 0xf, 0x2, 0x3, 0x7, 0x80000000, 0x80, 0x8000, 0x1000, 0x7, 0x200, 0xae, 0xffff, 0x5, 0x4f67, 0x4, 0x8, 0xcd, 0xffffffff, 0x8, 0x4, 0x2, 0x9, 0x7ff, 0x0, 0x10000, 0xe385, 0xff, 0x3ff, 0x9107, 0x2, 0x9, 0x81, 0x6, 0x6, 0x9, 0xfffffffa, 0x8, 0x100, 0x4, 0xd, 0x5, 0x6, 0xffffdaac, 0xf, 0x3, 0x9, 0x8, 0xffffffff, 0x0, 0x0, 0xfc, 0x7, 0x9, 0x1, 0x0, 0x401, 0xc6cb1260, 0x8001, 0x3, 0x5, 0x480e, 0x8000, 0xb, 0x7, 0x5, 0x0, 0xfffffff9, 0x4, 0x1, 0x1, 0x9, 0x3, 0x1, 0x8, 0x1, 0x4, 0x7fff, 0x6, 0xff, 0x0, 0x9, 0x8, 0x8001, 0x101, 0x515f, 0x377, 0x4, 0x2, 0x4, 0x6b, 0x1aa13142, 0x1, 0x7, 0x0, 0x5, 0x91e, 0xfffffff7, 0x2, 0x9, 0x6, 0x8e3, 0xd7c9, 0x2, 0x2, 0xfffffffe, 0x81, 0xa4bf, 0x1, 0x3, 0x400, 0x8, 0x1ff, 0x4, 0x7, 0x4, 0x5256, 0xe3, 0x8, 0xa, 0x538, 0x37c1, 0x7, 0x9, 0x1000, 0x9, 0x631d, 0x1c, 0xa, 0x3, 0x100, 0x7, 0x81, 0x8, 0x1, 0x45, 0x1, 0x6, 0x8, 0x484, 0x7, 0x9, 0x17, 0x68000, 0x5, 0xa, 0x2, 0x10001, 0x7ff, 0x2fb, 0x4, 0xfffffff8, 0x8, 0x29, 0x0, 0x1, 0x4, 0xffffd481, 0x4, 0xc7, 0x5, 0x800, 0x3, 0x1, 0xcf03, 0x7, 0xdd2, 0x2, 0xcde, 0x1, 0x2, 0x7fffffff, 0x5, 0x6, 0x10001, 0xf30, 0x6, 0xb84, 0x80, 0x6f0ab25b, 0x10, 0xfffffbff, 0x0, 0x1, 0x4, 0xff000000, 0x4, 0x4, 0x0, 0x2, 0xfffffffd, 0x2, 0xa1b, 0x1, 0x5, 0x203, 0xb, 0x1, 0xd67, 0x2, 0x2, 0x4, 0xfffffff3, 0x2, 0x2790, 0x5, 0xfffff23c, 0x8, 0xffff7fff, 0x3, 0x4fa, 0x401, 0x3, 0x5, 0xba4, 0x7146, 0x0, 0x4, 0xc, 0x9, 0x2, 0x4, 0x6, 0x6, 0x7fffffff, 0x2eb, 0x68b0afbf, 0x15181a07, 0x54, 0x8, 0x7, 0x0, 0x9, 0x4, 0x7, 0x0, 0x43, 0x7f, 0x5, 0xf700000, 0x4]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x16c, 0x24, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x5, 0x7}, {0x5, 0xa}, {0x9, 0xb}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x5}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x36}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5bf}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 2m44.085660867s ago: executing program 3 (id=3853): socket$inet(0x2, 0x3, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000012c0)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "9475e11ebf12930984024ab8bd53a4c0", "6439471501ba2f3afba436b86ffe85d3", "5fd54c00b3d5b738a43d76535dc3da5c", "17aff4f9cc836635c357eec9f91a7137"}}}, 0x4a) 2m43.992825578s ago: executing program 3 (id=3856): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @multicast2}, 0x240, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd178, 0x3, 0x3e3}) (async) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={r3, 0x4}, 0x8) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000002c0)={r1, &(0x7f00000001c0)='/-#\x00', 0x101000, &(0x7f0000000200)={@_ha_fsid={[0x893b, 0x3]}, {0x10, 0x3, 0x6, 0x7ff}}, 0x9, &(0x7f0000000240), &(0x7f0000000280)=0x83}) setsockopt$inet6_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000300)="1cc84d708090670cf82251c2a6d7949596393d806882380ff96fb13ff0b6415d3794b4384145700fb345837e85072c875989b7153346513a0990164a7f46c829220bbc176b74bc7c30688f560748256a870e9d12e3ea7289fd2c9873bc3392c5d7ada579bb6f28cf24dd13b08df9a7b7e24ecafbcfaa2cc78d99f8b577aea6d3dd8d6180a7b3764fe82a42e03750ca938ca39463e9b07878ec776a153d54548bda0bb0b66af3d1e8cda6857298b0ed6247a97624c83164e1eb7243c8392a567cd5b4ead95e02e7a475e58d5faadd56ab", 0xd0) (async) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), r4) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r5, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000580)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000005c0)=0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000600)={r6, 0x9}, 0x8) (async) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa8e, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f00000006c0)='syzkaller\x00', 0x8001, 0x13, &(0x7f0000000700)=""/19, 0x0, 0x10, '\x00', 0x0, 0x6, r4, 0x8, &(0x7f0000000740)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0xc, 0x0, 0x5}, 0x10, 0x2539d, 0xffffffffffffffff, 0x6, &(0x7f00000007c0)=[r4, r4, r4, r4], &(0x7f0000000800)=[{0x5, 0x4, 0x10}, {0x1, 0x2, 0x1, 0x2}, {0x3, 0x3, 0xc, 0x1}, {0x1, 0x5, 0x3, 0x3}, {0x2, 0x3, 0x3, 0xa}, {0x1, 0x1, 0x7, 0x9}], 0x10, 0x4}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000940)=r7, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000980)=0xbad5, 0x4) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$SO_COOKIE(r9, 0x1, 0x39, &(0x7f0000000a40), &(0x7f0000000a80)=0x8) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), r4) (async) r11 = getpid() (async) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000000b40)=0x0) (async) r13 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000b80)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xf4, r10, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r12}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r13}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) r14 = accept$nfc_llcp(r4, &(0x7f0000000d40), &(0x7f0000000dc0)=0x60) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000e80)={r14, r2, 0x1b8, 0x78, &(0x7f0000000e00)="92baae591de90ac109ec114eb2a12badf97900368499a24b2cf50e00b19eaac84de29664b2937c9c0d3469cb701510813bc4d29a3358b5ca3cd44978b325fa7a9665072be233f15faf3d2746d6c3ff63804c6c9e9b080cd558d446771362842ac5924f82218777eb309c3eff9a880e7d622122b5a4a54344", 0x2, 0x9, 0xb6, 0x3, 0x7, 0x0, 0x9, 'syz1\x00'}) (async) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x7) (async) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x48, 0x1402, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r13}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m43.737806395s ago: executing program 3 (id=3859): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 2m43.585827081s ago: executing program 3 (id=3863): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x50}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0xc000) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x6c, 0x0, @private1, @private2}}}}}}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) recvmsg(r2, &(0x7f0000000cc0)={&(0x7f00000002c0)=@nfc, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000340)}, {&(0x7f0000000500)=""/202, 0xca}, {&(0x7f0000000780)=""/114, 0x72}, {&(0x7f0000000800)=""/219, 0xdb}, {&(0x7f0000000900)=""/45, 0x2d}, {&(0x7f0000000940)=""/95, 0x5f}, {&(0x7f00000009c0)=""/242, 0xf2}, {&(0x7f0000000ac0)=""/121, 0x79}], 0x8, &(0x7f0000000bc0)=""/212, 0xd4}, 0x100) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r2, 0x8b27, &(0x7f0000000640)="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") socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$rxrpc(0x21, 0x2, 0xa) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x4, 0x0, &(0x7f0000000040)) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffff5f}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0x3ff}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x4c, &(0x7f0000000000)={0x0, 0x0}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x2d, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x3c, 0x9, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TPROXY_FAMILY={0x5, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) 2m43.144453368s ago: executing program 32 (id=3692): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x70bd24, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0xc890) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x45, &(0x7f0000000000), 0x4) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x3, 0x0, @vifc_lcl_addr=@remote, @local}, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0xfd, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x0, 0x0, 0xfffffffc}, [@TCA_NETEM_RATE={0x14, 0xe, {0x2, 0x0, 0x80000}}]}}}]}, 0x60}}, 0x8c0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0xc}, 0x13}) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x561f8501482454f8, 0x80, 0x8, 0x0, 0xff, @link_local}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETTXFILTER(r9, 0x400454d1, 0x0) getpeername$llc(r8, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0}, 0x300080c1) writev(r6, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x42000358}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031423a025bd7000fbdbdf250900020073797a31000000000800410072786500330064766d85703100800000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r10 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="180000006a007f00b1c465d0d8c535f55c0102cf57fa9e7f", 0x18}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES16=r4, @ANYBLOB="13088abf2d578bffea3faa9646c5b342e70c55ed9c51f040623103d074e85ef0e62b62e18a832685a64cfca5a578dc5309f69c288bb5f77747e64cd9174336a6a5afcd5a8d2f258a75559711dada67dc360f86eeda75a03533a168664afbcacc2bf22d03c855becb9bb5904176fdc6e938285627b14be186321b5c2c031a", @ANYRESDEC], 0xa0}, 0x1, 0x0, 0x0, 0x14}, 0x4040) 2m28.574543202s ago: executing program 33 (id=3863): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x50}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0xc000) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x6c, 0x0, @private1, @private2}}}}}}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) recvmsg(r2, &(0x7f0000000cc0)={&(0x7f00000002c0)=@nfc, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000340)}, {&(0x7f0000000500)=""/202, 0xca}, {&(0x7f0000000780)=""/114, 0x72}, {&(0x7f0000000800)=""/219, 0xdb}, {&(0x7f0000000900)=""/45, 0x2d}, {&(0x7f0000000940)=""/95, 0x5f}, {&(0x7f00000009c0)=""/242, 0xf2}, {&(0x7f0000000ac0)=""/121, 0x79}], 0x8, &(0x7f0000000bc0)=""/212, 0xd4}, 0x100) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r2, 0x8b27, &(0x7f0000000640)="3680f741eef03770e365b097b1f941758ab9b8c896b203c230d4efa839272c6e9bf63b3ec34059ba8775a4974f29d334bb33b3d13a3039894d50ce0573a43e1b6982a8f83d51e5ce01dab229ee0f2fd7762a18c44070c71f62be63701434b351cbfc5bac0cd6c3782b0db681cd799aeae87702b2dc5eb2f596451947f5f9b8997bca8403190cea68e0dab6289c766d592d0ef1559a094481d538bc8a8822804b4c0c6be8ae8de56d83595bb699512bac29c642cb38e8d0dbce5a787fb7165dce102a1f87146acdedc543c5d983b94dbd4ecadf700ff35f127bbd4fe0f85682e5b181def2fee785a0f4f1f8633b95534bcf5c8167ae286c84e708779d493d026a6ef844db7fe90407543c7a8f958f759329f37f404cb591a61e9f3886") socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$rxrpc(0x21, 0x2, 0xa) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x4, 0x0, &(0x7f0000000040)) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffff5f}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0x3ff}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x4c, &(0x7f0000000000)={0x0, 0x0}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x2d, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x3c, 0x9, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TPROXY_FAMILY={0x5, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) 33.190638595s ago: executing program 6 (id=5207): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x1}]}, {0x0, [0x5f]}}, 0x0, 0x27, 0x0, 0x1, 0x3}, 0x28) 33.031453562s ago: executing program 6 (id=5208): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x1a}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7fffffff, 0x6a386481, 0x0, 0x8, 0x3}, 0x3, 0x0, 0x7636, 0x3, 0x2, 0x5, 0x9, 0x17, 0x6, 0x205, {0x7, 0x7, 0x2, 0xfd, 0x10000, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) 32.570116557s ago: executing program 6 (id=5215): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2, 0x11, 0xa1, 0x5, 0x5, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_address={0x3, 0x7, 0xff, 0x3cda9336ecab25ef, 0x0, @in={0x2, 0x4e23, @broadcast}}]}, 0x28}}, 0x4000) 32.544197617s ago: executing program 6 (id=5216): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@migrate={0x50, 0x27, 0x1, 0x4, 0x1, {{@in=@multicast2, @in6=@remote, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4}}}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) 31.949475317s ago: executing program 6 (id=5224): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 31.394108105s ago: executing program 6 (id=5230): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x70bd25, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c881}, 0x4008090) 16.255578569s ago: executing program 34 (id=5230): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x70bd25, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c881}, 0x4008090) 7.309163295s ago: executing program 1 (id=5388): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x4a, 0x0, &(0x7f0000000280)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c000280080008008100000002000100aaaaaaaaaa000000"], 0x48}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) 6.761998443s ago: executing program 1 (id=5391): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x8, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x79, 0x0, 0x35, 0x2}, @restrict={0x3, 0x0, 0x0, 0xb, 0x1}, @float={0x9, 0x0, 0x0, 0x10, 0x2}, @const={0xa}]}, {0x0, [0x5f, 0x61, 0x61, 0x30, 0x61, 0x30]}}, &(0x7f0000000240)=""/182, 0x54, 0xb6, 0x0, 0x7}, 0x28) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB="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", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="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"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000180)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) (async, rerun: 64) r3 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r5, 0x8008f512, &(0x7f0000000080)) 6.161469471s ago: executing program 1 (id=5394): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac141400000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00150000000000010400000c000800080008000000e0"], 0xd8}, 0x1, 0x0, 0x0, 0x44400}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000007c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x7ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2ef}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}}], 0x1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) 5.987967793s ago: executing program 1 (id=5396): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="00000000d0000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.758018457s ago: executing program 1 (id=5399): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000003a80)={[{0x2d, 'perf_event'}]}, 0xc) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, 0x0, 0x6, 0x2) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r3, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f00000001c0)={r3, &(0x7f0000000000)='(-+),%{%\x00', 0x82881, &(0x7f0000000040)={@_ha_fsid={[0x12, 0x5]}, {0xb, 0x0, 0x95, 0x4}}, 0x140100, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)=0xfffffffd}) setsockopt$MRT_ASSERT(r4, 0x0, 0xcf, &(0x7f0000000200), 0x4) 5.598575171s ago: executing program 1 (id=5400): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c4}, 0x100) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f00000000c0)=""/132, 0x8000, 0x1800, 0x2}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c4}, 0x100) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f00000000c0)=""/132, 0x8000, 0x1800, 0x2}, 0x20) (async) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}, 0x0) (async) 3.589803767s ago: executing program 2 (id=5414): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='b\n'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3a, 0xfffffffffffffe66, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0x90, 0x72, &(0x7f0000000080)="ec91cfe8ffbc6709fa80e1a60af2ed4582059fcd7967bf5efc2e9dbec6159b8eb7d408962fbab08a0b2b5057f952db65f4544aa6be4ec5f61c37031c418542a89a475378605d202d62a8e2c9db9e13ae57b532e9afb3826b2871c42557f6d26626d734cf1c5c1bde87b0a6539b79429273b1a3c766943cf44f79ad6a021a9888d7f43d1ad1dbf44813b018c9a6daa0e5", &(0x7f0000000140)=""/114, 0x9e9, 0x0, 0x1c, 0x41, &(0x7f00000001c0)="6afc9615eef73408fad75f90007bae4e948f593ba961a657a752bb23", &(0x7f0000000200)="713d40351f5e1f5d49d4bf640fed8de148cd5fc7eafc6e84afb091acf34dd392f320e7980abec46ec457e7c68cb17b81e5ea1a8018adde2894effe72dcf5737585", 0x1, 0x0, 0xfff}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64], 0x108}}], 0x1, 0xc040) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000980)={0x0, @in6={{0xa, 0x4e23, 0xe, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}}}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x2c, 0x1d, 0x1, 0x0, 0x2000, {0x7, 0x0, 0x0, r5, 0x0, 0x96, 0x4}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x8}, @NDA_VLAN={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x24040845) socket$inet(0xa, 0x801, 0x84) (async) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010100}, 0x10) listen(r7, 0x8) (async) listen(r7, 0x8) accept4(r7, 0x0, 0x0, 0x0) (async) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt(r8, 0x84, 0x82, &(0x7f0000000480)="1a00000002000000", 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x70, '\x00', 0x0, @sk_reuseport}, 0x94) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x6, 0x6, [0x8, 0x8, 0x3, 0x33, 0x6, 0x7ff]}, &(0x7f00000002c0)=0x14) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000940)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x48, 0x8, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x40010) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000003c0)={r10, 0x30}, 0x8) (async) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000003c0)={r10, 0x30}, 0x8) 3.325091944s ago: executing program 5 (id=5416): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r9, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x800) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r2) sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, r13, 0x300, 0x9, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4042}, 0x850) sendmsg$nl_route(r11, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x2, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10400, 0x4080}, [@IFLA_MAP={0x24, 0xe, {0x6, 0x3, 0xcd, 0xfff, 0x7, 0x2}}, @IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'sit0\x00'}, {0x14, 0x35, 'ip6gretap0\x00'}, {0x14, 0x35, 'veth1_to_bond\x00'}, {0x14, 0x35, 'virt_wifi0\x00'}, {0x14, 0x35, 'bridge_slave_0\x00'}]}, @IFLA_IFALIASn={0x4}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x8}, @IFLA_IFALIASn={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r13, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40087) r14 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a40), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r14, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x84) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r14, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x44004080) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000c80), r0) sendmsg$NLBL_CALIPSO_C_ADD(r15, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, r16, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000800) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r14, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}}, 0x20040000) 3.261131309s ago: executing program 5 (id=5417): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200200008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="52000169"], 0x5) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r6, 0x433, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000048}, 0x0) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x300, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200200008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="52000169"], 0x5) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r6, 0x433, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000048}, 0x0) (async) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x300, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x10) (async) 3.069418691s ago: executing program 2 (id=5418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x1b, r2, 0x1, 0x2, 