last executing test programs: 5.290107558s ago: executing program 0 (id=1551): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0xa, 0x1, 0x0, r0}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x10, &(0x7f0000000200)=""/16, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7c, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000400)='V', 0x1}], 0x1}}], 0x2, 0x4000000) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000006c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x11}}) syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x10, 0x3c, 0x0, @dev, @local, {[@fragment={0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x66}, @srh={0x3b, 0x0, 0x4, 0x0, 0x5, 0x0, 0x8001}]}}}}}, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x2000400c) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r8}, 0x20) 4.669602962s ago: executing program 1 (id=1561): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 75:', @ANYRESHEX], 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x9c, 0xb, 0x0, 0x1, 0x5392, 0xb, 0x9, {0x0, @in6={{0xa, 0x4e60, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={0x14, r5, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20040040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r6, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008080}, 0x4) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) 4.344700201s ago: executing program 1 (id=1566): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x801) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x140, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev, @in=@remote}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x32}, @in=@dev, {}, {0x0, 0x8, 0x0, 0x8000}, {0x0, 0x4000000}, 0x0, 0x1000000, 0xa}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x40, "25cac521"}}]}, 0x140}}, 0x4000080) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x10001, 0x12) sendfile(r2, r1, 0x0, 0xf03a0005) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='freezer.self_freezing\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='>', 0x1}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r5, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_type(r6, &(0x7f00000000c0), 0x9) sendfile(r2, r3, 0x0, 0x10000) 4.196628489s ago: executing program 3 (id=1569): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), r1) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, r3, 0xd34cad49073c667, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x8000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001880)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x5c, r3, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20004000) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="680000000206010800000000000000000100000a11000300686173683a69702c706f7274000000000900020073797a30000000000500010007000000050004000016000005000500020000001c000780050015000000000008001240000000000500140006"], 0x68}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_bcm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1, 0x400, 0xa9, {0x0, 0x2710}, {0x77359400}, {0x4, 0x1, 0x1, 0x1}, 0x1, @can={{0x2, 0x1, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "74036a092ced3f4e"}}, 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x14) sendmmsg$inet_sctp(r8, &(0x7f0000000280)=[{&(0x7f0000000080)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000340)='\x00', 0x1}, {&(0x7f00000000c0)="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", 0xfc}, {&(0x7f0000000380)="e3402721d35d967a3829bcd5082c026528e53198bb796a58af64093248385a512a63bcc0bdc3503fe367efdf8a3e9a18ae3ac4f599ff996b221876ebf488adb4299440f7648ffb142265e6c40cbfb737abff928d32c3fb86b992a9cf271d8e588e4dbb0dd989a34176285554b5bd", 0x6e}, {&(0x7f0000000400)="27681400c411f7a4c43df6c56e843e998af5954f91fc717ea88a0f2d830f3a712f5858f453daf08106fb8d74c971cde30e135231d8ce9e328f750dc67525f21dc9b0f06683a0f10bb9ffb063d4030c5946af34e6140d7790d2ef688ce04de233ce94ff3364c531e87146b21c209c8f8f67c51f4d6cce24ac4b1d28460dc157ec5acc72d876bc28c1cf73e9c82357a5db2222a0a59f99c61cc7d9c11bd331ab259989f44e5acaac0a1f4ca503b7ca82b1eb3933", 0xb3}], 0x4, &(0x7f0000000600)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x0, 0x4, 0x2e}}], 0x38, 0x800}], 0x1, 0x4008080) 4.07235686s ago: executing program 0 (id=1570): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x60, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0xe4ffffff}}]}, {0x59}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="31032cbd7000fbdbdf250b00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) r5 = openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.kill\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @broadcast}, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2, 0x2}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r7, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000014c0)="d480dc19", 0x4}], 0x1}}], 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r9}, 0x20) sendmsg$inet(r8, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/62, 0x1338000, 0x800}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 3.941039221s ago: executing program 3 (id=1572): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001100210527bd7000fbdbdf25fc000003927a2c4b3b79795d7f14f121d300000000000000000000000000000004d2020032000c0015005907350009000000"], 0x34}, 0x1, 0x0, 0x0, 0x4050}, 0x4008040) 3.895572882s ago: executing program 0 (id=1573): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004894}, 0x20000080) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x1000000}}}}}, 0x0) 3.757702884s ago: executing program 0 (id=1575): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="540000001000010029bd7100ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c5af07000f0e0000140003007465616d3000000000000000000000000a0001000180"], 0x54}}, 0x20000014) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000003380)=[{&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000003c0)="04", 0x1}], 0x1, &(0x7f00000005c0)=[@init={0x18, 0x84, 0x0, {0xa051, 0xe, 0x1, 0xffff}}], 0x18}], 0x1, 0x4000004) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) connect$nfc_raw(r1, &(0x7f0000000200)={0x27, r5, 0x0, 0x2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000002500000000760001002500000095000000000000020000000000400000cc44940d77889f0000009500000000000000950000000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280100002f00010000000000fcdbdf250801f2800c00180008ac0f000010000014000100fc00000000000000000000000000000008004400", @ANYRES32=0x0, @ANYBLOB="d90062802400328008004100b20000000800ca00ac1e000108003d00fcffffff0400c58004008a800800a18004000f80c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb07a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26000000100002800c0001"], 0x128}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180)={0x1}, 0x4) 3.756192084s ago: executing program 3 (id=1576): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'vcan0\x00', @random="92c78f007c61"}) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000180)=0x1, &(0x7f00000001c0)=0x4) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000200)=0x6, &(0x7f0000000240)=0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000280)="6423bddd2eec784108c03730f187888e70c8981bea51323ecb2a54e57d1eb2609cad79fe5e6030838e0791faf0ea351d795c0d3d7a721ad00d9f70f217a85c5647a9f8534e34345f30f80643503f51d659c77fa685224918d85fa29b4c6243e2e2fae57a0cca57ae2040be03", 