0x6, @multicast}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x28, r6, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0xa}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4004084) 2.838064905s ago: executing program 5 (id=5419): socket$kcm(0x10, 0x2, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x810) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4000}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {0xfffc}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0xfd28}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r3, @ANYBLOB="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", @ANYRES16=r2], 0xdc}, 0x1, 0x0, 0x0, 0x24048800}, 0x2804c015) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write(r4, &(0x7f00000000c0)="acb1b9a5af38808fadaab1978690d82ec7ca83b089baad704a838aba648bc56f7c27e22fe0b861f40dc779c9ffe79d29c30a60ae83b7afe9f0a00a6911c374567550892263b74adef7f62bb1", 0x4c) 2.671759395s ago: executing program 0 (id=5420): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="00000000fe000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.585983162s ago: executing program 0 (id=5421): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xe, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9b1}]}}}]}, 0x3c}}, 0x20000000) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000340)={@remote}, 0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x34, r2, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) 2.341593079s ago: executing program 0 (id=5422): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010029bd700000000006001c004e2400"/35], 0x24}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000004726c83b8e0003c6adb70000000018"], 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="200002c94d30b13c84322ed14968b0de5800000000000080000000"], 0x26}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x3, 0x3, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x20, 0xd5d, 0x5}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000003c0)=@dellinkprop={0x380, 0x6d, 0x0, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x201, 0x20804}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x58c}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_bridge\x00'}, {0x14, 0x35, 'wg0\x00'}, {0x14, 0x35, 'wlan0\x00'}, {0x14, 0x35, 'ip6_vti0\x00'}]}, @IFLA_AF_SPEC={0x174, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x19, 0x0, 0x0, 0x1bb}, {0x8, 0x19, 0x0, 0x0, 0x9}, {0x8, 0x1a, 0x0, 0x0, 0x1000}, {0x8, 0x7, 0x0, 0x0, 0x3}]}}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x27}}]}, @AF_BRIDGE={0x4}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}, @AF_INET6={0x44, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xc2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xa}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @local}}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x78, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}, @IFLA_VF_PORTS={0x180, 0x18, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, '!$\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0xf2}, @IFLA_PORT_PROFILE={0xa, 0x2, '&]-{v\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xfffffff9}, @IFLA_PORT_PROFILE={0x7, 0x2, '*(\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, '#!\xbd\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "fc04a026fc657bb84300e96cf832e0e9"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "3c0a7090b40e55da103b6f13b89ecaa9"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xa, 0x2, '}):$]\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x40}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a14cb485f5b675e2af36015a95f5041f"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "aaa9e1f2ff3bda1c0372f0c385f1e9a7"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7c11fc48acbef35ab21907fb9be33d04"}, @IFLA_PORT_VF={0x8, 0x1, 0x101}, @IFLA_PORT_REQUEST={0x5}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '^\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a7c63d3deadc4d919fe2b040f4450dca"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_VF={0x8, 0x1, 0x4c2}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x40}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "05d6169f61d4d04c38a4583038728caa"}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x9f}]}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xa6d}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x70}]}, 0x380}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$MRT6_PIM(r3, 0x29, 0xd0, &(0x7f0000000040), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2.324844455s ago: executing program 5 (id=5423): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, r1, 0xd1b, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtaction={0x14, 0x21, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.040841424s ago: executing program 5 (id=5424): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x45}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x40, 0x4, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x808}, 0x1) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x24000050}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "840000000000110002000f116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='.']) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$FICLONE(r7, 0x40049409, r5) r8 = accept4(r3, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), r8) 2.037400904s ago: executing program 0 (id=5425): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 1.517570323s ago: executing program 2 (id=5426): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r3, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r3, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="8068e32a"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40800) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000001600010025bd7000000000000a1f00c8fdf48322219a586102bc4f85bbecbce5d55be59ecea050fb61ce26a2e01256faff5c1038278fa64d742042123e013769db27af960ea5219b57114240065947612ae18cc2e0a393db967f8be81350e5b83a9acd2fbff79495df8314a530ff799a4075e7b50e65ec2123e7896acc97d76c510d6330207a5009f47f8a84d0670d49d0da2b3908e6cc4abe572873edc959c2f7126d358ce59003686e3e694a973eeac36b394e349e5c50392c752c4d2f116ae9cb7d0cfe6197881805d1ee16b42b405d764f40", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x0) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x3, 0x300) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$kcm(0x11, 0x3, 0x0) (async) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) socket$unix(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) (async) connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0x3}, {0xffff, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4850) 1.413175918s ago: executing program 0 (id=5427): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0xffffffff}, 0x10) (async) r4 = accept(r1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) (async) shutdown(r4, 0x0) (async) socket$inet6(0xa, 0x3, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000300), &(0x7f0000000180)=@buf="7d8b754da0", 0x2}, 0x20) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x1f) (async) getsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) (async) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10042, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x9c2, 0x4, 0x2, 0x38, 0x0}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r8, 0x4, 0x3}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000380)={r9, 0x4, 0x5b, "08ecda5f2797bce528f4984d3f87eee57471799bba59bc2abe8ab19b9630fbde02963a06dc567451fd7246ac2e8c32bd45ee58db21e67f68bd0e6f6021bc67a96412dee247f4924b1776ba8e349fa5234493474c531388197f1776"}, 0x63) (async) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a80)=ANY=[@ANYBLOB="20c2102b", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fbdbdf253f0000000c0099009a0000007c000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 1.396907512s ago: executing program 5 (id=5428): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a}, 0x20) unshare(0x22020400) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 1.244854356s ago: executing program 2 (id=5429): r0 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRESHEX=r1, @ANYBLOB="06001500070000000c0016"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10) recvmsg(r1, &(0x7f0000000380)={&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/39, 0x27}, {&(0x7f0000000180)=""/139, 0x8b}], 0x2, &(0x7f0000000280)=""/215, 0xd7}, 0x2140) 969.431366ms ago: executing program 2 (id=5430): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc0000008500000008000001959544240f029c73781d488055f7a43d6ea3a057"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000, 0x5}, {0x10000002, 0x4000, 0x9, 0x8}]}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) close(r1) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10, 0x0, 0x59}, 0x10) (async, rerun: 32) r5 = socket$kcm(0x2, 0x5, 0x84) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0xa, 0x5, 0x0) (async, rerun: 64) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) (async, rerun: 64) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2300, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 928.138219ms ago: executing program 0 (id=5431): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x4, 0x5b}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000100000000400"/20, @ANYRES32=0x1, @ANYBLOB="5f0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/26], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000002ffebdf2530000000", @ANYRES32=r2, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001", 0x30}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x24001014}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000044000000eb00000000141001"], 0x3c}, 0x1, 0x0, 0x0, 0x800400d}, 0x8001) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) r7 = socket(0xa, 0x3, 0x3a) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_INIT(r7, 0x29, 0xc8, &(0x7f0000000340), 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)={0x40, 0x0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc800) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c23b3000000000000100000000a00020005357ec137153e3704020180ff0f00000c00", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000040)=0x7, 0x4) 0s ago: executing program 2 (id=5432): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x48, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2, [@fragment={0x2f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x65}, @hopopts={0xbe}], "7bf354a4d44f873e"}}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000a00)={{r0, &(0x7f0000000800)='\x00', 0x260a02, &(0x7f0000000840)={@_ha_fsid={[0x6, 0x80000000]}, {0xfffd, 0x1000, 0x9, 0x5ede}}, 0x8, &(0x7f0000000940)={@_ha_fsid}, &(0x7f0000000980)=0x3}, {[0x800, 0x2, 0xb, 0xe43]}, 0x8, 0x0, &(0x7f00000009c0)}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000dc0)={r0, 0x20, &(0x7f0000000d80)={&(0x7f0000000c40)=""/244, 0xf4, 0x0, &(0x7f0000000d40)=""/26, 0x1a}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0xd, 0x11, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x3, 0x2, &(0x7f0000000b80)=""/2, 0x40f00, 0x9, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x3, 0xb, 0x6c, 0xb56}, 0x10, r5, r2, 0x8, &(0x7f0000000e00)=[r1, r3], &(0x7f0000000e40)=[{0x2, 0x5, 0x5, 0x3}, {0x5, 0x1, 0x10, 0x2}, {0x5, 0x5, 0x4, 0xb}, {0x0, 0x3, 0x10, 0x2}, {0x4, 0x5, 0xf, 0x9}, {0x3, 0x1, 0x8, 0x5}, {0x4d, 0x4, 0x2}, {0x2, 0x5, 0x9}], 0x10, 0x6}, 0x94) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x4}}}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r8, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @empty, @multicast1}, &(0x7f0000000380)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000f80)={'gretap0\x00', 0x0, 0x7, 0x80, 0x2, 0x6231bbd2, {{0x27, 0x4, 0x2, 0x4, 0x9c, 0x66, 0x0, 0xf9, 0x2f, 0x0, @multicast1, @multicast2, {[@end, @ssrr={0x89, 0x1f, 0x5, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x1e}]}, @timestamp={0x44, 0x1c, 0x57, 0x0, 0x3, [0x0, 0x24d8, 0x8, 0x5, 0x8, 0x5]}, @lsrr={0x83, 0x1f, 0x61, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}, @broadcast, @broadcast, @private=0xa010100]}, @generic={0x7, 0xc, "92f6af8e53d6a1347311"}, @cipso={0x86, 0x21, 0x0, [{0x5, 0x11, "9398ed677d67ad3df82472cd620dcf"}, {0x0, 0xa, "cb7b2e255e20b9a6"}]}]}}}}}) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r0, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0x11}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x8e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f00000007c0)=0x80000) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x14, 0x8980}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r12}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x19, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @ldst={0x2, 0x0, 0x4, 0x6, 0x9, 0xfffffffffffffffe, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x27, &(0x7f0000000300)=""/39, 0x41100, 0x36, '\x00', r9, 0x0, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x4, 0xa, 0xf, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0xffffffffffffffff, r11, r12, r14], &(0x7f00000006c0)=[{0x2, 0x3, 0xb, 0xb}, {0x4, 0x4, 0x10, 0x2}, {0x4, 0x1, 0x4, 0xc}, {0x1, 0x3, 0x6, 0x2}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x2}, 0x10}, 0x94) 0s ago: executing program 5 (id=5433): r0 = socket$nl_crypto(0x10, 0x3, 0x15) clock_gettime(0x5, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r4, 0x601, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVICE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r8) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000140)={0x28, r9, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)={0x30, r11, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x14, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x30}, 0x1, 0x0, 0x0, 0x100}, 0x24000000) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x94, r2, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004000}, 0x40001) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="e400000000", @ANYRES16=r13, @ANYBLOB="010000000000000000000d000000060008000000000006000a0000000000"], 0x24}}, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r14, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x14, r13, 0x200, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x24000084) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'virt_wifi0\x00', {0x3}, 0x6}) kernel console output (not intermixed with test programs): : entered allmulticast mode [ 382.409367][T19222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3658'. [ 382.421944][T19222] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3658'. [ 382.784603][T19252] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3665'. [ 382.863930][T19257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3666'. [ 382.916105][T19259] xt_CT: You must specify a L4 protocol and not use inversions on it [ 384.932998][T19194] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.137948][T19274] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3673'. [ 385.152038][T19279] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3671'. [ 385.159418][T19274] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3673'. [ 385.379225][T19291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3676'. [ 385.381789][T19286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3676'. [ 385.436860][T19294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3679'. [ 385.464347][T19291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3676'. [ 385.483802][T19299] netlink: 'syz.4.3681': attribute type 27 has an invalid length. [ 385.496533][T19286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3676'. [ 385.533582][T19302] netlink: 'syz.3.3680': attribute type 21 has an invalid length. [ 385.585028][T19296] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 385.590044][T19309] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3680'. [ 385.662382][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3683'. [ 385.758984][T19314] netlink: 'syz.3.3684': attribute type 1 has an invalid length. [ 385.771825][T19314] netlink: 'syz.3.3684': attribute type 1 has an invalid length. [ 385.780322][T19314] netlink: 'syz.3.3684': attribute type 8 has an invalid length. [ 386.094579][T19330] netlink: 'syz.2.3689': attribute type 8 has an invalid length. [ 386.116006][T19330] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.125711][T19330] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.331288][T19341] pimreg: entered allmulticast mode [ 386.381276][T19344] netlink: 'syz.1.3693': attribute type 2 has an invalid length. [ 386.403783][T19344] netlink: 'syz.1.3693': attribute type 2 has an invalid length. [ 386.680476][T19367] netlink: 'syz.1.3701': attribute type 1 has an invalid length. [ 386.736823][T19367] bond2: (slave geneve3): making interface the new active one [ 386.745824][T19367] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 386.755049][T16611] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 386.771528][T16611] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 386.792612][T16611] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 386.805546][T16611] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 386.865613][T19375] block nbd0: Unsupported socket: should be TCP or UNIX. [ 386.975850][T19381] net_ratelimit: 46 callbacks suppressed [ 386.975867][T19381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.194471][T19392] netlink: 'syz.2.3712': attribute type 1 has an invalid length. [ 387.286352][T19394] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 387.288913][ T1237] IPVS: starting estimator thread 0... [ 387.393967][T19397] IPVS: using max 37 ests per chain, 88800 per kthread [ 387.439575][T19404] ipvlan2: entered allmulticast mode [ 387.459832][T19404] syz_tun: entered allmulticast mode [ 387.540930][T19412] netlink: 'syz.2.3717': attribute type 49 has an invalid length. [ 387.637134][T19412] ip6gretap0: entered promiscuous mode [ 387.644750][T19412] ip6gretap0: entered allmulticast mode [ 387.661943][T19422] syz.3.3721: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 387.679180][T19422] CPU: 1 UID: 0 PID: 19422 Comm: syz.3.3721 Not tainted syzkaller #0 PREEMPT(full) [ 387.679203][T19422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 387.679221][T19422] Call Trace: [ 387.679228][T19422] [ 387.679238][T19422] dump_stack_lvl+0xe8/0x150 [ 387.679264][T19422] warn_alloc+0x249/0x340 [ 387.679295][T19422] ? stack_trace_save+0xa9/0x100 [ 387.679318][T19422] ? __pfx_warn_alloc+0x10/0x10 [ 387.679340][T19422] ? kasan_save_track+0x4f/0x80 [ 387.679356][T19422] ? kasan_save_track+0x3e/0x80 [ 387.679371][T19422] ? __kasan_kmalloc+0x93/0xb0 [ 387.679387][T19422] ? __kmalloc_cache_noprof+0x31c/0x660 [ 387.679404][T19422] ? xskq_create+0x56/0x170 [ 387.679420][T19422] ? xsk_setsockopt+0x54c/0x990 [ 387.679433][T19422] ? do_sock_setsockopt+0x17c/0x1b0 [ 387.679449][T19422] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 387.679465][T19422] ? do_syscall_64+0x174/0x580 [ 387.679481][T19422] __vmalloc_node_range_noprof+0x132/0x1750 [ 387.679518][T19422] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 387.679541][T19422] ? __kasan_kmalloc+0x93/0xb0 [ 387.679561][T19422] vmalloc_user_noprof+0xad/0xe0 [ 387.679577][T19422] ? xskq_create+0xbf/0x170 [ 387.679593][T19422] xskq_create+0xbf/0x170 [ 387.679610][T19422] xsk_init_queue+0x8a/0xe0 [ 387.679628][T19422] xsk_setsockopt+0x54c/0x990 [ 387.679644][T19422] ? __pfx_xsk_setsockopt+0x10/0x10 [ 387.679665][T19422] ? __pfx_aa_sk_perm+0x10/0x10 [ 387.679688][T19422] ? aa_sock_opt_perm+0xff/0x1a0 [ 387.679713][T19422] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 387.679731][T19422] ? __pfx_xsk_setsockopt+0x10/0x10 [ 387.679751][T19422] do_sock_setsockopt+0x17c/0x1b0 [ 387.679776][T19422] __x64_sys_setsockopt+0x13d/0x1b0 [ 387.679799][T19422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.679818][T19422] do_syscall_64+0x174/0x580 [ 387.679833][T19422] ? trace_irq_disable+0x3b/0x140 [ 387.679857][T19422] ? clear_bhb_loop+0x40/0x90 [ 387.679877][T19422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.679894][T19422] RIP: 0033:0x7f9fe6b9ce59 [ 387.679911][T19422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.679924][T19422] RSP: 002b:00007f9fe7976028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 387.679942][T19422] RAX: ffffffffffffffda RBX: 00007f9fe6e16090 RCX: 00007f9fe6b9ce59 [ 387.679954][T19422] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 387.679964][T19422] RBP: 00007f9fe6c32d6f R08: 0000000000000004 R09: 0000000000000000 [ 387.679974][T19422] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.679983][T19422] R13: 00007f9fe6e16128 R14: 00007f9fe6e16090 R15: 00007ffd4799dbd8 [ 387.680012][T19422] [ 387.809343][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880779ac000: rx timeout, send abort [ 387.929396][T19422] Mem-Info: [ 387.962911][T19422] active_anon:6014 inactive_anon:0 isolated_anon:0 [ 387.962911][T19422] active_file:3335 inactive_file:40084 isolated_file:0 [ 387.962911][T19422] unevictable:768 dirty:79 writeback:0 [ 387.962911][T19422] slab_reclaimable:11453 slab_unreclaimable:112036 [ 387.962911][T19422] mapped:29708 shmem:1294 pagetables:1437 [ 387.962911][T19422] sec_pagetables:0 bounce:0 [ 387.962911][T19422] kernel_misc_reclaimable:0 [ 387.962911][T19422] free:1305183 free_pcp:9993 free_cma:0 [ 388.017250][T19422] Node 0 active_anon:23956kB inactive_anon:0kB active_file:13340kB inactive_file:160136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118832kB dirty:312kB writeback:0kB shmem:3640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15292kB pagetables:5424kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 388.101283][T19422] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 388.157185][T19422] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 388.261941][T19422] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 388.269320][T19422] Node 0 DMA32 free:1264848kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24156kB inactive_anon:0kB active_file:13340kB inactive_file:160136kB unevictable:1536kB writepending:312kB zspages:0kB present:3129332kB managed:2552804kB mlocked:0kB bounce:0kB free_pcp:39372kB local_pcp:20744kB free_cma:0kB [ 388.307451][T19422] lowmem_reserve[]: 0 0 0 0 0 [ 388.312328][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880779ae400: rx timeout, send abort [ 388.325157][T19422] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 388.358112][T19422] lowmem_reserve[]: 0 0 0 0 0 [ 388.377822][T19422] Node 1 Normal free:3940524kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 388.419559][T19422] lowmem_reserve[]: 0 0 0 0 0 [ 388.432708][T19422] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 388.437463][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880779ac000: abort rx timeout. Force session deactivation [ 388.467491][T19422] Node 0 DMA32: 8538*4kB (UM) 5049*8kB (UM) 2042*16kB (UME) 356*32kB (UM) 104*64kB (UME) 153*128kB (UM) 193*256kB (UM) 137*512kB (U) 61*1024kB (UM) 38*2048kB (UE) 210*4096kB (UM) = 1264848kB [ 388.522049][T19422] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 388.543073][T19422] Node 1 Normal: 1*4kB (M) 1*8kB (M) 10*16kB (UM) 10*32kB (UM) 11*64kB (UM) 6*128kB (UM) 5*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3940524kB [ 388.619965][T19422] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 388.631158][T19422] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 388.648425][T19456] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 388.673088][T19456] bond0: (slave lo): Error: Device can not be enslaved while up [ 388.684865][T19422] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 388.700856][T19422] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 388.715005][T19422] 44709 total pagecache pages [ 388.720486][T19422] 0 pages in swap cache [ 388.751384][T19422] Free swap = 124996kB [ 388.762004][T19422] Total swap = 124996kB [ 388.779424][T19422] 2097051 pages RAM [ 388.803034][T19422] 0 pages HighMem/MovableOnly [ 388.812381][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880779ae400: abort rx timeout. Force session deactivation [ 388.824027][T19422] 427065 pages reserved [ 388.838519][T19422] 0 pages cma reserved [ 389.153490][T19484] netlink: 'syz.3.3736': attribute type 14 has an invalid length. [ 389.176120][T19484] netlink: 'syz.3.3736': attribute type 13 has an invalid length. [ 389.987859][T19535] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 390.023799][T19535] bond3: (slave lo): Enslaving as an active interface with an up link [ 390.035284][T19535] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 390.360742][T19544] __nla_validate_parse: 19 callbacks suppressed [ 390.360760][T19544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3753'. [ 391.038415][T19594] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3756'. [ 391.068801][T19596] openvswitch: netlink: Key type 276 is out of range max 32 [ 391.278635][T19603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3760'. [ 391.691720][T19629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3765'. [ 391.785622][T19636] netlink: 'syz.2.3766': attribute type 2 has an invalid length. [ 391.884876][T19638] veth0: entered promiscuous mode [ 391.902221][T19638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3767'. [ 392.019301][T19645] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 392.168856][T19652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3773'. [ 392.203560][T19652] macvlan3: entered allmulticast mode [ 392.218100][T19652] dummy0: entered allmulticast mode [ 392.230096][T19652] dummy0: entered promiscuous mode [ 392.250385][T19656] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3774'. [ 392.342188][T19661] syzkaller0: entered promiscuous mode [ 392.344041][T19660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3776'. [ 392.347801][T19661] syzkaller0: entered allmulticast mode [ 392.607338][T19673] xt_hashlimit: size too large, truncated to 1048576 [ 392.661492][T19678] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3781'. [ 392.907564][T19692] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 393.175802][T19705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3783'. [ 393.676580][T19732] netlink: 'syz.0.3794': attribute type 1 has an invalid length. [ 393.733168][T19732] 8021q: adding VLAN 0 to HW filter on device bond6 [ 393.760090][T19732] bond3: (slave veth0_to_bond): Releasing active interface [ 393.762319][T19734] IPv6: NLM_F_REPLACE set, but no existing node found! [ 393.793877][T19732] bond6: (slave veth0_to_bond): making interface the new active one [ 393.814258][T19732] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 393.877277][T19742] bond6: entered promiscuous mode [ 393.889918][T19742] veth0_to_bond: entered promiscuous mode [ 393.907660][T19742] bond6: entered allmulticast mode [ 393.915419][T19742] veth0_to_bond: entered allmulticast mode [ 393.989342][T19732] macvlan0: entered promiscuous mode [ 394.007708][T19732] macvlan0: entered allmulticast mode [ 394.050151][T19732] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 394.087893][T19732] bond6: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 394.132812][T19751] netlink: 'syz.2.3798': attribute type 1 has an invalid length. [ 394.154154][T19751] netlink: 'syz.2.3798': attribute type 11 has an invalid length. [ 394.182655][T19751] netlink: 'syz.2.3798': attribute type 11 has an invalid length. [ 394.208655][T19753] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 394.253544][T19753] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 395.488531][T19786] __nla_validate_parse: 7 callbacks suppressed [ 395.488550][T19786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3809'. [ 395.555121][T19787] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3809'. [ 397.181419][T19786] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 397.216335][T19793] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 397.325383][T19799] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3810'. [ 397.402149][T19803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3812'. [ 397.474132][T19806] veth3: entered allmulticast mode [ 397.572499][T19818] netlink: 'syz.1.3817': attribute type 3 has an invalid length. [ 397.583115][T19818] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3817'. [ 397.594385][T19818] netlink: 176336 bytes leftover after parsing attributes in process `syz.1.3817'. [ 397.657950][T19823] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3819'. [ 397.674358][T19824] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3819'. [ 397.968158][T19843] netlink: 'syz.1.3824': attribute type 2 has an invalid length. [ 398.017491][T19849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3825'. [ 398.060558][T19848] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 398.100967][T19847] ip6gre1: entered allmulticast mode [ 398.168812][T19856] tipc: Enabling of bearer rejected, failed to enable media [ 398.225787][T19860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3828'. [ 398.525966][T19873] veth1_macvtap: renamed from vlan0 [ 398.698847][T19887] netlink: 'syz.3.3837': attribute type 2 has an invalid length. [ 398.988152][T19908] syzkaller1: entered promiscuous mode [ 398.994752][T19908] syzkaller1: entered allmulticast mode [ 399.125480][T19901] xt_TCPMSS: Only works on TCP SYN packets [ 400.004830][T19944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.014485][T19947] xt_TCPMSS: Only works on TCP SYN packets [ 400.557961][T19983] __nla_validate_parse: 3 callbacks suppressed [ 400.557979][T19983] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3857'. [ 400.700566][T19989] tipc: Enabling of bearer rejected, failed to enable media [ 400.779304][T19995] tipc: Started in network mode [ 400.796274][T19995] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 400.813077][T19995] tipc: Enabled bearer , priority 24 [ 400.847127][T19996] tipc: Enabling of bearer rejected, already enabled [ 400.955889][T20008] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3863'. [ 400.992052][T20008] netlink: 'syz.3.3863': attribute type 1 has an invalid length. [ 401.024224][T20008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3863'. [ 401.047713][T20008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3863'. [ 401.428887][T20036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3868'. [ 401.447315][T20033] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 401.463882][T20033] bond4 (unregistering): Released all slaves [ 401.474948][T20036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3868'. [ 401.522790][T20036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3868'. [ 401.555727][T20031] lo speed is unknown, defaulting to 1000 [ 401.688186][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 401.699142][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 401.712988][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 401.727474][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 401.736891][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 401.930748][ T8002] tipc: Node number set to 10005162 [ 401.947606][T20054] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3874'. [ 402.127487][T20063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3876'. [ 402.147682][T20063] netlink: 'syz.2.3876': attribute type 7 has an invalid length. [ 402.167280][T20063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3876'. [ 402.208859][T20063] erspan0: entered promiscuous mode [ 402.226317][T20063] gretap0: entered promiscuous mode [ 402.240921][T20063] debugfs: 'hsr1' already exists in 'hsr' [ 402.258479][T20063] Cannot create hsr debugfs directory [ 402.370147][ T5632] Bluetooth: hci2: command 0x0405 tx timeout [ 402.466564][T20073] syzkaller0: entered promiscuous mode [ 402.475045][T20073] syzkaller0: entered allmulticast mode [ 402.586834][T20077] netlink: 'syz.1.3879': attribute type 1 has an invalid length. [ 402.596570][T20043] lo speed is unknown, defaulting to 1000 [ 402.851443][T20089] batadv0: entered promiscuous mode [ 402.879906][T20089] macsec1: entered promiscuous mode [ 402.886782][T20089] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 402.905515][T20089] batadv0: left promiscuous mode [ 403.647950][T20116] xt_CT: You must specify a L4 protocol and not use inversions on it [ 403.765295][T20043] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.772876][T20043] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.781408][T20043] bridge_slave_0: entered allmulticast mode [ 403.791549][T20043] bridge_slave_0: entered promiscuous mode [ 403.801271][ T5632] Bluetooth: hci0: command tx timeout [ 403.812857][T20043] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.820414][T20043] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.827827][T20043] bridge_slave_1: entered allmulticast mode [ 403.838151][T20043] bridge_slave_1: entered promiscuous mode [ 403.900251][T20043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.915649][T20043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.943662][T20132] openvswitch: netlink: Multiple metadata blocks provided [ 403.955631][T20043] team0: Port device team_slave_0 added [ 403.964973][T20043] team0: Port device team_slave_1 added [ 404.003403][T20043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.010543][T20043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.046023][T20043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.083914][T20043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.094698][T20043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.123219][T20043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.265939][T20043] hsr_slave_0: entered promiscuous mode [ 404.273858][T20043] hsr_slave_1: entered promiscuous mode [ 404.280801][T20043] debugfs: 'hsr0' already exists in 'hsr' [ 404.286634][T20043] Cannot create hsr debugfs directory [ 404.893515][T20171] sctp: [Deprecated]: syz.0.3895 (pid 20171) Use of int in max_burst socket option deprecated. [ 404.893515][T20171] Use struct sctp_assoc_value instead [ 405.234860][T20043] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 405.263264][T20043] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 405.294990][T20043] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 405.334145][T20043] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 405.356732][T20043] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 405.399936][T20043] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.434687][T20043] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 405.477132][T20043] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 405.688418][T20216] __nla_validate_parse: 4 callbacks suppressed [ 405.688437][T20216] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3904'. [ 405.808506][T20043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.865263][T20043] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.880817][ T5632] Bluetooth: hci0: command tx timeout [ 405.892599][T16610] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.899799][T16610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.965666][T16607] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.972961][T16607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.138076][T20235] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3909'. [ 406.153629][T20235] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3909'. [ 406.164472][T20235] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3909'. [ 406.206361][T20043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.291766][T20241] bond3: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 406.305301][T20241] bond3 (unregistering): Released all slaves [ 406.309294][T20250] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3910'. [ 406.444384][T20257] netlink: 'syz.0.3913': attribute type 11 has an invalid length. [ 406.454825][T20257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3913'. [ 406.488522][T20257] netlink: 'syz.0.3913': attribute type 11 has an invalid length. [ 406.500802][T20257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3913'. [ 406.621548][T20264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3915'. [ 406.635258][T20268] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3916'. [ 406.666223][T20268] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3916'. [ 407.079902][T20043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.148958][T20286] lo speed is unknown, defaulting to 1000 [ 407.418314][T20043] veth0_vlan: entered promiscuous mode [ 407.433960][T20043] veth1_vlan: entered promiscuous mode [ 407.478414][T20043] veth0_macvtap: entered promiscuous mode [ 407.507986][T20043] veth1_macvtap: entered promiscuous mode [ 407.545034][T20043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.600434][T20043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.648245][T14536] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.684119][T14536] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.693885][T14536] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.808287][T14536] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.963306][ T5632] Bluetooth: hci0: command tx timeout [ 408.128980][T16607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.158507][T16607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.287268][T20329] netlink: 'syz.1.3935': attribute type 3 has an invalid length. [ 408.308915][T20321] syzkaller0: entered promiscuous mode [ 408.315260][T20321] syzkaller0: entered allmulticast mode [ 408.372336][T20321] 0: reclassify loop, rule prio 0, protocol 800 [ 408.378085][T16610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.388084][T16610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.398579][T20330] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 408.432388][T20330] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 408.469961][T20330] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 408.489156][T20330] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 408.547493][T20330] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 408.733874][T16610] smbdirect: ib_dev[syz2] removed [ 408.782789][T20343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.807726][ T181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.820989][ T181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.152780][T20366] sctp: [Deprecated]: syz.5.3948 (pid 20366) Use of int in max_burst socket option. [ 409.152780][T20366] Use struct sctp_assoc_value instead [ 409.927548][T20381] pim6reg: entered allmulticast mode [ 410.051602][ T5632] Bluetooth: hci0: command tx timeout [ 410.329388][T20400] bond7: entered promiscuous mode [ 410.338530][T20400] bond7: entered allmulticast mode [ 410.361239][T20400] 8021q: adding VLAN 0 to HW filter on device bond7 [ 410.460760][T20400] bond8: entered promiscuous mode [ 410.479768][T20400] bond8: entered allmulticast mode [ 410.490997][T20400] 8021q: adding VLAN 0 to HW filter on device bond8 [ 410.508841][T20408] netlink: 'syz.1.3959': attribute type 25 has an invalid length. [ 410.562372][T20400] bond9: entered promiscuous mode [ 410.567517][T20400] bond9: entered allmulticast mode [ 410.573673][T20400] 8021q: adding VLAN 0 to HW filter on device bond9 [ 410.589194][T20408] netlink: 'syz.1.3959': attribute type 25 has an invalid length. [ 