0x6c}], 0x1) r2 = socket(0x2, 0x5, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x100, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa, 0x28}}}}, [@NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "f1063c1b8f"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_SEQ={0x5, 0x4, '4'}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "8f8c7dff05"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9f5f8e3ca703177cdb33b718b1"}]}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "5cbe7b5662ae"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b85dab61eb"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f405d8d18b95047c3261b28973"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "f049f6a7d9a8666f60f3b76ec1"}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "b274341c8b8c18c65655"}]}, 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000540)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000580)=0x18) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f00000005c0)='nl80211\x00', 0x8) bind$netlink(r2, &(0x7f0000000600)={0x10, 0x0, 0x25dfdbfb, 0x80000000}, 0xc) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000640)='vcan0\x00', 0x102, &(0x7f0000000680)={@align=0x7fff, {0x7, 0x5, 0x3, 0x6}}, 0x7, &(0x7f00000006c0), &(0x7f0000000700)=0x9}) write$cgroup_type(r5, &(0x7f0000000780), 0x9) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x44) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000980)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000009c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000a00)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000a40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) getsockopt$inet6_tcp_buf(r5, 0x6, 0x0, &(0x7f0000000b40)=""/233, &(0x7f0000000c40)=0xe9) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001140)={&(0x7f0000000cc0)={0x450, r3, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x413, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @device_b, @initial, {0xf, 0xfff}, @value=@ver_80211n={0x0, 0x77ca, 0x1, 0x3, 0x0, 0x2, 0x1, 0x0, 0x1}}, @val={0x0, 0x5, @random="210cac800c"}, @val={0x1, 0x3, [{0x16, 0x1}, {0x9}, {0xc}]}, @val={0x3, 0x1, 0xba}, @void, @val={0x72, 0x6}, [{0xdd, 0x7b, "a7c23b251fb1fa362cbec9c5303c3c37f0fb7de3833ba48f9ff5b04057f12352044937923710686f88242941fcf4b5da14c29c6d7cca06c637972311c5b215a9fed7a351d4893ae51f2fd577205e5bbe44ec275e6f2e327fd4f0431e44bc236930d20460489ab7e25ba3ea38d43315075b749f08491b415109aa55"}, {0xdd, 0xd7, "5a613e61e9b9559caf25493cc08878aa26708350479f9df6f676f3e0f405988e0291c25a8535983b9eb7746c3630d6c065c99228d176284fb7e91ec8793d87bceade4bcb366139f5c7dca00db4beac85f7272811a125229b1b54399b9ff828a758324611d204f8a187a8d7c380cd21a3b4da357d58ebe866dbf25161f40efc6022693132d8698ae2a98b86e008212390b64430996757e90586d73782c5aaaf4bb64553a9a54485dc97775e8ea77a94f3433037a624d0c86ac745040f3055def139f82ee0877e51dd27c40fda74e9dd7eacdfe917ee67da"}, {0xdd, 0x94, "5cba4bf91c2d9de98f1693826f6f2f977ff7e275f8df802f9a3b223e5096edaf9f4c5f300ff033474a8ad4904853464097a457670a8779a7be06d9e442c39f916d33f041e3a2c56f544c9aa724355abcc9ee789c595bdacca19013484a1f53e3325f5d0a544ba5d722bc5351b670a995b718520c245ebc69d0f7e530e0a1c9e9ed65840a1bbdf7f3f077bd9dbffe861e2e338957"}, {0xdd, 0x54, "9d7ad63e6c924f946a4a225637155fed73653ee16d8afa25ac5fe87e7300d0cf95d428f1638a978e29975484e4c60866beb1e319f053790d8e57eda8ff0a560280fd9393ff137bb1bfe8bc1b68e0431514e144a6"}, {0xdd, 0x95, "c9735ed4ab562167b8c50dcdb4258235cb2e1ff154247b603054a1243c0e18d46ca15525807b3559658ee40df917be13fece8c2f373a671b328478d2ce594fb80576d4c98d5b25c4ca4709e7f8505b4e197ed7bab51d192030777e6158ae6e7ca8bec143aa11a03e610a5c7caa0ad657b42eac0d0dbd587cc50a9ea5f15be30202ae861c98323d6952004bc1c49c6df8c1b2400ca6"}, {0xdd, 0x2e, "c0facabab03acd8fc71326adedfcb5422e7b4438165a93b57479fe233822e67497d4f8ff0bd7a7300609d780522c"}, {0xdd, 0xd1, "7f9c37b409bc42e44374d8260530eaaf1b600a892b5951732e374c13306abd2f8ecf52093b8c6fce462af7e5d0a762884991cf978ca19b23888368893c0c941d4b913a308f716e8d1bd452e3a8b644d0e9f8e6363f072bc1510f271378b432a561ed097b26139faba4231acf2fc6ec9eb9378a517ef4558b5d5d34a9cc2eab4b692a9da296c316fd0985041e6c4c5fbdf9289166492e831329584ba3939cc5ff1a8e6dc832e4e21305790c3cc73e3d27f120efff1a7905ee34258e82059dd9ab5f45c1e441f1d0b2a1fbe64da82270b09d"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x8, 0x101, 0xfffe, 0x7, 0x2]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8001}]]}, 0x450}, 0x1, 0x0, 0x0, 0xc004}, 0x20040000) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001200), r6) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x60, r12, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "07bd2e78d47b635dc9ea20cf5e243113"}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008010}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 3.727617179s ago: executing program 2 (id=1577): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000080) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x1000000}}}}}, 0x0) 3.619771165s ago: executing program 2 (id=1578): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x3, 0x7, 0x1, 0x0, 0x800}]}}}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000012c0)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001380)={0x1, 0x0}, 0x8) r4 = socket(0x10, 0x809, 0x8) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001780), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x200000000000022a, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x58, r5, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe66}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x300}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x20000084) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCGSKNS(r7, 0x894c, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000013c0)={0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x5, 0x13, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x7e}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6c}}, @ldst={0x1, 0x0, 0x3, 0x0, 0x3, 0x10, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0xb}, @alu={0x7, 0x0, 0x7, 0x4, 0x6, 0xffffffffffffffff, 0x8}], &(0x7f0000000280)='GPL\x00', 0x401, 0x1000, &(0x7f00000002c0)=""/4096, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x33, r2, 0x8, &(0x7f0000001300)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001340)={0x1, 0x1, 0x6, 0x7}, 0x10, r3, r9, 0x9, &(0x7f0000001580)=[r10, r11, 0xffffffffffffffff, r12], &(0x7f00000015c0)=[{0x2, 0x2, 0x7, 0x6}, {0x1, 0x1, 0x9, 0x8}, {0x4, 0x2, 0x10, 0x8}, {0x1, 0x1, 0xa}, {0x0, 0x2, 0x7, 0xc}, {0x3, 0x5, 0x6, 0x4}, {0x1, 0x2, 0xb, 0xa}, {0x0, 0x3, 0x7, 0x2}, {0x4, 0x2, 0x6, 0x6}]}, 0x94) r14 = socket(0xa, 0x3, 0x3a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ac0)={{r0, 0xffffffffffffffff}, &(0x7f0000001a40), &(0x7f0000001a80)=r13}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x4, 0x2, &(0x7f00000018c0)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x2}], &(0x7f0000001900)='GPL\x00', 0x6, 0x6e, &(0x7f0000001940)=""/110, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x7, r2, 0x8, &(0x7f00000019c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001a00)={0x3, 0xc, 0x80, 0x5}, 0x10, r3, r13, 0x6, &(0x7f0000001b00)=[r10, r12, r11, r15, r10, r11], &(0x7f0000001b40)=[{0x0, 0x3, 0xe, 0x9}, {0x1, 0x3, 0x9, 0x4}, {0x2, 0x1, 0x8, 0x8}, {0x4, 0x4, 0x9, 0x9}, {0x2, 0x4, 0xc, 0x2}, {0x3, 0x3, 0xd, 0x7}], 0x10, 0x9}, 0x94) setsockopt$MRT6_ADD_MIF(r14, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x81, 0x0, 0x9}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 3.310976205s ago: executing program 2 (id=1579): r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r1 = socket(0x10, 0x80003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000000)={0x0, 0x7, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r3, 0x301, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x404c880) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000540)=0x80) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000840)) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYBLOB="9c8f4aacfb93955b25c14f5e0200ae69be85ea00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0xfffffffffffffcc5) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x64}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70000e1d6d1bf00850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r7], 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) close(0x3) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r9) 3.252711291s ago: executing program 1 (id=1580): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r0, 0x0, &(0x7f0000000a80)) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000400)={0x75b, 0x0}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x5e21, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) r4 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @remote}, {0xa, 0x4e1f, 0x0, @dev}, 0x0, {[0x1fffffff, 0x0, 0x0, 0x897, 0x0, 0x0, 0x6]}}, 0x5c) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x0, 0x178, 0xc, 0xd0, 0x178, 0x1e8, 0x258, 0x258, 0x1e8, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x4, 0x3}}}, {{@ipv6={@private2, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'hsr0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 'team_slave_1\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffe}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x42}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) socketpair(0x15, 0x6, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x1) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000440)=r1, 0x4) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000180)=@buf={0x2e, &(0x7f0000000040)="82d516d4a2ab84309b630a5488134053bfd50eb7d116d2bbffd742ad0d5d532ec80127dc225db22a7d76ce9dd931"}) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r10, 0x29, 0x4a, &(0x7f0000000480)=0x1000002, 0x4) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 2.368576808s ago: executing program 1 (id=1582): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYRES64, @ANYRES8], 0x50) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0xb, 0x5, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0xfffffffd, 0x0, 0x80c, 0x8, 0x0, 0x43b4, 0x40000002]}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) syz_open_procfs$namespace(r5, &(0x7f0000000240)='ns/pid_for_children\x00') r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000007c0000000000000a64000000060a0b0400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000340100000000800024000000000080001400000001508000440000000020900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r8 = accept(r6, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008800) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000200025a729bd7000fddbdf250a0000cdff00000102000100080018"], 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000070000109000000841d02fad7fa6112be10000000000007000000", @ANYRES64=r0, @ANYBLOB="0c00028006"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.218755827s ago: executing program 1 (id=1583): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x540, 0x0, 0x540, 0x540, 0x540, 0x1d0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf250f000000080034002400080008000300", @ANYRES32=r2, @ANYBLOB="050033"], 0x2c}}, 0x80) r3 = socket(0x1, 0x5, 0x1) getsockopt$sock_cred(r3, 0x1, 0x4c, 0x0, &(0x7f00000001c0)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r3) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r4, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9b}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x97}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3a}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0xd4}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) close(0x3) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000009c0)=ANY=[@ANYBLOB="f003000043000701fefffffffcdbdf25037c00000400de80d6030180e984a5de73a3896c5998c803d680c403a180be03bd800400188004003580490b1ef2fdf447069ebadd7552c021747f1763d151fa1dd93114a452e2b71ae2e4f4505ff9c6b0d48ae0e69c60c07ca28345542dd17d3ff5f15ca80a4747a77f36510dd243cf59161bb8ad7225f6c34053d251bac6762724de29fc6aacf2ac4ead35f95037657e2e75ed8893fa0c6f3c94e69c10a963769efb3c86fd50932aa089ff5ef0ad04ffc60773af4dbc8b3f3b8489252ff2f8315db60c0400418008", @ANYRES32], 0x3f0}, 0x1, 0x0, 0x0, 0x40881}, 0x8002) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="ec03030a8258b8"], 0xb) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r7, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) setsockopt$inet_int(r7, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) getsockopt$inet_opts(r7, 0x0, 0x9, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10) write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 1.940122055s ago: executing program 4 (id=1585): socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) r1 = socket(0x10, 0x803, 0x6) r2 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000180c2000000080047f800240000e00002119078000000000000000089035544041a93000000000000009078"], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6}, 0x10) sendto$packet(r1, &(0x7f0000000000)="ea92d2c62f06af98e71261176511dcf7709bbb3a5a39d941a80a2a591af8233a90d53fd2179462db29467833ae0bb191be3e67ba1efa029d159e67a72536154d1efd482ead06ba4e3e881e43bd1274f831a670d6870d37034a097fcc2a7f20a8c1a9a1addcc623d86dfd4fee46a72afde3b0e0e2d635102c91ad9bd54cd108bf7a020dc87f02c4851cd2ee6308ff97882e82d192be7d21c3ef9f553c33247f9e204eb66812fc464434615447674400"/184, 0xb8, 0x20008084, &(0x7f00000001c0)={0x11, 0x3, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) getsockname$packet(r1, 0x0, &(0x7f00000000c0)) r7 = socket$unix(0x1, 0x1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'pimreg1\x00', 0x8000}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xfff3, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x0, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x404c000}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'geneve0\x00', 0x2}) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000280)={0x5e, @empty, 0x4e22, 0x2, 'wlc\x00', 0x28, 0x2, 0x36}, 0x2c) 1.62377918s ago: executing program 4 (id=1586): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004894}, 0x20000080) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x1000000}}}}}, 0x0) 1.597885373s ago: executing program 4 (id=1587): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000740)=""/221, 0xdd}], 0x1, &(0x7f0000003d00)=""/4080, 0xff0}, 0x2) close(r0) socket(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xffffffde}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380), 0x0, 0x4000000}], 0x32, 