410.611365][T20400] bond10: entered promiscuous mode [ 410.616566][T20400] bond10: entered allmulticast mode [ 410.622437][T20400] 8021q: adding VLAN 0 to HW filter on device bond10 [ 410.645943][T20400] bond11: entered promiscuous mode [ 410.652542][T20400] bond11: entered allmulticast mode [ 410.658101][T20400] 8021q: adding VLAN 0 to HW filter on device bond11 [ 410.665997][T16607] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.675166][T16607] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.715742][T20400] bond12: entered promiscuous mode [ 410.721676][T20400] bond12: entered allmulticast mode [ 410.727404][T20400] 8021q: adding VLAN 0 to HW filter on device bond12 [ 410.747570][T20417] __nla_validate_parse: 20 callbacks suppressed [ 410.747587][T20417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3960'. [ 410.766707][T20400] bond13: entered promiscuous mode [ 410.766731][T20400] bond13: entered allmulticast mode [ 410.778326][T20400] 8021q: adding VLAN 0 to HW filter on device bond13 [ 410.793468][T16607] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.828422][T16607] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.893837][T20400] bond14: entered promiscuous mode [ 410.914856][T20400] bond14: entered allmulticast mode [ 410.937310][T20400] 8021q: adding VLAN 0 to HW filter on device bond14 [ 411.014423][T20400] bond15: entered promiscuous mode [ 411.020049][T20400] bond15: entered allmulticast mode [ 411.025890][T20400] 8021q: adding VLAN 0 to HW filter on device bond15 [ 411.061765][T20400] bond16: entered promiscuous mode [ 411.067396][T20400] bond16: entered allmulticast mode [ 411.074663][T20400] 8021q: adding VLAN 0 to HW filter on device bond16 [ 411.143895][T20400] bond17: entered promiscuous mode [ 411.149359][T20400] bond17: entered allmulticast mode [ 411.156953][T20400] 8021q: adding VLAN 0 to HW filter on device bond17 [ 411.176915][T20440] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3964'. [ 411.191121][T20440] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3964'. [ 411.368769][T20451] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3967'. [ 411.403696][T20451] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3967'. [ 411.569169][T20465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.643316][T20472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3971'. [ 411.714043][T20472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3971'. [ 411.743915][T20475] syzkaller0: entered promiscuous mode [ 411.749449][T20475] syzkaller0: entered allmulticast mode [ 411.855754][T20483] netlink: 'syz.5.3975': attribute type 7 has an invalid length. [ 414.345432][T20483] netlink: 'syz.5.3975': attribute type 7 has an invalid length. [ 414.376395][ T3258] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.397154][ T3258] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.416587][ T3258] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.452958][ T3258] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.495365][T20509] openvswitch: netlink: IP tunnel TTL not specified. [ 414.534715][T20513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3980'. [ 414.592958][T20518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3981'. [ 414.621918][T20513] : entered promiscuous mode [ 414.833463][T20529] team0: Port device team_slave_0 removed [ 414.987177][T20548] netlink: 'syz.0.3989': attribute type 39 has an invalid length. [ 415.010666][T20549] block nbd0: Unsupported socket: should be TCP or UNIX. [ 415.071929][T20551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3990'. [ 415.072967][T20552] netlink: 'syz.0.3989': attribute type 39 has an invalid length. [ 415.207677][T20563] openvswitch: netlink: Multiple metadata blocks provided [ 415.288416][T20562] nbd: must specify an index to disconnect [ 415.329298][T20562] netlink: 'syz.2.3992': attribute type 19 has an invalid length. [ 415.428336][T20570] netlink: 'syz.1.3996': attribute type 29 has an invalid length. [ 415.445600][T20570] netlink: 'syz.1.3996': attribute type 29 has an invalid length. [ 415.594082][T20582] 8021q: VLANs not supported on gre0 [ 415.795489][T20594] veth1_to_bond: entered allmulticast mode [ 415.837380][T20600] tipc: Started in network mode [ 415.856236][T20600] tipc: Node identity ac14142f, cluster identity 4711 [ 415.873115][T20600] tipc: Enabling of bearer rejected, failed to enable media [ 415.899835][T20594] veth1_to_bond: left allmulticast mode [ 416.076504][T20613] __nla_validate_parse: 4 callbacks suppressed [ 416.076523][T20613] netlink: 288 bytes leftover after parsing attributes in process `syz.0.4009'. [ 416.221733][ T5637] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 416.244219][ T5637] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 416.252962][ T5637] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 416.276285][ T5637] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 416.288421][ T5637] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 416.529166][T20636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4011'. [ 416.663675][T20645] sctp: [Deprecated]: syz.0.4015 (pid 20645) Use of int in maxseg socket option. [ 416.663675][T20645] Use struct sctp_assoc_value instead [ 417.115573][T20617] lo speed is unknown, defaulting to 1000 [ 417.836311][ T30] audit: type=1804 audit(1780409047.245:12): pid=20688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4021" name="/newroot/19/cgroup.controllers" dev="tmpfs" ino=115 res=1 errno=0 [ 417.859151][ T30] audit: type=1800 audit(1780409047.265:13): pid=20688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4021" name="cgroup.controllers" dev="tmpfs" ino=115 res=0 errno=0 [ 418.115818][T20703] batadv0: entered promiscuous mode [ 418.159121][T20703] macsec1: entered promiscuous mode [ 418.194381][T20703] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 418.248729][T20703] batadv0: left promiscuous mode [ 418.364386][ T5637] Bluetooth: hci6: command tx timeout [ 419.103472][T20617] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.111636][T20617] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.119018][T20617] bridge_slave_0: entered allmulticast mode [ 419.127024][T20617] bridge_slave_0: entered promiscuous mode [ 419.157027][T20617] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.185406][T20617] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.216139][T20617] bridge_slave_1: entered allmulticast mode [ 419.233347][T20617] bridge_slave_1: entered promiscuous mode [ 419.252840][T20757] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4033'. [ 419.283475][T20757] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4033'. [ 419.317506][T20768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4037'. [ 419.474518][T20617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.494518][T20617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.655599][T20617] team0: Port device team_slave_0 added [ 419.671187][T20617] team0: Port device team_slave_1 added [ 419.733498][T20617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.741603][T20617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.777603][T20617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.805072][T20617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.812418][T20617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.840999][T20617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.886467][T20617] hsr_slave_0: entered promiscuous mode [ 419.893907][T20617] hsr_slave_1: entered promiscuous mode [ 419.900398][T20617] debugfs: 'hsr0' already exists in 'hsr' [ 419.906158][T20617] Cannot create hsr debugfs directory [ 420.241717][T20805] openvswitch: netlink: Message has 8 unknown bytes. [ 420.264881][T20805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.440842][ T5637] Bluetooth: hci6: command 0x041b tx timeout [ 422.475557][T20781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 422.487589][T20800] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4039'. [ 422.521752][ T5637] Bluetooth: hci6: command 0x041b tx timeout [ 422.570747][T20617] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 422.632458][T20617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.653933][T20617] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 422.683409][T20617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 422.707545][T20617] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 422.718008][T20826] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.4046'. [ 422.752900][T20617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 422.777785][T20617] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 422.815612][T20617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 423.063162][T20853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4055'. [ 423.094997][T20853] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4055'. [ 423.095901][T20617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.133390][T20853] netlink: 'syz.2.4055': attribute type 10 has an invalid length. [ 423.147541][T20617] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.179206][T20853] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 423.202887][T20853] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 423.296451][ T181] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.303670][ T181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.354149][T16607] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.361360][T16607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.428557][T20866] IPv6: addrconf: prefix option has invalid lifetime [ 423.561435][T20863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.716536][T20876] mac80211_hwsim hwsim26 ÿ: renamed from wlan1 (while UP) [ 423.744079][T20879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4065'. [ 423.754731][T20879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4065'. [ 423.764017][T20879] netlink: 'syz.5.4065': attribute type 3 has an invalid length. [ 423.890482][T20884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4067'. [ 423.944392][T20863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.956390][T20889] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4068'. [ 423.985323][T20617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 424.065455][T20884] netlink: 'syz.0.4067': attribute type 12 has an invalid length. [ 424.098547][T20884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4067'. [ 424.221815][T20863] bond0: (slave netdevsim1): Releasing backup interface [ 424.288775][T20863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.437914][T20908] netlink: 'syz.0.4073': attribute type 21 has an invalid length. [ 424.452224][T20863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.605223][ T5637] Bluetooth: hci6: command 0x041b tx timeout [ 424.892442][T20929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4077'. [ 424.956436][T20930] xt_hashlimit: size too large, truncated to 1048576 [ 424.987744][T19581] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.023916][T20617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.235887][T19579] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.373633][T19581] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.488772][T16610] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.827537][T20617] veth0_vlan: entered promiscuous mode [ 425.865658][T20969] openvswitch: netlink: IP tunnel dst address not specified [ 425.875484][T20617] veth1_vlan: entered promiscuous mode [ 425.997389][T20971] bond18: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 426.039086][T20971] bond18: (slave lo): Enslaving as an active interface with an up link [ 426.074404][T20971] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 426.182386][T20617] veth0_macvtap: entered promiscuous mode [ 426.215098][T20617] veth1_macvtap: entered promiscuous mode [ 426.257976][T20617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.286371][T20617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.328440][T19581] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.342838][T19581] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.355291][T19581] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.387961][T19581] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.418384][T20988] netlink: 'syz.5.4096': attribute type 29 has an invalid length. [ 426.586750][T16607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.606171][T16607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.650991][T19579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.668622][T19579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.685665][ T5649] Bluetooth: hci6: command 0x041b tx timeout [ 426.691823][ T5637] Bluetooth: hci5: command 0x0406 tx timeout [ 427.791403][T21043] __nla_validate_parse: 3 callbacks suppressed [ 427.791422][T21043] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4113'. [ 427.839087][T21048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4117'. [ 427.978808][T21043] bond19 (unregistering): Released all slaves [ 428.005260][T21049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4116'. [ 428.134473][T21060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4118'. [ 428.396741][T21078] xt_l2tp: unknown flags: 10 [ 428.425808][T21078] netlink: 'syz.5.4124': attribute type 10 has an invalid length. [ 428.715490][T21105] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4131'. [ 429.056359][T21126] netlink: 'syz.1.4137': attribute type 1 has an invalid length. [ 429.118975][T21126] netlink: 'syz.1.4137': attribute type 2 has an invalid length. [ 429.157715][T21132] connlabel_mt_check: 23 callbacks suppressed [ 429.157733][T21132] Unknown options in mask b7f2 [ 429.189562][T21126] netlink: 'syz.1.4137': attribute type 1 has an invalid length. [ 429.206750][T21138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4138'. [ 429.215398][T21126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4137'. [ 429.248676][T21139] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4141'. [ 429.263045][T21138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4138'. [ 429.269013][T21125] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 429.331090][T21125] bond3 (unregistering): Released all slaves [ 429.475431][T21145] bond1: entered promiscuous mode [ 429.485782][T21145] bond1: entered allmulticast mode [ 429.680817][T21162] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4146'. [ 429.913205][T21160] syzkaller0: entered promiscuous mode [ 429.929621][T21160] syzkaller0: entered allmulticast mode [ 429.987803][T21173] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004 [ 430.029843][T21167] tipc: Resetting bearer [ 430.145623][T14536] pimreg: left allmulticast mode [ 430.736521][T14536] bond4 (unregistering): (slave geneve2): Releasing active interface [ 430.912867][T14536] bond0 (unregistering): Released all slaves [ 430.926688][T14536] bond1 (unregistering): Released all slaves [ 430.945955][T14536] bond2 (unregistering): Released all slaves [ 430.959648][T14536] bond3 (unregistering): Released all slaves [ 430.973542][T14536] bond4 (unregistering): Released all slaves [ 430.995135][T14536] bond5 (unregistering): (slave veth5): Releasing active interface [ 431.010393][T14536] bond5 (unregistering): Released all slaves [ 431.036473][T14536] bond6 (unregistering): Released all slaves [ 433.685462][T21199] tipc: Enabling of bearer rejected, failed to enable media [ 433.718767][T14536] : left promiscuous mode [ 433.870204][T21210] netlink: 'syz.2.4157': attribute type 1 has an invalid length. [ 433.900099][T21210] __nla_validate_parse: 1 callbacks suppressed [ 433.900114][T21210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4157'. [ 433.944727][T14536] tipc: Disabling bearer [ 433.956997][T14536] tipc: Left network mode [ 433.966026][T21213] netlink: 'syz.5.4159': attribute type 2 has an invalid length. [ 434.015497][T21213] netlink: 'syz.5.4159': attribute type 2 has an invalid length. [ 434.190002][T21225] syzkaller0: entered promiscuous mode [ 434.217913][T21225] syzkaller0: entered allmulticast mode [ 434.320986][T21239] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4166'. [ 434.521151][T21249] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 434.572105][T21252] netlink: 'syz.6.4169': attribute type 8 has an invalid length. [ 434.622167][T21257] netlink: 'syz.5.4170': attribute type 1 has an invalid length. [ 434.853832][T21257] 8021q: adding VLAN 0 to HW filter on device bond2 [ 434.958015][T21260] bond2: (slave geneve2): making interface the new active one [ 434.984787][T21260] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 435.031511][T21267] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4171'. [ 435.105058][T21267] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4171'. [ 435.149286][T21267] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4171'. [ 435.184256][T19581] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 435.339293][T19581] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 435.396170][T19581] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 435.428669][T19581] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 435.537322][T21306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4182'. [ 435.706253][T21314] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4184'. [ 435.859146][T21324] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4186'. [ 435.906562][T21322] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4187'. [ 435.962636][T21322] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4187'. [ 435.976509][T21317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.165620][T21339] netlink: 'syz.5.4189': attribute type 1 has an invalid length. [ 436.212212][T14536] hsr_slave_0: left promiscuous mode [ 436.233218][T14536] hsr_slave_1: left promiscuous mode [ 436.277735][T14536] veth1_macvtap: left promiscuous mode [ 436.287716][T14536] veth1_vlan: left promiscuous mode [ 436.299360][T14536] vet: left promiscuous mode [ 436.468713][T14536] pim6reg (unregistering): left allmulticast mode [ 436.907657][ T181] smc: removing ib device sz1 [ 436.935456][T21341] tipc: Enabling of bearer rejected, failed to enable media [ 436.964011][ T7999] lo speed is unknown, defaulting to 1000 [ 436.985789][ T7999] sz1: Port: 1 Link DOWN [ 437.137270][ T181] smbdirect: ib_dev[sz1] removed [ 437.851808][T21407] netlink: 'syz.1.4209': attribute type 11 has an invalid length. [ 437.891208][T21411] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 438.715418][T21441] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7 [ 439.006098][T21454] netlink: 'syz.6.4218': attribute type 1 has an invalid length. [ 439.051297][T21454] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 439.197270][T21464] __nla_validate_parse: 16 callbacks suppressed [ 439.197289][T21464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4222'. [ 439.253747][T21467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4221'. [ 439.295334][T21467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4221'. [ 439.335216][T21467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4221'. [ 439.687753][T21479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4225'. [ 439.875495][T21500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4230'. [ 439.915265][T21504] IPVS: length: 239 != 24 [ 439.977152][ T1313] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 440.005068][T21500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4230'. [ 440.038130][T21503] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 440.627798][T21535] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4237'. [ 440.665355][T21534] Bluetooth: MGMT ver 1.23 [ 440.723376][T21535] IPVS: length: 8 != 1152 [ 440.726391][T21538] nftables ruleset with unbound chain [ 440.775095][T21538] tipc: Enabling not permitted [ 440.802061][T21538] tipc: Enabling of bearer rejected, failed to enable media [ 440.832928][T21538] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.4240'. [ 440.962461][T21544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4241'. [ 441.041810][T21549] veth0: entered promiscuous mode [ 441.094110][T21548] netlink: 'syz.2.4242': attribute type 3 has an invalid length. [ 441.142066][T21549] netlink: 'syz.2.4242': attribute type 3 has an invalid length. [ 441.179032][T21545] veth0: left promiscuous mode [ 441.384917][T21555] netlink: 'syz.0.4243': attribute type 1 has an invalid length. [ 441.899388][T21584] lo: entered allmulticast mode [ 441.921135][T21584] lo: left allmulticast mode [ 442.048992][ T5632] Bluetooth: hci4: command 0x0406 tx timeout [ 442.170150][T21590] bond4: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 442.226203][T21590] bond4 (unregistering): Released all slaves [ 442.789109][T14536] IPVS: stop unused estimator thread 0... [ 442.937262][T21624] veth9: entered allmulticast mode [ 443.168353][T21633] netlink: 'syz.0.4264': attribute type 5 has an invalid length. [ 443.346215][T21640] macvtap0: entered allmulticast mode [ 443.357801][T21640] veth0_macvtap: entered allmulticast mode [ 443.384482][T21636] netlink: 'syz.1.4257': attribute type 12 has an invalid length. [ 443.495966][T21636] bond4: option primary_reselect: invalid value (255) [ 443.520333][T21636] bond4 (unregistering): Released all slaves [ 443.556513][T21655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.578288][T21655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.624841][T21650] syzkaller0: entered promiscuous mode [ 443.637967][T21650] syzkaller0: entered allmulticast mode [ 443.787548][T21669] netlink: 'syz.2.4274': attribute type 6 has an invalid length. [ 443.796598][T21669] netlink: 'syz.2.4274': attribute type 5 has an invalid length. [ 443.924591][T21675] netlink: 'syz.6.4275': attribute type 1 has an invalid length. [ 444.002580][T21675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.010911][T21667] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.018637][T21667] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.148479][T21675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.181047][T21675] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 444.197896][T21675] bond1: (slave ip_vti0): Error -95 calling set_mac_address [ 444.317176][T21696] __nla_validate_parse: 17 callbacks suppressed [ 444.317195][T21696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4281'. [ 444.482302][T21698] bond19: option lp_interval: invalid value (0) [ 444.504530][T21698] bond19: option lp_interval: allowed values 1 - 2147483647 [ 444.537263][T21713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4286'. [ 444.537397][T21698] bond19 (unregistering): Released all slaves [ 444.650748][T21718] tipc: Started in network mode [ 444.661120][T21718] tipc: Node identity ac14142f, cluster identity 4711 [ 444.688646][T21718] tipc: Enabling of bearer rejected, failed to enable media [ 444.943162][T21733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.051737][T21736] netlink: 248 bytes leftover after parsing attributes in process `syz.5.4292'. [ 445.166806][T21744] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4295'. [ 445.505886][T21755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4298'. [ 446.015741][T21800] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4306'. [ 446.173840][T21809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4309'. [ 446.252065][T21809] bond3: entered promiscuous mode [ 446.279353][T21809] bond3: entered allmulticast mode [ 446.911578][T21862] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4323'. [ 447.096618][T21866] bond4: entered allmulticast mode [ 447.192486][T21879] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4328'. [ 447.219653][T21877] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.227382][T21877] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.347185][T21877] bridge_slave_0: left allmulticast mode [ 447.355889][T21877] bridge_slave_0: left promiscuous mode [ 447.362111][T21877] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.376033][T21877] bridge_slave_1: left allmulticast mode [ 447.382163][T21877] bridge_slave_1: left promiscuous mode [ 447.387918][T21877] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.405450][T21877] bond0: (slave bond_slave_0): Releasing backup interface [ 447.416881][T21882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4329'. [ 447.427504][T21877] bond0: (slave bond_slave_1): Releasing backup interface [ 447.444374][T21877] team0: Port device team_slave_1 removed [ 447.452657][T21877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.464748][T21877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.474985][T21877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.486279][T21877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.506472][T21877] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 447.606765][T21866] bond4 (unregistering): Released all slaves [ 447.866655][T21897] Bluetooth: MGMT ver 1.23 [ 447.917400][T21899] netlink: 'syz.6.4333': attribute type 1 has an invalid length. [ 448.065857][T21899] 8021q: adding VLAN 0 to HW filter on device bond2 [ 448.509185][T21939] gtp1: entered allmulticast mode [ 448.561254][T21939] team0: Device gtp1 is of different type [ 448.867427][T21958] team0: Device xfrm0 is of different type [ 448.899338][T21957] tipc: Enabling of bearer <‡th:t> rejected, media not registered [ 448.917994][T21959] tipc: Enabling of bearer <‡th:t> rejected, media not registered [ 449.093092][T21978] netlink: 'syz.5.4356': attribute type 11 has an invalid length. [ 449.266154][T16607] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 449.343015][T22002] __nla_validate_parse: 21 callbacks suppressed [ 449.343034][T22002] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4361'. [ 449.677237][T22023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.713071][ T30] audit: type=1804 audit(1780409079.135:14): pid=22028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4370" name="/newroot/238/cgroup.controllers" dev="tmpfs" ino=1224 res=1 errno=0 [ 449.798915][ T30] audit: type=1800 audit(1780409079.135:15): pid=22028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4370" name="cgroup.controllers" dev="tmpfs" ino=1224 res=0 errno=0 [ 449.961805][T21986] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 450.230892][T22055] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4376'. [ 450.327021][T22055] ipvlan2: entered allmulticast mode [ 450.338056][T22055] syz_tun: entered allmulticast mode [ 450.368521][T22067] netlink: 'syz.6.4379': attribute type 13 has an invalid length. [ 450.487161][T22061] netlink: 'syz.6.4379': attribute type 1 has an invalid length. [ 450.629309][T22078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4385'. [ 450.713080][T22075] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4384'. [ 450.763863][T22083] netlink: 'syz.1.4387': attribute type 13 has an invalid length. [ 450.807034][T22083] netlink: 'syz.1.4387': attribute type 58 has an invalid length. [ 450.834909][T22085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4390'. [ 450.841511][T22083] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4387'. [ 450.887708][T22089] nbd: couldn't find a device at index 1048580 [ 451.017113][T22097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4391'. [ 451.114874][T22097] netlink: 'syz.5.4391': attribute type 1 has an invalid length. [ 451.163671][T22097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4391'. [ 451.343036][T22112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4396'. [ 451.423389][T22123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4397'. [ 451.946060][T22151] netlink: 'syz.5.4402': attribute type 21 has an invalid length. [ 451.958226][T22151] netlink: 'syz.5.4402': attribute type 5 has an invalid length. [ 452.074528][T22162] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 452.090648][T22161] netlink: 'syz.1.4409': attribute type 8 has an invalid length. [ 452.287818][ T5649] Bluetooth: hci3: command 0x0406 tx timeout [ 452.714783][T22192] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 452.723244][ T5771] IPVS: starting estimator thread 0... [ 452.852987][T22199] IPVS: using max 28 ests per chain, 67200 per kthread [ 453.038480][T22221] xt_ecn: cannot match TCP bits for non-tcp packets [ 453.083434][T22221] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 453.117433][T22224] netlink: 'syz.0.4429': attribute type 1 has an invalid length. [ 453.261223][T22224] 8021q: adding VLAN 0 to HW filter on device bond19 [ 453.365227][T22224] bond19: (slave bridge6): making interface the new active one [ 453.380565][T22224] bond19: (slave bridge6): Enslaving as an active interface with an up link [ 453.403437][T22242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.467893][T22237] veth11: entered allmulticast mode [ 453.546078][T22244] syzkaller0: entered promiscuous mode [ 453.566616][T22244] syzkaller0: entered allmulticast mode [ 453.684999][T22259] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 453.697788][T22259] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 453.706380][T22259] gretap1: entered promiscuous mode [ 453.723353][T22259] gretap1: entered allmulticast mode [ 453.886363][T22264] netlink: 'syz.6.4439': attribute type 16 has an invalid length. [ 453.938599][T22264] netlink: 'syz.6.4439': attribute type 3 has an invalid length. [ 454.020849][T22264] netlink: 'syz.6.4439': attribute type 1 has an invalid length. [ 454.028744][T22264] netlink: 'syz.6.4439': attribute type 11 has an invalid length. [ 454.368389][T22299] __nla_validate_parse: 80 callbacks suppressed [ 454.368407][T22299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4448'. [ 454.380844][T22300] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.4447'. [ 454.395822][T22296] sctp: [Deprecated]: syz.1.4448 (pid 22296) Use of int in max_burst socket option deprecated. [ 454.395822][T22296] Use struct sctp_assoc_value instead [ 454.428532][T22300] 0ªX¹¦Dö»: renamed from gretap0 [ 454.434624][T22296] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4448'. [ 454.456443][T22300] 0ªX¹¦Dö»: entered allmulticast mode [ 454.558683][T22299] sit0: entered promiscuous mode [ 454.579543][T22308] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4452'. [ 454.601568][T22299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4448'. [ 454.756457][T22305] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4449'. [ 454.853829][T22306] 8021q: adding VLAN 0 to HW filter on device bond3 [ 454.870356][T22306] bridge0: port 3(bond3) entered blocking state [ 454.877272][T22306] bridge0: port 3(bond3) entered disabled state [ 454.888999][T22306] bond3: entered allmulticast mode [ 454.914919][T22306] bond3: entered promiscuous mode [ 455.415293][T19581] bridge_slave_1: left allmulticast mode [ 455.450440][T19581] bridge_slave_1: left promiscuous mode [ 455.476497][T19581] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.530424][T19581] bridge_slave_0: left allmulticast mode [ 455.542504][T19581] bridge_slave_0: left promiscuous mode [ 455.548476][T19581] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.832301][T22369] netlink: 'syz.6.4470': attribute type 8 has an invalid length. [ 456.005845][T19581] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 456.116908][T19581] bond6 (unregistering): (slave ip6gretap2): Releasing active interface [ 456.352157][T19581] team0: Port device geneve1 removed [ 456.699192][T19581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.710470][T19581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.720615][T19581] bond0 (unregistering): Released all slaves [ 456.736345][T19581] bond1 (unregistering): Released all slaves [ 456.750239][T19581] bond2 (unregistering): Released all slaves [ 456.765974][T19581] bond3 (unregistering): Released all slaves [ 456.786672][T19581] bond4 (unregistering): Released all slaves [ 456.800392][T19581] bond5 (unregistering): Released all slaves [ 456.815065][T19581] bond6 (unregistering): Released all slaves [ 456.832318][T22356] hsr0: entered allmulticast mode [ 456.837517][T22356] hsr_slave_0: entered allmulticast mode [ 456.866638][T22356] hsr_slave_1: entered allmulticast mode [ 456.968790][T19581] tipc: Disabling bearer [ 457.003711][T19581] tipc: Left network mode [ 457.228347][T22388] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4475'. [ 457.499827][T22400] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4482'. [ 457.562284][T22400] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4482'. [ 457.579530][T22405] openvswitch: netlink: Actions may not be safe on all matching packets [ 458.512864][T22440] bond0: entered promiscuous mode [ 458.518251][T22440] bond_slave_0: entered promiscuous mode [ 458.546551][T22440] bond_slave_1: entered promiscuous mode [ 458.597751][T22440] batadv0: entered promiscuous mode [ 458.605890][T22440] batadv0: left promiscuous mode [ 458.614307][T22440] bond0: left promiscuous mode [ 458.622492][T22440] bond_slave_0: left promiscuous mode [ 458.628232][T22440] bond_slave_1: left promiscuous mode [ 458.628725][T22448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4495'. [ 458.869845][T19581] hsr_slave_0: left promiscuous mode [ 458.905816][T19581] hsr_slave_1: left promiscuous mode [ 458.967445][T22467] netlink: 'syz.5.4502': attribute type 6 has an invalid length. [ 459.098590][T19581] pim6reg (unregistering): left allmulticast mode [ 459.524111][T19581] team0 (unregistering): Port device team_slave_1 removed [ 459.562855][T19581] team0 (unregistering): Port device team_slave_0 removed [ 459.717585][T19581] team0 (unregistering): Port device dummy0 removed [ 459.807959][T22476] __nla_validate_parse: 2 callbacks suppressed [ 459.807975][T22476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4504'. [ 459.859888][T22477] wg1 speed is unknown, defaulting to 1000 [ 459.981829][T22465] syzkaller0: entered promiscuous mode [ 460.005627][T22465] syzkaller0: entered allmulticast mode [ 462.837390][T22477] wg1 speed is unknown, defaulting to 1000 [ 462.840086][T22502] ip6gre0: Master is either lo or non-ether device [ 462.856052][T22477] wg1 speed is unknown, defaulting to 1000 [ 462.874515][T22477] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 462.904117][T22477] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 462.962966][T22477] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 463.015283][T22477] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 463.107075][T22518] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 463.142854][T22477] wg1 speed is unknown, defaulting to 1000 [ 463.154096][T22520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4513'. [ 463.174428][T22523] netlink: 'syz.1.4514': attribute type 1 has an invalid length. [ 463.189134][T22477] wg1 speed is unknown, defaulting to 1000 [ 463.211594][T19581] IPVS: stop unused estimator thread 0... [ 463.344275][T22477] wg1 speed is unknown, defaulting to 1000 [ 463.375560][T22527] bond4: (slave gretap1): making interface the new active one [ 463.388595][T22527] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 463.447356][T22477] wg1 speed is unknown, defaulting to 1000 [ 463.456075][T22477] wg1 speed is unknown, defaulting to 1000 [ 463.466115][T22477] wg1 speed is unknown, defaulting to 1000 [ 463.498083][T22477] wg1 speed is unknown, defaulting to 1000 [ 463.522593][T22477] wg1 speed is unknown, defaulting to 1000 [ 463.744316][T22550] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 463.748683][T22551] netlink: 'syz.1.4522': attribute type 2 has an invalid length. [ 463.824217][T22553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4523'. [ 463.826684][T22557] netlink: 'syz.6.4521': attribute type 2 has an invalid length. [ 463.864723][T22557] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4521'. [ 463.898241][T22553] bond20: entered promiscuous mode [ 463.904530][T22553] 8021q: adding VLAN 0 to HW filter on device bond20 [ 463.935303][T22555] 8021q: adding VLAN 0 to HW filter on device bond20 [ 463.971252][T22555] bond20: (slave sit1): The slave device specified does not support setting the MAC address [ 463.986929][T22555] bond20: (slave sit1): Error -95 calling set_mac_address [ 464.053050][T22566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4526'. [ 464.108694][T22572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4526'. [ 464.139633][T22571] netlink: 'syz.6.4527': attribute type 1 has an invalid length. [ 464.174498][T22564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4525'. [ 464.298915][T22571] 8021q: adding VLAN 0 to HW filter on device bond3 [ 466.903914][T22573] bond3: (slave geneve2): making interface the new active one [ 466.935669][T22573] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 467.014039][T22583] ip6tnl1: entered allmulticast mode [ 467.086953][T22585] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4531'. [ 467.110068][T22585] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4531'. [ 467.236691][T22595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.566588][T22620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4543'. [ 467.629597][T22623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4544'. [ 467.656630][T22620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4543'. [ 467.790440][T22631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.053767][T22644] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4551'. [ 468.064925][T22644] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4551'. [ 468.255989][T22659] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4557'. [ 468.340367][T22665] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4560'. [ 468.381281][T22665] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4560'. [ 468.827643][T22697] netlink: 'syz.5.4569': attribute type 15 has an invalid length. [ 468.851664][T22697] netlink: 'syz.5.4569': attribute type 15 has an invalid length. [ 468.925001][T22705] netlink: 'syz.6.4572': attribute type 21 has an invalid length. [ 469.011652][T22705] netlink: 'syz.6.4572': attribute type 5 has an invalid length. [ 469.380239][T22740] netlink: 'syz.1.4578': attribute type 21 has an invalid length. [ 469.438606][T22751] netlink: 'syz.2.4582': attribute type 1 has an invalid length. [ 469.455317][T22745] veth3: entered promiscuous mode [ 469.863258][T22779] openvswitch: netlink: IP tunnel dst address not specified [ 470.613569][ T37] nci: nci_ntf_packet: unknown ntf opcode 0x25 [ 470.888132][T22845] openvswitch: netlink: Unknown key attributes 2 [ 471.118567][T22858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 471.137321][T22859] netlink: 'syz.5.4605': attribute type 7 has an invalid length. [ 471.237415][T22822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 471.604066][T22889] netlink: 'syz.2.4615': attribute type 83 has an invalid length. [ 471.789873][T22896] netlink: 'syz.6.4620': attribute type 2 has an invalid length. [ 472.193942][T22915] __nla_validate_parse: 36 callbacks suppressed [ 472.193961][T22915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4627'. [ 472.277132][T22922] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4628'. [ 472.403850][T22924] netlink: 'syz.2.4629': attribute type 2 has an invalid length. [ 472.758406][T22940] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4636'. [ 472.791211][T22940] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4636'. [ 472.800004][T22942] netlink: 45 bytes leftover after parsing