0x400c0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.51159974s ago: executing program 4 (id=1588): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x29, 0x2, 0x9) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="020600000000000004"], 0x40) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) sendmmsg$inet6(r2, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200001a00000000000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000cd00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200001a00000000000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000cd00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c000780060005"], 0x38}}, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x4, 0x1, 0x3, 0x3, 0x6}, &(0x7f0000010340)={0xfffffffffffffffe, 0x100, 0x3, 0x7, 0xb51, 0x4, 0xb}, &(0x7f0000010380)={0x8000000000000000, 0x7, 0x3, 0x8000000000000001, 0x4, 0x81, 0x6, 0x9}, &(0x7f00000103c0), &(0x7f0000010440)={&(0x7f0000010400)={[0xa]}, 0x8}) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000010280)={@l2tp6={0xa, 0x0, 0x6, @empty, 0x7fffffff, 0x2}, {&(0x7f0000000000)=""/53, 0x35}, &(0x7f0000000040)}, 0xa0) (async) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000010280)={@l2tp6={0xa, 0x0, 0x6, @empty, 0x7fffffff, 0x2}, {&(0x7f0000000000)=""/53, 0x35}, &(0x7f0000000040)}, 0xa0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000010240)={&(0x7f0000000180), 0xc, &(0x7f0000010200)={&(0x7f00000001c0)={0x10, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x453, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601010000000000030000050000000900020073797a30000000000500010007000000050005000a0000001400078008000840000000d108000b4000000003050004000300000011000300686173683a69702c6d61726b00000000"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000010500), r5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000010540)={'wlan0\x00', 0x0}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000010680)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @bcast, @bcast]}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000010640)={&(0x7f00000104c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000010600)={&(0x7f0000010580)={0x7c, r7, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x4000090) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000010480)={@empty, 0x80, 0x0, 0x3, 0x1, 0x9, 0x7}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000010480)={@empty, 0x80, 0x0, 0x3, 0x1, 0x9, 0x7}, 0x20) 608.33634ms ago: executing program 2 (id=1589): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x5) unshare(0xe060400) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'syz_tun\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x200000c, 0x12, r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0xd4}}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, r6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r2, r4, 0x25, 0x0, @void}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000200)) syz_emit_ethernet(0x281, &(0x7f0000000080)=ANY=[], 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1359ec44a1bedf304d3ad6c4d0d43df604000000e27f00000200000000000000306452c34e093596b56200dd505a96cd9c59", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r7, 0x0, 0x0}, 0x20) 534.975931ms ago: executing program 4 (id=1590): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x30}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000040)='./file0\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r4, 0x1, 0x123, 0x234}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 529.775427ms ago: executing program 3 (id=1591): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 75:', @ANYRESHEX], 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x9c, 0xb, 0x0, 0x1, 0x5392, 0xb, 0x9, {0x0, @in6={{0xa, 0x4e60, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={0x14, r5, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20040040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r6, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008080}, 0x4) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) 492.180021ms ago: executing program 0 (id=1592): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8000000180081064e81f782db44b904021d080006007c09e8f655810a001500090014260b3cfc1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ed7a7cef4090000001fb791643a45e4ce1b14d6d909e42df3fa30dfe1d9d322fe7c9f8775730d16a4683f00000040fad95667e006dcdf63951f215ce3bb9a1009d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97019338705e8a1e2532bcfd436fa036d1a66665", 0xdf}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x274, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x6, 0x1, 0x1, 0x0, 0x84}]}]}], {0x14}}, 0x29c}}, 0x4048010) close(r2) r5 = socket$unix(0x1, 0x5, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r6, 0x0, 0xcf, 0xfffffffffffffffc, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x2c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0xd, &(0x7f0000000240)=@raw=[@exit, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x8}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000003c0)=""/4096, 0x41000, 0x70, '\x00', r7}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r10, 0x8) 355.760816ms ago: executing program 4 (id=1593): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 75:', @ANYRESHEX], 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x9c, 0xb, 0x0, 0x1, 0x5392, 0xb, 0x9, {0x0, @in6={{0xa, 0x4e60, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={0x14, r5, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20040040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r6, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008080}, 0x4) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) 351.650284ms ago: executing program 2 (id=1594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac", @ANYRES32, @ANYRES64=r0], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20802, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x1e, 0x2, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'dummy0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffd, @null, @rose={'rose', 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r7, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, [@bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xfffbfffc, 0x8, 0x1, 0x6}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 324.976415ms ago: executing program 1 (id=1595): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0xa, 0x1, 0x0, r0}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x10, &(0x7f0000000200)=""/16, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7c, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000400)='V', 0x1}], 0x1}}], 0x2, 0x4000000) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000006c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x11}}) syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x10, 0x3c, 0x0, @dev, @local, {[@fragment={0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x66}, @srh={0x3b, 0x0, 0x4, 0x0, 0x5, 0x0, 0x8001}]}}}}}, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x2000400c) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r9}, 0x20) 110.86074ms ago: executing program 3 (id=1596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x125002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000206030000000000000000000a0000000d000300686173683a6e657400000000050001000700000005000500020000000900020073797a3000000000050004000000000014000780080008400000007808000640"], 0x5c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0xc100) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, r4, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x200, 0x10}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "4ccf3d74b61ddcf02f44a98d18ef2493"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "d320d78cde53be14bde77259ae51968c"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "04009dc313140631187f5f07ce93d3b4"}]}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x10) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x9) close(0x3) 37.626753ms ago: executing program 3 (id=1597): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004894}, 0x20000080) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x1000000}}}}}, 0x0) 32.444043ms ago: executing program 2 (id=1598): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xffffffde}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380), 0x0, 0x4000000}], 0x32, 0x400c0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 0s ago: executing program 0 (id=1599): r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r1 = socket(0x10, 0x80003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000000)={0x0, 0x7, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r3, 0x301, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x404c880) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000540)=0x80) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000840)) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYBLOB="9c8f4aacfb93955b25c14f5e0200ae69be85ea00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0xfffffffffffffcc5) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x64}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70000e1d6d1bf00850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32=r7], 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) close(0x3) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r9) kernel console output (not intermixed with test programs): ry [ 78.365274][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.381205][ T5842] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.399971][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.411261][ T5842] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.419471][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.431472][ T5842] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.439550][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.449404][ T5842] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.499430][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.510068][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.520998][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.531322][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.539218][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.549550][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.557726][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.567105][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.649848][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.660565][ T5850] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.669537][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.678992][ T5850] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.692959][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.702995][ T5850] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.711265][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.721886][ T5850] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.829095][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.840982][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.849442][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.860357][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.868360][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.878432][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.897190][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.906014][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.974524][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.024936][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.034862][ T5851] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.042821][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.053046][ T5851] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.069444][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.080621][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.091388][ T5851] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.099475][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.112284][ T5851] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.127895][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.171238][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.178629][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.203796][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.210945][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.222515][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.252458][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.282703][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.289835][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.317081][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.327952][ T178] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.335045][ T178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.383801][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.390919][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.422305][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.429585][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.447397][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.507133][ T5852] Bluetooth: hci4: command tx timeout [ 79.512945][ T5856] Bluetooth: hci0: command tx timeout [ 79.513572][ T5848] Bluetooth: hci2: command tx timeout [ 79.519160][ T5855] Bluetooth: hci1: command tx timeout [ 79.523995][ T5840] Bluetooth: hci3: command tx timeout [ 79.539810][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.580160][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.587339][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.605997][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.637185][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.644358][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.688171][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.729739][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.736931][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.793200][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.800439][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.901220][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.013986][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.178266][ T5842] veth0_vlan: entered promiscuous mode [ 80.203278][ T5842] veth1_vlan: entered promiscuous mode [ 80.273087][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.387426][ T5842] veth0_macvtap: entered promiscuous mode [ 80.438017][ T5842] veth1_macvtap: entered promiscuous mode [ 80.469000][ T5850] veth0_vlan: entered promiscuous