attributes in process `syz.1.4635'. [ 472.881227][T22948] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4638'. [ 472.893304][T22948] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4638'. [ 472.907938][T22948] netlink: 'syz.5.4638': attribute type 39 has an invalid length. [ 472.980420][T22951] netlink: 666 bytes leftover after parsing attributes in process `syz.6.4639'. [ 473.256107][T22961] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4643'. [ 473.382811][T22966] netlink: 192 bytes leftover after parsing attributes in process `syz.5.4646'. [ 473.386975][T22967] lo: Caught tx_queue_len zero misconfig [ 473.421080][T22970] netlink: 'syz.0.4648': attribute type 10 has an invalid length. [ 473.443371][T22966] veth0: entered promiscuous mode [ 473.456734][T22964] veth0: left promiscuous mode [ 473.754209][T22979] netlink: 'syz.2.4652': attribute type 1 has an invalid length. [ 473.769847][T22979] netlink: 'syz.2.4652': attribute type 1 has an invalid length. [ 473.892223][T22981] wg1 speed is unknown, defaulting to 1000 [ 473.938040][T22995] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 473.960838][T22995] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 474.365293][T23013] veth13: entered allmulticast mode [ 474.528238][ T5732] wg1 speed is unknown, defaulting to 1000 [ 474.859235][T23038] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 474.991223][T23047] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20000 [ 475.360447][T23078] FAULT_INJECTION: forcing a failure. [ 475.360447][T23078] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 475.377087][T23078] CPU: 1 UID: 0 PID: 23078 Comm: syz.5.4688 Not tainted syzkaller #0 PREEMPT(full) [ 475.377130][T23078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 475.377145][T23078] Call Trace: [ 475.377151][T23078] [ 475.377157][T23078] dump_stack_lvl+0xe8/0x150 [ 475.377182][T23078] should_fail_ex+0x412/0x560 [ 475.377205][T23078] _copy_from_user+0x2d/0xb0 [ 475.377223][T23078] tipc_ioctl+0x165/0x340 [ 475.377247][T23078] ? __pfx_tipc_ioctl+0x10/0x10 [ 475.377269][T23078] ? tomoyo_path_number_perm+0x219/0x630 [ 475.377296][T23078] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 475.377323][T23078] sock_do_ioctl+0x101/0x320 [ 475.377344][T23078] ? __pfx_sock_do_ioctl+0x10/0x10 [ 475.377359][T23078] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 475.377389][T23078] sock_ioctl+0x5c6/0x7f0 [ 475.377407][T23078] ? __pfx_sock_ioctl+0x10/0x10 [ 475.377423][T23078] ? __fget_files+0x2a/0x420 [ 475.377440][T23078] ? __fget_files+0x3a0/0x420 [ 475.377456][T23078] ? __fget_files+0x2a/0x420 [ 475.377477][T23078] ? bpf_lsm_file_ioctl+0x9/0x20 [ 475.377497][T23078] ? __pfx_sock_ioctl+0x10/0x10 [ 475.377511][T23078] __se_sys_ioctl+0xfc/0x170 [ 475.377533][T23078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.377548][T23078] do_syscall_64+0x174/0x580 [ 475.377563][T23078] ? trace_irq_disable+0x3b/0x140 [ 475.377583][T23078] ? clear_bhb_loop+0x40/0x90 [ 475.377614][T23078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.377628][T23078] RIP: 0033:0x7f9da419ce59 [ 475.377645][T23078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.377658][T23078] RSP: 002b:00007f9da50ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.377676][T23078] RAX: ffffffffffffffda RBX: 00007f9da4415fa0 RCX: 00007f9da419ce59 [ 475.377687][T23078] RDX: 0000200000000040 RSI: 00000000000089e1 RDI: 0000000000000003 [ 475.377697][T23078] RBP: 00007f9da50ff090 R08: 0000000000000000 R09: 0000000000000000 [ 475.377706][T23078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.377715][T23078] R13: 00007f9da4416038 R14: 00007f9da4415fa0 R15: 00007ffced955c88 [ 475.377742][T23078] [ 475.830678][T23094] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 475.939410][T23100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.125097][T23106] netlink: 'syz.2.4699': attribute type 4 has an invalid length. [ 476.144327][T23110] FAULT_INJECTION: forcing a failure. [ 476.144327][T23110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.159335][T23110] CPU: 1 UID: 0 PID: 23110 Comm: syz.6.4700 Not tainted syzkaller #0 PREEMPT(full) [ 476.159357][T23110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 476.159366][T23110] Call Trace: [ 476.159374][T23110] [ 476.159381][T23110] dump_stack_lvl+0xe8/0x150 [ 476.159404][T23110] should_fail_ex+0x412/0x560 [ 476.159425][T23110] _copy_to_user+0x31/0xb0 [ 476.159445][T23110] tipc_ioctl+0x288/0x340 [ 476.159468][T23110] ? __pfx_tipc_ioctl+0x10/0x10 [ 476.159490][T23110] ? tomoyo_path_number_perm+0x219/0x630 [ 476.159515][T23110] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 476.159539][T23110] sock_do_ioctl+0x101/0x320 [ 476.159558][T23110] ? __pfx_sock_do_ioctl+0x10/0x10 [ 476.159571][T23110] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 476.159598][T23110] sock_ioctl+0x5c6/0x7f0 [ 476.159617][T23110] ? __pfx_sock_ioctl+0x10/0x10 [ 476.159634][T23110] ? __fget_files+0x2a/0x420 [ 476.159651][T23110] ? __fget_files+0x3a0/0x420 [ 476.159670][T23110] ? __fget_files+0x2a/0x420 [ 476.159688][T23110] ? bpf_lsm_file_ioctl+0x9/0x20 [ 476.159710][T23110] ? __pfx_sock_ioctl+0x10/0x10 [ 476.159725][T23110] __se_sys_ioctl+0xfc/0x170 [ 476.159745][T23110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.159769][T23110] do_syscall_64+0x174/0x580 [ 476.159784][T23110] ? trace_irq_disable+0x3b/0x140 [ 476.159804][T23110] ? clear_bhb_loop+0x40/0x90 [ 476.159821][T23110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.159836][T23110] RIP: 0033:0x7f6be439ce59 [ 476.159852][T23110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.159865][T23110] RSP: 002b:00007f6be530d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 476.159882][T23110] RAX: ffffffffffffffda RBX: 00007f6be4615fa0 RCX: 00007f6be439ce59 [ 476.159893][T23110] RDX: 0000200000000040 RSI: 00000000000089e1 RDI: 0000000000000003 [ 476.159903][T23110] RBP: 00007f6be530d090 R08: 0000000000000000 R09: 0000000000000000 [ 476.159911][T23110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.159919][T23110] R13: 00007f6be4616038 R14: 00007f6be4615fa0 R15: 00007ffd183adab8 [ 476.159940][T23110] [ 476.162248][T23106] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 476.414656][T23114] tipc: Started in network mode [ 476.426234][T23114] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 476.450030][T23114] tipc: Enabled bearer , priority 24 [ 476.464916][T23116] netlink: 'syz.1.4703': attribute type 1 has an invalid length. [ 476.906751][T23143] netlink: 'syz.2.4711': attribute type 1 has an invalid length. [ 476.952073][T23147] pimreg3: entered allmulticast mode [ 477.024506][T23143] 8021q: adding VLAN 0 to HW filter on device bond4 [ 477.212746][T23163] netlink: 'syz.6.4714': attribute type 1 has an invalid length. [ 477.227005][T23163] __nla_validate_parse: 18 callbacks suppressed [ 477.227020][T23163] netlink: 184 bytes leftover after parsing attributes in process `syz.6.4714'. [ 477.244015][T23163] netlink: 'syz.6.4714': attribute type 1 has an invalid length. [ 477.254169][T23163] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4714'. [ 477.264797][T23157] netlink: 'syz.6.4714': attribute type 1 has an invalid length. [ 477.297182][T23157] netlink: 184 bytes leftover after parsing attributes in process `syz.6.4714'. [ 477.319570][T23157] netlink: 'syz.6.4714': attribute type 1 has an invalid length. [ 477.350106][T23168] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4717'. [ 477.362225][T23157] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4714'. [ 477.451557][ T29] tipc: Node number set to 10005162 [ 477.558863][T23178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.608052][T23183] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4721'. [ 477.637911][T23183] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4721'. [ 477.674748][T23183] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4721'. [ 477.691984][T23183] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4721'. [ 477.885816][T23185] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.897945][T23185] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.908610][T23185] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 477.922172][T23204] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4727'. [ 478.082113][T23185] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.093427][T23185] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.104842][T23185] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 478.306077][T23221] sock: sock_set_timeout: `syz.2.4731' (pid 23221) tries to set negative timeout [ 478.407208][T23185] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.433082][T23185] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.465173][T23185] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 478.683617][T23185] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.714365][T23185] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.743419][T23185] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 478.791452][T23243] bond0: entered promiscuous mode [ 479.096914][T19579] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.106167][T19579] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 479.119638][T19579] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 479.165841][T19579] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.180417][T19579] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 479.188893][T19579] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 479.250434][T19579] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.261289][T19579] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 479.269604][T19579] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 479.410562][T19579] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.426176][T19579] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 479.448405][T19579] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 479.975575][T23320] netlink: 'syz.6.4761': attribute type 1 has an invalid length. [ 480.093699][T23325] xt_TPROXY: Can be used only with -p tcp or -p udp [ 480.134812][T23332] netlink: 'syz.6.4764': attribute type 1 has an invalid length. [ 480.768046][T23356] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 481.181574][T23387] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 481.197820][T23387] netlink: 'syz.0.4782': attribute type 1 has an invalid length. [ 481.266134][T23391] sock: sock_set_timeout: `syz.5.4784' (pid 23391) tries to set negative timeout [ 481.774881][T23418] team_slave_1: Caught tx_queue_len zero misconfig [ 482.238009][T23436] __nla_validate_parse: 10 callbacks suppressed [ 482.238026][T23436] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4796'. [ 482.774910][T23466] openvswitch: netlink: IPv4 tunnel dst address is zero [ 482.775330][T23462] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 482.843951][T23441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4797'. [ 482.910565][T23463] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 482.943791][T23469] ip6gre0: Master is either lo or non-ether device [ 483.315672][T23481] vlan2: entered allmulticast mode [ 483.346209][T23481] hsr0: entered allmulticast mode [ 483.370772][T23481] hsr_slave_0: entered allmulticast mode [ 483.675661][T23503] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4812'. [ 483.829646][T23508] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4815'. [ 484.080434][T23515] netlink: 'syz.6.4818': attribute type 1 has an invalid length. [ 484.252102][T23515] 8021q: adding VLAN 0 to HW filter on device bond4 [ 484.399579][T23529] bond4: (slave gretap1): making interface the new active one [ 484.434153][T23529] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 484.505434][T23545] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4826'. [ 484.729415][T23554] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4828'. [ 484.916402][T23564] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 484.931384][T23565] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4832'. [ 484.942646][T23565] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4832'. [ 485.144513][T23579] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.183668][T23579] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4836'. [ 485.317475][T23591] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4840'. [ 485.888861][T23612] syzkaller0: entered promiscuous mode [ 485.897372][T23612] syzkaller0: entered allmulticast mode [ 487.103514][T23676] netlink: 'syz.2.4867': attribute type 83 has an invalid length. [ 487.219525][T23683] syzkaller0: entered promiscuous mode [ 487.227835][T23683] syzkaller0: entered allmulticast mode [ 487.287777][T23689] set match dimension is over the limit! [ 487.472870][T23700] __nla_validate_parse: 2 callbacks suppressed [ 487.472888][T23700] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4874'. [ 487.493633][T23699] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 487.514953][T23700] netlink: 216 bytes leftover after parsing attributes in process `syz.6.4874'. [ 487.526388][T23700] netlink: 'syz.6.4874': attribute type 2 has an invalid length. [ 487.713312][T23711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4877'. [ 487.782721][T23711] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 487.806421][T23713] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4879'. [ 487.931465][T23720] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.4880'. [ 487.954235][T23717] bond0: (slave bond_slave_0): Releasing backup interface [ 487.994214][T23720] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 488.111184][T23702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4875'. [ 488.120816][ T5637] Bluetooth: hci1: command 0x0406 tx timeout [ 488.127048][ T5630] Bluetooth: hci2: command 0x0405 tx timeout [ 488.433349][T23733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4884'. [ 488.696200][T23743] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4887'. [ 488.719563][T23743] gretap0: entered promiscuous mode [ 489.090991][T23768] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4894'. [ 489.177798][T23765] lo: Caught tx_queue_len zero misconfig [ 489.261390][T23736] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 489.452641][T23783] netlink: 'syz.5.4898': attribute type 2 has an invalid length. [ 489.500811][T23786] netlink: 'syz.1.4899': attribute type 1 has an invalid length. [ 489.684695][T23790] pimreg3: entered allmulticast mode [ 489.781737][T23804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4904'. [ 489.801872][ T5649] Bluetooth: hci6: command 0x041b tx timeout [ 490.379713][T23828] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 490.403695][T23828] veth3: entered promiscuous mode [ 492.623643][T23794] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 492.831365][T23836] syzkaller1: entered promiscuous mode [ 492.855875][T23836] syzkaller1: entered allmulticast mode [ 493.598676][T23888] __nla_validate_parse: 6 callbacks suppressed [ 493.598693][T23888] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4926'. [ 493.797025][T23898] netlink: 'syz.6.4930': attribute type 1 has an invalid length. [ 494.000981][T23907] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.008597][T23907] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.211796][T23916] netlink: 666 bytes leftover after parsing attributes in process `syz.5.4935'. [ 494.303182][T23918] netlink: 'syz.2.4936': attribute type 1 has an invalid length. [ 494.356591][T23919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4936'. [ 494.442401][T23918] bond5: entered promiscuous mode [ 494.447914][T23918] 8021q: adding VLAN 0 to HW filter on device bond5 [ 494.455958][T23919] bond5: entered allmulticast mode [ 494.524849][T23933] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4940'. [ 494.572469][T23932] netlink: 'syz.1.4939': attribute type 12 has an invalid length. [ 494.598766][T23932] netlink: 'syz.1.4939': attribute type 1 has an invalid length. [ 494.680476][T23939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4942'. [ 495.336675][T23969] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4952'. [ 495.382122][T23973] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4954'. [ 495.533058][T23981] netlink: 184 bytes leftover after parsing attributes in process `syz.6.4957'. [ 495.588147][T23981] vlan0: Caught tx_queue_len zero misconfig [ 495.724612][T23981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.187689][T24039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4969'. [ 497.356875][T24046] netlink: 'syz.6.4968': attribute type 1 has an invalid length. [ 497.618032][T24052] netlink: 'syz.6.4968': attribute type 1 has an invalid length. [ 497.627557][T24052] netlink: 228 bytes leftover after parsing attributes in process `syz.6.4968'. [ 497.789252][T24046] 8021q: adding VLAN 0 to HW filter on device bond5 [ 497.821475][T24048] bond5: (slave gretap2): making interface the new active one [ 497.830269][T24048] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 498.158389][T24060] netlink: 'syz.1.4971': attribute type 3 has an invalid length. [ 499.205093][T24084] set match dimension is over the limit! [ 500.378856][T24118] __nla_validate_parse: 2 callbacks suppressed [ 500.378874][T24118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4986'. [ 500.822032][T24120] syzkaller0: entered promiscuous mode [ 500.827555][T24120] syzkaller0: entered allmulticast mode [ 500.838130][T24120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4988'. [ 500.847125][T24120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4988'. [ 501.025344][T24130] batadv_slave_0: Caught tx_queue_len zero misconfig [ 501.045734][T24137] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4993'. [ 501.457183][ T1313] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 502.074138][T24167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4999'. [ 506.163578][T24175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5001'. [ 506.186575][T24175] netlink: 'syz.2.5001': attribute type 7 has an invalid length. [ 506.195643][T24175] netlink: 'syz.2.5001': attribute type 8 has an invalid length. [ 506.203945][T24175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5001'. [ 506.335026][T24176] xt_l2tp: v2 sid > 0xffff: 1114112 [ 506.351034][T24176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5000'. [ 506.360771][T24176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5000'. [ 506.396875][T24182] sctp: [Deprecated]: syz.6.5002 (pid 24182) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.396875][T24182] Use struct sctp_sack_info instead [ 506.413868][T24182] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20003 [ 507.059236][T24201] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.066534][T24201] bridge0: port 2(bridge_slave_1) entered listening state [ 507.074027][T24201] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.081283][T24201] bridge0: port 1(bridge_slave_0) entered listening state [ 507.083322][T24205] netlink: 'syz.1.5010': attribute type 1 has an invalid length. [ 507.096163][T24205] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5010'. [ 507.100796][T24207] netlink: 67 bytes leftover after parsing attributes in process `syz.6.5009'. [ 507.107758][T24205] netlink: 'syz.1.5010': attribute type 8 has an invalid length. [ 507.252971][T24201] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 507.271994][T24201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.328985][T24202] gretap1: entered promiscuous mode [ 508.870222][T24238] netlink: 'syz.1.5019': attribute type 10 has an invalid length. [ 508.955248][T24238] ipvlan0: entered allmulticast mode [ 508.960702][T24238] veth0_vlan: entered allmulticast mode [ 508.968647][T24238] team0: Device ipvlan0 failed to register rx_handler [ 508.997524][T24243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5018'. [ 509.026456][T24243] 8021q: adding VLAN 0 to HW filter on device bond21 [ 509.188414][T24253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5021'. [ 509.214749][T24247] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5020'. [ 509.224261][T24250] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5020'. [ 509.881794][T24268] netlink: 'syz.2.5026': attribute type 11 has an invalid length. [ 509.889705][T24268] netlink: 'syz.2.5026': attribute type 11 has an invalid length. [ 510.345062][T24286] wg1 speed is unknown, defaulting to 1000 [ 510.837850][T24297] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 511.618181][T24319] IPv6: sit1: Disabled Multicast RS [ 511.657202][T24319] sit1: entered allmulticast mode [ 511.676980][T24330] netlink: 'syz.1.5045': attribute type 11 has an invalid length. [ 511.723242][T24331] xt_hashlimit: size too large, truncated to 1048576 [ 512.123157][T24341] __nla_validate_parse: 136 callbacks suppressed [ 512.123176][T24341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5047'. [ 512.344835][T24323] veth1_to_bond: entered allmulticast mode [ 512.384436][T24323] veth1_to_bond: left allmulticast mode [ 512.572286][T24351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5049'. [ 512.795741][T24351] hsr_slave_1 (unregistering): left promiscuous mode [ 513.234013][T24375] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5055'. [ 514.190469][ T9] IPVS: starting estimator thread 0... [ 514.338698][T24400] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5062'. [ 514.348724][T24400] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5062'. [ 514.360322][T24400] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 514.369900][T24397] IPVS: using max 29 ests per chain, 69600 per kthread [ 514.493613][T24405] x_tables: duplicate underflow at hook 1 [ 514.500372][T24405] bond0: Caught tx_queue_len zero misconfig [ 514.583586][T24409] openvswitch: netlink: Multiple metadata blocks provided [ 514.800789][T24417] netlink: 'syz.2.5068': attribute type 1 has an invalid length. [ 514.813100][T24417] netlink: 'syz.2.5068': attribute type 2 has an invalid length. [ 514.827885][T24420] netem: change failed [ 515.091100][T24428] netlink: 'syz.2.5070': attribute type 1 has an invalid length. [ 515.325425][T24437] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5072'. [ 515.334330][T24437] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5072'. [ 515.812269][T24439] syzkaller0: entered promiscuous mode [ 515.817789][T24439] syzkaller0: entered allmulticast mode [ 516.287467][T24457] netlink: 'syz.0.5081': attribute type 7 has an invalid length. [ 516.541263][T24466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5083'. [ 517.390845][T24477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.443815][T24503] netlink: 1096 bytes leftover after parsing attributes in process `syz.1.5096'. [ 518.724288][T24516] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5098'. [ 518.733509][T24516] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5098'. [ 518.967907][T24516] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5098'. [ 518.977787][T24516] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5098'. [ 518.990452][T24516] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5098'. [ 519.616346][T24546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.446635][T24555] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5109'. [ 521.086812][T24575] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5115'. [ 521.311896][T24580] veth0_macvtap: Caught tx_queue_len zero misconfig [ 521.510041][T24580] veth0: mtu less than device minimum [ 521.526514][T24586] syzkaller0: entered promiscuous mode [ 521.532021][T24586] syzkaller0: entered allmulticast mode [ 521.548320][T24588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5120'. [ 522.461593][T24622] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5128'. [ 522.630609][T24625] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 522.887122][T24629] netlink: 'syz.2.5131': attribute type 2 has an invalid length. [ 523.065052][T24629] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 524.680854][T24666] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 524.872648][T24672] veth0: Caught tx_queue_len zero misconfig [ 524.878616][T24672] netlink: 'syz.6.5145': attribute type 3 has an invalid length. [ 525.138655][T24679] __nla_validate_parse: 1 callbacks suppressed [ 525.138673][T24679] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5144'. [ 525.396610][T24689] sctp: [Deprecated]: syz.1.5147 (pid 24689) Use of struct sctp_assoc_value in delayed_ack socket option. [ 525.396610][T24689] Use struct sctp_sack_info instead [ 525.607613][T24692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5151'. [ 526.073388][T24706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5155'. [ 526.077332][T24710] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 526.559124][T24716] syzkaller1: entered promiscuous mode [ 526.584242][T24716] syzkaller1: entered allmulticast mode [ 526.733641][T24728] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5161'. [ 526.804786][T24728] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5161'. [ 526.974561][T24731] tipc: Enabled bearer , priority 0 [ 526.982002][T24731] syzkaller0: entered promiscuous mode [ 526.987512][T24731] syzkaller0: entered allmulticast mode [ 526.997155][T24731] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 527.411251][T24734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5162'. [ 527.421465][T24731] tipc: Resetting bearer [ 527.425290][T24739] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 527.577297][T24730] tipc: Resetting bearer [ 527.617688][T24730] tipc: Disabling bearer [ 527.799149][T24747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5167'. [ 527.994089][T24750] netlink: 'syz.2.5167': attribute type 9 has an invalid length. [ 528.094730][T24765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5172'. [ 528.293693][T24763] erspan0: entered promiscuous mode [ 528.311702][T24763] erspan0: entered allmulticast mode [ 529.563166][T24794] syzkaller0: entered allmulticast mode [ 529.591939][T24801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5185'. [ 530.883373][T24838] sock: sock_timestamping_bind_phc: sock not bind to device [ 531.131447][T24845] netlink: 'syz.6.5203': attribute type 29 has an invalid length. [ 531.144742][T24845] netlink: 'syz.6.5203': attribute type 29 has an invalid length. [ 531.559902][T24856] wg2: Caught tx_queue_len zero misconfig [ 531.614902][T24861] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5212'. [ 531.783984][T24861] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5212'. [ 532.052280][T24870] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 532.213896][T24872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5217'. [ 532.265315][T24876] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5216'. [ 532.274698][T24876] unsupported nlmsg_type 40 [ 532.502244][T24884] netlink: 'syz.2.5221': attribute type 29 has an invalid length. [ 532.642036][T24886] netlink: 'syz.1.5223': attribute type 2 has an invalid length. [ 532.659976][T24886] netlink: 'syz.1.5223': attribute type 2 has an invalid length. [ 532.770840][T24884] netlink: 'syz.2.5221': attribute type 29 has an invalid length. [ 532.779476][T24884] netlink: 'syz.2.5221': attribute type 29 has an invalid length. [ 532.900990][T24893] netlink: 'syz.1.5227': attribute type 29 has an invalid length. [ 532.910659][T24893] netlink: 'syz.1.5227': attribute type 29 has an invalid length. [ 533.133714][T24897] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5228'. [ 533.147357][T24897] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 533.617363][T24915] validate_nla: 1 callbacks suppressed [ 533.617380][T24915] netlink: 'syz.5.5238': attribute type 1 has an invalid length. [ 533.792886][T24915] netlink: 'syz.5.5238': attribute type 1 has an invalid length. [ 534.265119][T24928] netlink: 'syz.0.5244': attribute type 2 has an invalid length. [ 534.278728][T24928] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5244'. [ 534.532736][T24934] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5247'. [ 537.242204][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 537.249428][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 540.232162][T24973] netlink: 'syz.5.5263': attribute type 1 has an invalid length. [ 540.239853][T24974] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5262'. [ 540.265856][T24973] netlink: 'syz.5.5263': attribute type 2 has an invalid length. [ 540.665024][T24983] set match dimension is over the limit! [ 540.687531][T24986] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5268'. [ 541.066416][T24996] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 541.084723][T24996] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5270'. [ 541.305165][T25006] netlink: 'syz.5.5274': attribute type 1 has an invalid length. [ 541.486854][T25006] bond6: (slave geneve3): making interface the new active one [ 541.496512][T25008] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5274'. [ 541.505528][T25006] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 541.515268][ T36] netdevsim netdevsim5 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 541.523772][ T36] netdevsim netdevsim5 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 541.533996][T25008] 8021q: adding VLAN 0 to HW filter on device bond6 [ 541.541124][ T36] netdevsim netdevsim5 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 541.549469][ T36] netdevsim netdevsim5 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 541.906846][T24990] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 542.161931][T25023] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 542.169774][T25023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.179454][T25025] sctp: [Deprecated]: syz.1.5280 (pid 25025) Use of struct sctp_assoc_value in delayed_ack socket option. [ 542.179454][T25025] Use struct sctp_sack_info instead [ 542.435220][T25037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.684574][T25045] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5287'. [ 542.694531][T25045] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 542.899955][T25047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5288'. [ 543.314977][T25055] netlink: 'syz.5.5292': attribute type 1 has an invalid length. [ 543.426999][T25055] 8021q: adding VLAN 0 to HW filter on device bond7 [ 543.445522][T25063] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 543.721532][T25073] pimreg: entered allmulticast mode [ 543.728833][T25073] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5295'. [ 544.028452][T25090] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5299'. [ 544.186718][T25096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5301'. [ 544.195622][T25096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5301'. [ 544.432501][T25100] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 544.444016][ T5648] Bluetooth: hci6: command 0x041b tx timeout [ 544.826748][T25109] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.837016][T25109] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 544.847655][T25109] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 544.857932][T25109] netdevsim netdevsim5 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 544.924336][T25123] syzkaller1: entered promiscuous mode [ 544.930203][T25123] syzkaller1: entered allmulticast mode [ 545.021275][T25109] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.031567][T25109] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 545.041768][T25109] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 545.051651][T25109] netdevsim netdevsim5 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 545.203110][T25125] xt_ecn: cannot match TCP bits for non-tcp packets [ 545.258526][T25127] __nla_validate_parse: 1 callbacks suppressed [ 545.258539][T25127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5311'. [ 545.415160][T25109] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.435563][T25109] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 545.445940][T25109] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 545.455766][T25109] netdevsim netdevsim5 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 545.808853][T25109] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.820470][T25109] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 545.831689][T25109] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 545.843160][T25109] netdevsim netdevsim5 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 546.919946][T25168] team_slave_0: Caught tx_queue_len zero misconfig [ 546.929098][T25168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5324'. [ 547.172268][T25170] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5325'. [ 547.225322][T25172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5326'. [ 547.533142][T25179] netlink: 'syz.0.5329': attribute type 1 has an invalid length. [ 547.627120][T19585] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.637298][T25179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5329'. [ 547.642840][T19585] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 547.646495][T25180] netlink: 'syz.0.5329': attribute type 1 has an invalid length. [ 547.655564][T19585] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 547.662292][T25180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5329'. [ 547.686106][T19585] netdevsim netdevsim5 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 547.884014][T19585] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.892685][T19585] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 547.900950][T19585] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 547.909304][T19585] netdevsim netdevsim5 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 547.918661][T19585] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.926842][T19585] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 548.074817][T19585] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 548.084707][T19585] netdevsim netdevsim5 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 548.299570][T19579] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.320543][T19579] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 548.341604][T19579] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 548.359602][T19579] netdevsim netdevsim5 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 548.546671][T25195] syzkaller0: entered promiscuous mode [ 548.552204][T25195] syzkaller0: entered allmulticast mode [ 548.560007][T25197] openvswitch: netlink: IPv4 tun info is not correct [ 548.726540][T25195] tipc: Enabled bearer , priority 0 [ 548.737441][ T5648] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 548.752423][ T5648] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 548.773012][ T5648] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 548.788890][ T5648] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 548.805230][ T5648] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 549.023460][T25194] tipc: Resetting bearer [ 549.200420][T25194] tipc: Disabling bearer [ 549.600223][T25230] netlink: 808 bytes leftover after parsing attributes in process `syz.1.5341'. [ 549.662808][T25239] xt_CT: You must specify a L4 protocol and not use inversions on it [ 549.678970][T25239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5342'. [ 549.703107][T25242] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5343'. [ 549.703130][T25242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5343'. [ 550.102244][T25247] syzkaller0: entered promiscuous mode [ 550.107845][T25247] syzkaller0: entered allmulticast mode [ 550.132231][T25248] openvswitch: netlink: IP tunnel dst address not specified [ 550.530626][T25260] netlink: 'syz.2.5347': attribute type 15 has an invalid length. [ 550.538502][T25260] IPv6: NLM_F_CREATE should be specified when creating new route [ 550.578552][T25261] sit1: entered promiscuous mode [ 550.583724][T25261] sit1: entered allmulticast mode [ 550.590372][T25262] syzkaller1: entered promiscuous mode [ 550.595936][T25262] syzkaller1: entered allmulticast mode [ 550.609486][T16608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.624848][T16608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.649247][T25202] wg1 speed is unknown, defaulting to 1000 [ 550.781302][T25260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.787216][T25259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.006971][T25269] __nla_validate_parse: 1 callbacks suppressed [ 551.006988][T25269] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5352'. [ 551.173046][ T5649] Bluetooth: hci7: command tx timeout [ 551.231618][T25272] bond18: (slave lo): Releasing backup interface [ 551.238843][T25272] bond18: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 551.255611][T25272] bridge_slave_0: left allmulticast mode [ 551.261313][T25272] bridge_slave_0: left promiscuous mode [ 551.267115][T25272] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.413143][T25272] bridge_slave_1: left allmulticast mode [ 551.418943][T25272] bridge_slave_1: left promiscuous mode [ 551.427196][T25272] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.437271][T25272] bond6: (slave veth0_to_bond): Releasing active interface [ 551.445600][T25272] veth0_to_bond: left promiscuous mode [ 551.452420][T25272] veth0_to_bond: left allmulticast mode [ 551.467237][T25272] bond0: (slave bond_slave_0): Releasing backup interface [ 551.481727][T25272] bond0: (slave bond_slave_1): Releasing backup interface [ 551.600422][T25279] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5356'. [ 551.610388][T25280] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5356'. [ 551.627993][T25272] team0: Port device team_slave_0 removed [ 551.645172][T25272] team0: Port device team_slave_1 removed [ 551.656464][T25272] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 551.679093][T25278] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5356'. [ 552.091964][T25290] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5358'. [ 552.946607][T25296] netlink: 'syz.5.5363': attribute type 1 has an invalid length. [ 552.998919][T25202] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.006215][T25202] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.013753][T25202] bridge_slave_0: entered allmulticast mode [ 553.021038][T25202] bridge_slave_0: entered promiscuous mode [ 553.028889][T25202] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.036627][T25202] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.044013][T25202] bridge_slave_1: entered allmulticast mode [ 553.134701][T25202] bridge_slave_1: entered promiscuous mode [ 553.190970][T25314] xt_hashlimit: size too large, truncated to 1048576 [ 553.223308][T25202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.249012][ T5649] Bluetooth: hci7: command tx timeout [ 553.296260][T25202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.412136][T25321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5368'. [ 553.421058][T25321] netlink: 'syz.2.5368': attribute type 18 has an invalid length. [ 553.428258][T25202] team0: Port device team_slave_0 added [ 553.429043][T25321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5368'. [ 553.441945][T25202] team0: Port device team_slave_1 added [ 553.449832][T25321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5368'. [ 553.458886][T25321] netlink: 'syz.2.5368': attribute type 18 