mode [ 80.506084][ T5850] veth1_vlan: entered promiscuous mode [ 80.525235][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.544502][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.563596][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.581444][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.602672][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.612801][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.630620][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.639440][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.706362][ T5850] veth0_macvtap: entered promiscuous mode [ 80.742782][ T5850] veth1_macvtap: entered promiscuous mode [ 80.754367][ T5838] veth0_vlan: entered promiscuous mode [ 80.805466][ T5837] veth0_vlan: entered promiscuous mode [ 80.828006][ T5838] veth1_vlan: entered promiscuous mode [ 80.842005][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.850785][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.869965][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.879146][ T5837] veth1_vlan: entered promiscuous mode [ 80.890644][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.924568][ T5851] veth0_vlan: entered promiscuous mode [ 80.952160][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.961027][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.972759][ T5838] veth0_macvtap: entered promiscuous mode [ 80.981249][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.992719][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.993190][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.011442][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.025057][ T5851] veth1_vlan: entered promiscuous mode [ 81.043285][ T5838] veth1_macvtap: entered promiscuous mode [ 81.114309][ T5837] veth0_macvtap: entered promiscuous mode [ 81.145136][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.151605][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.177335][ T5837] veth1_macvtap: entered promiscuous mode [ 81.240208][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.284548][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.303597][ T5851] veth0_macvtap: entered promiscuous mode [ 81.310730][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.324857][ T1174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.341151][ T5851] veth1_macvtap: entered promiscuous mode [ 81.363028][ T1174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.381548][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.411392][ T1174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.464961][ T1174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.481309][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.494865][ T5959] ip6erspan0: entered allmulticast mode [ 81.502608][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.513088][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.533359][ T77] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.545902][ T77] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.569766][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.587192][ T5840] Bluetooth: hci1: command tx timeout [ 81.587411][ T5852] Bluetooth: hci3: command tx timeout [ 81.592644][ T5855] Bluetooth: hci2: command tx timeout [ 81.598021][ T5848] Bluetooth: hci0: command tx timeout [ 81.598051][ T5848] Bluetooth: hci4: command tx timeout [ 81.615004][ T77] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.631347][ T77] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.669236][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.782845][ T178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.864842][ T178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.898979][ T178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.933207][ T178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.961080][ T178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.000111][ T178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.054679][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 82.194542][ T178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.208577][ T178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.213416][ T5965] openvswitch: netlink: Flow actions attr not present in new flow. [ 82.238460][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.261958][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.356637][ T178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.364838][ T178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.413388][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.441085][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.543861][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.589021][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.035714][ T5985] syz.1.8 uses obsolete (PF_INET,SOCK_PACKET) [ 83.102903][ T5983] netlink: 'syz.0.1': attribute type 8 has an invalid length. [ 83.282310][ T5995] netlink: 'syz.4.11': attribute type 1 has an invalid length. [ 83.290245][ T5995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.522655][ T6005] Zero length message leads to an empty skb [ 83.667861][ T5840] Bluetooth: hci1: command tx timeout [ 83.673752][ T5856] Bluetooth: hci3: command tx timeout [ 83.679204][ T5852] Bluetooth: hci4: command tx timeout [ 83.679234][ T5852] Bluetooth: hci0: command tx timeout [ 83.687870][ T5855] Bluetooth: hci2: command tx timeout [ 84.269656][ T807] cfg80211: failed to load regulatory.db [ 84.330092][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 84.362251][ T6030] netlink: 'syz.4.19': attribute type 1 has an invalid length. [ 84.373961][ T6030] netlink: 92 bytes leftover after parsing attributes in process `syz.4.19'. [ 84.397748][ T6030] netlink: 658 bytes leftover after parsing attributes in process `syz.4.19'. [ 84.626276][ T5924] hsr0: entered promiscuous mode [ 85.181776][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 85.184054][ T6047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23'. [ 85.318122][ T6051] netlink: 164 bytes leftover after parsing attributes in process `syz.4.25'. [ 85.365626][ T6051] netlink: 20 bytes leftover after parsing attributes in process `syz.4.25'. [ 85.502599][ T6055] tipc: Enabling of bearer rejected, failed to enable media [ 85.956155][ T6073] netlink: 1100 bytes leftover after parsing attributes in process `syz.4.31'. [ 86.227082][ T6078] netlink: 'syz.4.33': attribute type 1 has an invalid length. [ 86.246856][ T6078] netlink: 20 bytes leftover after parsing attributes in process `syz.4.33'. [ 86.306412][ T6078] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.315873][ T6078] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.516213][ T6080] xt_bpf: check failed: parse error [ 86.991203][ T6090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.443047][ T6095] netlink: 'syz.4.36': attribute type 11 has an invalid length. [ 88.067859][ T6111] xt_bpf: check failed: parse error [ 88.105221][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46'. [ 88.207953][ T6115] xt_bpf: check failed: parse error [ 88.511420][ T6123] xt_CT: No such helper "syz1" [ 88.716979][ T6128] batadv_slave_0: entered promiscuous mode [ 88.814532][ T6127] batadv_slave_0: left promiscuous mode [ 89.204346][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 89.323471][ T6143] netlink: 'syz.2.55': attribute type 1 has an invalid length. [ 90.401781][ T6176] ..