has an invalid length. [ 553.466829][T25321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5368'. [ 553.611532][T25324] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 553.613397][T25325] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 553.638152][T25316] netlink: 192552 bytes leftover after parsing attributes in process `syz.0.5365'. [ 553.638538][T25202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.654550][T25202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.681660][T25202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.695521][T25202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.703190][T25202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.884599][T25202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.918084][T25327] veth0: entered promiscuous mode [ 553.961463][T25327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.979621][T25327] bond0 (unregistering): Released all slaves [ 554.162057][T25202] hsr_slave_0: entered promiscuous mode [ 554.172458][T25202] hsr_slave_1: entered promiscuous mode [ 554.189290][T25202] debugfs: 'hsr0' already exists in 'hsr' [ 554.197469][T25202] Cannot create hsr debugfs directory [ 554.397616][T25326] veth0: left promiscuous mode [ 555.082973][T25354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 555.389936][ T5649] Bluetooth: hci7: command tx timeout [ 556.179199][T25314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 556.251809][T25202] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 556.287417][T25202] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 556.295883][T25202] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 556.312205][T25202] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 556.320297][T25202] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 556.573864][T25202] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 556.736880][T25376] __nla_validate_parse: 2 callbacks suppressed [ 556.736897][T25376] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5378'. [ 556.786430][T25202] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 556.802478][T25202] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 557.200352][T25366] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5378'. [ 557.213501][T25401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5388'. [ 557.222524][T25401] netlink: 'syz.1.5388': attribute type 8 has an invalid length. [ 557.401237][ T5649] Bluetooth: hci7: command tx timeout [ 557.778036][T25202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.799355][T25417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5390'. [ 557.800881][T25202] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.994615][T16608] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.001822][T16608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.017121][T16608] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.024465][T16608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.480281][T25434] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5398'. [ 558.484301][T25435] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5397'. [ 558.659036][T25202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 558.674167][T25202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 558.692540][T25439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.114001][T25453] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5402'. [ 559.344453][T25454] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 560.024781][T25448] infiniband syz0: set active [ 560.057421][T25448] infiniband syz0: added bridge_slave_1 [ 560.064835][T25448] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 560.068878][T25448] infiniband syz0: Couldn't open port 1 [ 560.236034][T25486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5409'. [ 560.294996][T25489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5410'. [ 560.306492][T25448] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 560.324709][T25448] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 560.346396][T25448] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 560.397774][T25448] RDS/IB: syz0: added [ 560.405620][T25448] smc: adding ib device syz0 with port count 1 [ 560.513864][T25448] smc: ib device syz0 port 1 has no pnetid [ 560.757301][T25499] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5413'. [ 560.955490][T25202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.942714][T25530] 8021q: adding VLAN 0 to HW filter on device bond22 [ 561.958981][T25535] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5419'. [ 562.312867][T25542] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.5422'. [ 562.340096][T25202] veth0_vlan: entered promiscuous mode [ 562.358176][T25202] veth1_vlan: entered promiscuous mode [ 562.383399][T25544] xt_l2tp: v2 sid > 0xffff: 1114112 [ 562.490729][T25202] veth0_macvtap: entered promiscuous mode [ 562.517577][T25202] veth1_macvtap: entered promiscuous mode [ 562.606330][T25202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.626094][T25202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.642882][T19585] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.873745][ T1313] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 562.901869][T19585] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.910637][T19585] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.171807][T25556] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5429'. [ 563.190002][T19585] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.377663][T25554] 1ªX¹¦Dö»: left allmulticast mode [ 563.391020][T25554] erspan0: left promiscuous mode [ 563.396025][T25554] erspan0: left allmulticast mode [ 563.614772][T25554] hsr0: left allmulticast mode [ 563.619897][T25554] hsr_slave_0: left allmulticast mode [ 563.625304][T25554] hsr_slave_1: left allmulticast mode [ 563.803980][T25569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5431'. [ 564.030907][T25554] bond1: left promiscuous mode [ 564.035725][T25554] bond1: left allmulticast mode [ 564.048655][T25554] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 564.084267][T19579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.116778][ T12] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.116810][ T12] netdevsim netdevsim5 eth0: unset [1, 2] type 2 family 0 port 6081 - 0 [ 564.116886][ T12] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.116917][ T12] netdevsim netdevsim5 eth1: unset [1, 2] type 2 family 0 port 6081 - 0 [ 564.116946][ T12] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.116967][ T12] netdevsim netdevsim5 eth2: unset [1, 2] type 2 family 0 port 6081 - 0 [ 564.116995][ T12] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.117016][ T12] netdevsim netdevsim5 eth3: unset [1, 2] type 2 family 0 port 6081 - 0 [ 564.132484][T25202] ieee80211 phy49: Selected rate control algorithm 'minstrel_ht' [ 564.319427][ T31] INFO: task syz.3.3863:20001 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 564.545823][ T31] Not tainted syzkaller #0 [ 564.550996][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.561469][ T31] task:syz.3.3863 state:D stack:24600 pid:20001 tgid:19998 ppid:17190 task_flags:0x400140 flags:0x00080002 [ 564.587099][T19579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.591651][ T31] Call Trace: [ 564.654167][ T31] [ 564.687742][ T31] __schedule+0x1821/0x5740 [ 564.722926][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 564.858812][ T31] ? __pfx___schedule+0x10/0x10 [ 564.863794][ T31] ? schedule+0x90/0x360 [ 564.868069][ T31] schedule+0x164/0x360 [ 564.872263][ T31] schedule_preempt_disabled+0x13/0x30 [ 564.877923][ T31] __mutex_lock+0x7f7/0x1550 [ 564.882692][ T31] ? __mutex_lock+0x608/0x1550 [ 564.887520][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 564.893726][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 564.898785][ T31] ? stack_trace_save+0xa9/0x100 [ 564.903743][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 564.909188][ T31] nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 564.915294][ T31] ? kasan_save_track+0x4f/0x80 [ 565.088795][ T31] ? kasan_save_track+0x3e/0x80 [ 565.093718][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 565.098508][ T31] ? __alloc_skb+0x2c1/0x7d0 [ 565.103112][ T31] ? netlink_dump+0x1d8/0xe10 [ 565.107803][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 565.113189][ T31] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 565.119183][ T31] ? genl_rcv_msg+0x5e8/0x7a0 [ 565.124052][ T31] ? netlink_rcv_skb+0x232/0x4b0 [ 565.129016][ T31] ? genl_rcv+0x28/0x40 [ 565.133189][ T31] ? netlink_unicast+0x75c/0x8e0 [ 565.138176][ T31] ? netlink_sendmsg+0x813/0xb40 [ 565.143134][ T31] ? ____sys_sendmsg+0x972/0x9f0 [ 565.148078][ T31] ? ___sys_sendmsg+0x2a5/0x360 [ 565.152931][ T31] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 565.158055][ T31] ? do_syscall_64+0x174/0x580 [ 565.341993][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.348129][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 565.355447][ T31] ? rcu_is_watching+0x15/0xb0 [ 565.360606][ T31] ? trace_kmalloc+0x2a/0xf0 [ 565.365254][ T31] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 565.373905][ T31] genl_dumpit+0x10b/0x1b0 [ 565.378415][ T31] netlink_dump+0x702/0xe10 [ 565.383524][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 565.388620][ T31] ? genl_start+0x499/0x6c0 [ 565.393863][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 565.399126][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 565.407470][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 565.415158][ T31] ? genl_get_cmd+0x522/0x960 [ 565.423731][ T31] ? __pfx_genl_start+0x10/0x10 [ 565.428802][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 565.434414][ T31] ? __pfx_genl_done+0x10/0x10 [ 565.439237][ T31] genl_rcv_msg+0x5e8/0x7a0 [ 565.444379][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.449479][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 565.561928][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 565.567370][ T31] netlink_rcv_skb+0x232/0x4b0 [ 565.572154][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.577186][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 565.582517][ T31] ? down_read+0x270/0x2e0 [ 565.587034][ T31] ? genl_rcv+0xd/0x40 [ 565.591117][ T31] genl_rcv+0x28/0x40 [ 565.595208][ T31] netlink_unicast+0x75c/0x8e0 [ 565.599997][ T31] netlink_sendmsg+0x813/0xb40 [ 565.604780][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.610087][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 565.615051][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 565.620447][ T31] ____sys_sendmsg+0x972/0x9f0 [ 565.625307][ T31] ? __might_fault+0xaf/0x130 [ 565.630001][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 565.635301][ T31] ? import_iovec+0x73/0xa0 [ 565.639814][ T31] ___sys_sendmsg+0x2a5/0x360 [ 565.644496][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 565.649450][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.654669][ T31] ? futex_wake+0x4ac/0x580 [ 565.812239][ T31] ? __fget_files+0x2a/0x420 [ 565.817001][ T31] ? __fget_files+0x3a0/0x420 [ 565.822118][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 565.827123][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 565.833384][ T31] ? rcu_is_watching+0x15/0xb0 [ 565.838218][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.844978][ T31] do_syscall_64+0x174/0x580 [ 565.850258][ T31] ? trace_irq_disable+0x3b/0x140 [ 565.855347][ T31] ? clear_bhb_loop+0x40/0x90 [ 565.860493][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.866430][ T31] RIP: 0033:0x7f9fe6b9ce59 [ 565.871484][ T31] RSP: 002b:00007f9fe7997028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.881637][ T31] RAX: ffffffffffffffda RBX: 00007f9fe6e15fa0 RCX: 00007f9fe6b9ce59 [ 565.891549][ T31] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000004 [ 565.900423][ T31] RBP: 00007f9fe6c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 565.908439][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.041407][ T31] R13: 00007f9fe6e16038 R14: 00007f9fe6e15fa0 R15: 00007ffd4799dbd8 [ 566.050067][ T31] [ 566.053240][ T31] [ 566.053240][ T31] Showing all locks held in the system: [ 566.061196][ T31] 1 lock held by khungtaskd/31: [ 566.066046][ T31] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 566.091198][ T31] 2 locks held by getty/5385: [ 566.109901][ T31] #0: ffff888031da90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 566.122693][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 566.149937][ T31] 3 locks held by kworker/1:4/5732: [ 566.158224][ T31] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 566.170192][ T31] #1: ffffc90004987c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 566.302911][ T31] #2: ffff88802b2f8250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0 [ 566.312996][ T31] 3 locks held by kworker/1:6/5771: [ 566.318207][ T31] 2 locks held by syz.4.3692/19340: [ 566.323402][ T31] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 566.331607][ T31] #1: ffffffff8ec8b180 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 566.342255][ T31] 3 locks held by syz.3.3863/20001: [ 566.347470][ T31] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 566.355774][ T31] #1: ffff8880360596e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 566.367243][ T31] #2: ffffffff8ec8b180 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 566.377738][ T31] 2 locks held by syz.6.5230/24899: [ 566.382940][ T31] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 566.561425][ T31] #1: ffffffff8ec8b180 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 566.572266][ T31] 1 lock held by syz-executor/25202: [ 566.577567][ T31] #0: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 566.588474][ T31] 6 locks held by syz.1.5400/25448: [ 566.593676][ T31] 1 lock held by syz.0.5431/25565: [ 566.598791][ T31] #0: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 566.609945][ T31] [ 566.612306][ T31] ============================================= [ 566.612306][ T31] [ 566.620923][ T31] NMI backtrace for cpu 1 [ 566.620943][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 566.620985][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 566.621008][ T31] Call Trace: [ 566.621022][ T31] [ 566.621037][ T31] dump_stack_lvl+0xe8/0x150 [ 566.621066][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 566.621087][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 566.621107][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 566.621129][ T31] sys_info+0x135/0x170 [ 566.621147][ T31] watchdog+0xfd3/0x1030 [ 566.621175][ T31] ? watchdog+0x1c9/0x1030 [ 566.621200][ T31] kthread+0x389/0x470 [ 566.621220][ T31] ? __pfx_watchdog+0x10/0x10 [ 566.621238][ T31] ? __pfx_kthread+0x10/0x10 [ 566.621258][ T31] ret_from_fork+0x514/0xb70 [ 566.621279][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 566.621296][ T31] ? __switch_to+0xc79/0x1410 [ 566.621319][ T31] ? __pfx_kthread+0x10/0x10 [ 566.621338][ T31] ret_from_fork_asm+0x1a/0x30 [ 566.621371][ T31] [ 566.621377][ T31] Sending NMI from CPU 1 to CPUs 0: [ 566.856123][ C0] NMI backtrace for cpu 0 [ 566.856141][ C0] CPU: 0 UID: 0 PID: 25577 Comm: syz.5.5433 Not tainted syzkaller #0 PREEMPT(full) [ 566.856159][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 566.856169][ C0] RIP: 0010:debug_check_no_obj_freed+0x21b/0x550 [ 566.856194][ C0] Code: 48 89 04 24 4c 8d 7d 18 4c 89 f8 48 c1 e8 03 80 3c 10 00 74 12 4c 89 ff e8 72 75 74 fd 48 ba 00 00 00 00 00 fc ff df 4d 8b 3f <4d> 39 ef 0f 92 c0 4d 39 fc 0f 96 c1 08 c1 75 90 4c 8d 6d 10 4c 89 [ 566.856207][ C0] RSP: 0018:ffffc90005a1f858 EFLAGS: 00000046 [ 566.856222][ C0] RAX: 1ffff1100b1982c0 RBX: 000000000000000b RCX: 0000000000000001 [ 566.856233][ C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc90005a1f7c0 [ 566.856244][ C0] RBP: ffff888058cc15e8 R08: 0000000000000003 R09: 0000000000000004 [ 566.856254][ C0] R10: dffffc0000000000 R11: fffff52000b43ef8 R12: ffffc90018486000 [ 566.856266][ C0] R13: ffffc90018086000 R14: 1ffff1100b1982bd R15: ffff888058721900 [ 566.856278][ C0] FS: 0000000000000000(0000) GS:ffff88812529e000(0000) knlGS:0000000000000000 [ 566.856290][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 566.856301][ C0] CR2: 00007fa3df8eaff8 CR3: 000000003609c000 CR4: 00000000003526f0 [ 566.856315][ C0] Call Trace: [ 566.856321][ C0] [ 566.856333][ C0] remove_vm_area+0x1d3/0x300 [ 566.856356][ C0] ? __pfx_kcov_close+0x10/0x10 [ 566.856382][ C0] vfree+0x63/0x2f0 [ 566.856400][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 566.856425][ C0] ? __pfx_kcov_close+0x10/0x10 [ 566.856451][ C0] kcov_close+0x28/0x50 [ 566.856471][ C0] __fput+0x44f/0xa60 [ 566.856494][ C0] task_work_run+0x1d9/0x270 [ 566.856516][ C0] ? __pfx_task_work_run+0x10/0x10 [ 566.856537][ C0] ? do_exit+0x70a/0x22c0 [ 566.856556][ C0] ? kmem_cache_free+0x182/0x650 [ 566.856577][ C0] ? put_net+0x191/0x260 [ 566.856594][ C0] do_exit+0x70f/0x22c0 [ 566.856612][ C0] ? netlink_unicast+0x7c0/0x8e0 [ 566.856634][ C0] ? cgroup1_freezing+0x20/0x350 [ 566.856654][ C0] ? __pfx_do_exit+0x10/0x10 [ 566.856674][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 566.856701][ C0] do_group_exit+0x21b/0x2d0 [ 566.856719][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 566.856743][ C0] get_signal+0x1284/0x1330 [ 566.856772][ C0] arch_do_signal_or_restart+0xbc/0x840 [ 566.856797][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 566.856824][ C0] ? fd_install+0x94/0x3d0 [ 566.856845][ C0] exit_to_user_mode_loop+0xa9/0x680 [ 566.856860][ C0] ? rcu_is_watching+0x15/0xb0 [ 566.856878][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.856895][ C0] do_syscall_64+0x353/0x580 [ 566.856910][ C0] ? trace_irq_disable+0x3b/0x140 [ 566.856932][ C0] ? clear_bhb_loop+0x40/0x90 [ 566.856950][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.856964][ C0] RIP: 0033:0x7f9da415d68e [ 566.856978][ C0] Code: Unable to access opcode bytes at 0x7f9da415d664. [ 566.856986][ C0] RSP: 002b:00007f9da50bbe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 566.857000][ C0] RAX: 0000000000000024 RBX: 00007f9da50bd6c0 RCX: 00007f9da415d68e [ 566.857011][ C0] RDX: 0000000000000024 RSI: 00007f9da50bc000 RDI: 0000000000000004 [ 566.857021][ C0] RBP: 0000000000000000 R08: 00007f9da50bbf04 R09: 000000000000000c [ 566.857031][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 566.857040][ C0] R13: 00007f9da50bbf58 R14: 00007f9da50bc000 R15: 0000000000000000 [ 566.857058][ C0] [ 567.319907][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.329774][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 567.329800][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 567.329819][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 567.329830][ T31] Call Trace: [ 567.329837][ T31] [ 567.329846][ T31] vpanic+0x56c/0xa60 [ 567.329869][ T31] ? __pfx___schedule+0x10/0x10 [ 567.329893][ T31] ? __pfx_vpanic+0x10/0x10 [ 567.329911][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 567.329938][ T31] panic+0xc5/0xd0 [ 567.329955][ T31] ? __pfx_panic+0x10/0x10 [ 567.329972][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 567.329998][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 567.330021][ T31] watchdog+0x102c/0x1030 [ 567.330050][ T31] ? watchdog+0x1c9/0x1030 [ 567.330077][ T31] kthread+0x389/0x470 [ 567.330096][ T31] ? __pfx_watchdog+0x10/0x10 [ 567.330115][ T31] ? __pfx_kthread+0x10/0x10 [ 567.330135][ T31] ret_from_fork+0x514/0xb70 [ 567.330155][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 567.330171][ T31] ? __switch_to+0xc79/0x1410 [ 567.330195][ T31] ? __pfx_kthread+0x10/0x10 [ 567.330215][ T31] ret_from_fork_asm+0x1a/0x30 [ 567.330246][ T31] [ 567.331650][ T31] Kernel Offset: disabled