@ÿ: renamed from bond_slave_0 (while UP) [ 90.494083][ T6177] netlink: 'syz.3.61': attribute type 5 has an invalid length. [ 90.544480][ T6178] netlink: 'syz.3.61': attribute type 5 has an invalid length. [ 90.956854][ T6196] netlink: 'syz.2.67': attribute type 8 has an invalid length. [ 91.013701][ T6206] xt_bpf: check failed: parse error [ 91.656101][ T6225] xt_CT: No such helper "syz1" [ 91.702817][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'. [ 91.719139][ T6231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.72'. [ 91.744756][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 91.892808][ T77] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.941505][ T77] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.962144][ T77] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.972379][ T77] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.602761][ T6265] netlink: 24 bytes leftover after parsing attributes in process `syz.3.83'. [ 92.861684][ T6271] netlink: 32 bytes leftover after parsing attributes in process `syz.3.85'. [ 92.974198][ T6270] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.983179][ T6270] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.269805][ T6270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.285133][ T6270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.636731][ T6270] ip6erspan0: left allmulticast mode [ 93.727904][ T178] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.747811][ T178] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.782539][ T178] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.829601][ T178] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.859261][ T6298] syzkaller0: entered promiscuous mode [ 93.866411][ T6298] syzkaller0: entered allmulticast mode [ 93.874545][ T6297] tipc: Started in network mode [ 93.880181][ T6297] tipc: Node identity 7235e183484f, cluster identity 4711 [ 93.890570][ T6297] tipc: Enabled bearer , priority 0 [ 93.916389][ T6295] Illegal XDP return value 4294967294 on prog (id 25) dev N/A, expect packet loss! [ 93.926396][ T6297] tipc: Resetting bearer [ 94.018697][ T6297] tipc: Disabling bearer [ 94.435693][ T6307] xt_bpf: check failed: parse error [ 94.608122][ T6118] Set syz1 is full, maxelem 65536 reached [ 94.763957][ T6315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.92'. [ 94.777812][ T6315] netlink: 96 bytes leftover after parsing attributes in process `syz.4.92'. [ 95.410042][ T6335] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.100'. [ 95.447806][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'. [ 95.859260][ T6354] xt_TCPMSS: Only works on TCP SYN packets [ 95.974850][ T6358] netlink: 1 bytes leftover after parsing attributes in process `syz.2.108'. [ 96.002911][ T6358] nbd: must specify at least one socket [ 96.023856][ T6360] xt_hashlimit: size too large, truncated to 1048576 [ 96.309424][ T6367] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.317145][ T6367] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.574714][ T6367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.589130][ T6367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.768787][ T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.808573][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.831191][ T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.848634][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.860639][ T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.880365][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.889833][ T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.899154][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.143775][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.114'. [ 97.210817][ T6379] netlink: 'syz.4.116': attribute type 1 has an invalid length. [ 97.251718][ T5969] IPVS: starting estimator thread 0... [ 97.271578][ T6373] netlink: 36 bytes leftover after parsing attributes in process `syz.3.113'. [ 97.302581][ T6380] tipc: Started in network mode [ 97.313074][ T6380] tipc: Node identity 42e148653038, cluster identity 4711 [ 97.353025][ T6380] tipc: Enabled bearer , priority 0 [ 97.370181][ T6381] IPVS: using max 41 ests per chain, 98400 per kthread [ 97.388291][ T6384] syzkaller0: entered promiscuous mode [ 97.421466][ T6384] syzkaller0: entered allmulticast mode [ 97.476358][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.117'. [ 97.497930][ T6383] netlink: 48 bytes leftover after parsing attributes in process `syz.4.117'. [ 97.585515][ T6380] tipc: Resetting bearer [ 97.643208][ T6383] vlan2: entered allmulticast mode [ 97.649096][ T6383] macvtap0: entered allmulticast mode [ 97.654644][ T6383] veth0_macvtap: entered allmulticast mode [ 97.720440][ T6375] tipc: Resetting bearer [ 97.726034][ T6219] Set syz1 is full, maxelem 65536 reached [ 97.792937][ T6375] tipc: Disabling bearer [ 98.480679][ T6420] netlink: 120 bytes leftover after parsing attributes in process `syz.2.128'. [ 98.496345][ T6420] netlink: 'syz.2.128': attribute type 1 has an invalid length. [ 98.599832][ T6426] openvswitch: netlink: IP tunnel dst address not specified [ 98.635328][ T6413] bond1: option lacp_active: invalid value (8) [ 98.675237][ T6424] openvswitch: netlink: Actions may not be safe on all matching packets [ 98.689598][ T6413] bond1 (unregistering): Released all slaves [ 98.888891][ T6417] netlink: 'syz.3.124': attribute type 12 has an invalid length. [ 98.905197][ T6442] netlink: 'syz.4.133': attribute type 1 has an invalid length. [ 98.974561][ T6439] netlink: 'syz.4.133': attribute type 2 has an invalid length. [ 99.154569][ T6452] netlink: 'syz.3.137': attribute type 10 has an invalid length. [ 99.233218][ T6452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.271455][ T6452] team0: Port device bond0 added [ 99.382376][ T5917] IPVS: starting estimator thread 0... [ 99.477233][ T6472] IPVS: using max 30 ests per chain, 72000 per kthread [ 99.771540][ T6488] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 99.798743][ T6488] syzkaller1: linktype set to 780 [ 99.897101][ T6499] __nla_validate_parse: 4 callbacks suppressed [ 99.897118][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 99.915989][ T6499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.149'. [ 100.232335][ T6506] xfrm0: entered promiscuous mode [ 100.243909][ T6506] xfrm0: entered allmulticast mode [ 100.423679][ T6506] bridge0: port 2(bridge_slave_1) entered listening state [ 100.456900][ T6506] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.865332][ T6517] FAULT_INJECTION: forcing a failure. [ 100.865332][ T6517] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.901862][ T6517] CPU: 1 UID: 0 PID: 6517 Comm: syz.0.156 Not tainted syzkaller #0 PREEMPT(full) [ 100.901887][ T6517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 100.901905][ T6517] Call Trace: [ 100.901912][ T6517] [ 100.901920][ T6517] dump_stack_lvl+0xe8/0x150 [ 100.901959][ T6517] should_fail_ex+0x412/0x560 [ 100.901991][ T6517] _copy_from_user+0x2d/0xb0 [ 100.902013][ T6517] ___sys_sendmsg+0x1c6/0x360 [ 100.902033][ T6517] ? __lock_acquire+0x6b5/0x2cf0 [ 100.902063][ T6517] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.902115][ T6517] ? __fget_files+0x2a/0x420 [ 100.902133][ T6517] ? __fget_files+0x3a0/0x420 [ 100.902160][ T6517] __x64_sys_sendmsg+0x1bd/0x2a0 [ 100.902183][ T6517] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 100.902211][ T6517] ? __pfx_ksys_write+0x10/0x10 [ 100.902241][ T6517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.902260][ T6517] do_syscall_64+0x15f/0xf80 [ 100.902283][ T6517] ? trace_irq_disable+0x3b/0x140 [ 100.902306][ T6517] ? clear_bhb_loop+0x40/0x90 [ 100.902327][ T6517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.902344][ T6517] RIP: 0033:0x7f244ff9cdd9 [ 100.902365][ T6517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.902378][ T6517] RSP: 002b:00007f2450e48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.902397][ T6517] RAX: ffffffffffffffda RBX: 00007f2450215fa0 RCX: 00007f244ff9cdd9 [ 100.902409][ T6517] RDX: 0000000000000840 RSI: 0000200000000400 RDI: 0000000000000003 [ 100.902420][ T6517] RBP: 00007f2450e48090 R08: 0000000000000000 R09: 0000000000000000 [ 100.902431][ T6517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.902440][ T6517] R13: 00007f2450216038 R14: 00007f2450215fa0 R15: 00007ffe1465e3d8 [ 100.902467][ T6517] [ 101.322954][ T6521] warning: `syz.0.158' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.456970][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.514157][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.568213][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.607073][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.652385][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.668142][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.684643][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.719975][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.763210][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.785780][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.815386][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.846618][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.886105][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.903333][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.929697][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.969557][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.970830][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.163'. [ 102.002043][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.018915][ T6541] netlink: 'syz.1.162': attribute type 1 has an invalid length. [ 102.038630][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.080005][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.080732][ T6541] bond2: entered promiscuous mode [ 102.095805][ T6541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.130126][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.146287][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.157537][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.177473][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.193088][ T6541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.201557][ T6541] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 102.215089][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.234899][ T6541] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 102.291959][ T6541] bond2: (slave wireguard0): making interface the new active one [ 102.303027][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.306671][ T6541] wireguard0: entered promiscuous mode [ 102.321969][ T6541] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 102.334236][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.356876][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.373387][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.385439][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.397281][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.408859][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.425738][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.438216][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.463562][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.491943][ T6528] netlink: 20 bytes leftover after parsing attributes in process `syz.3.160'. [ 102.493740][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.534537][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.537327][ T6528] sctp: [Deprecated]: syz.3.160 (pid 6528) Use of int in max_burst socket option. [ 102.537327][ T6528] Use struct sctp_assoc_value instead [ 102.560957][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.584694][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.662803][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.706312][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.737702][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.014567][ T6564] FAULT_INJECTION: forcing a failure. [ 103.014567][ T6564] name failslab, interval 1, probability 0, space 0, times 1 [ 103.043836][ T6564] CPU: 0 UID: 0 PID: 6564 Comm: syz.0.168 Not tainted syzkaller #0 PREEMPT(full) [ 103.043860][ T6564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.043870][ T6564] Call Trace: [ 103.043877][ T6564] [ 103.043884][ T6564] dump_stack_lvl+0xe8/0x150 [ 103.043917][ T6564] should_fail_ex+0x412/0x560 [ 103.043950][ T6564] should_failslab+0xa8/0x100 [ 103.043974][ T6564] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 103.043997][ T6564] ? __alloc_skb+0x186/0x7d0 [ 103.044012][ T6564] ? __alloc_skb+0x1d0/0x7d0 [ 103.044024][ T6564] ? __local_bh_enable_ip+0xd0/0x130 [ 103.044054][ T6564] __alloc_skb+0x1d0/0x7d0 [ 103.044075][ T6564] netlink_sendmsg+0x5d4/0xb40 [ 103.044102][ T6564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.044124][ T6564] ? aa_sock_msg_perm+0xf1/0x1b0 [ 103.044144][ T6564] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 103.044167][ T6564] ____sys_sendmsg+0x972/0x9f0 [ 103.044187][ T6564] ? __might_fault+0xaf/0x130 [ 103.044212][ T6564] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.044239][ T6564] ? import_iovec+0x73/0xa0 [ 103.044263][ T6564] ___sys_sendmsg+0x2a5/0x360 [ 103.044281][ T6564] ? __lock_acquire+0x6b5/0x2cf0 [ 103.044310][ T6564] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.044369][ T6564] ? __fget_files+0x2a/0x420 [ 103.044386][ T6564] ? __fget_files+0x3a0/0x420 [ 103.044413][ T6564] __x64_sys_sendmsg+0x1bd/0x2a0 [ 103.044435][ T6564] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 103.044463][ T6564] ? __pfx_ksys_write+0x10/0x10 [ 103.044492][ T6564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.044511][ T6564] do_syscall_64+0x15f/0xf80 [ 103.044534][ T6564] ? trace_irq_disable+0x3b/0x140 [ 103.044556][ T6564] ? clear_bhb_loop+0x40/0x90 [ 103.044576][ T6564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.044594][ T6564] RIP: 0033:0x7f244ff9cdd9 [ 103.044610][ T6564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.044624][ T6564] RSP: 002b:00007f2450e48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.044642][ T6564] RAX: ffffffffffffffda RBX: 00007f2450215fa0 RCX: 00007f244ff9cdd9 [ 103.044654][ T6564] RDX: 0000000000000840 RSI: 0000200000000400 RDI: 0000000000000003 [ 103.044665][ T6564] RBP: 00007f2450e48090 R08: 0000000000000000 R09: 0000000000000000 [ 103.044675][ T6564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.044684][ T6564] R13: 00007f2450216038 R14: 00007f2450215fa0 R15: 00007ffe1465e3d8 [ 103.044712][ T6564] [ 103.600339][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.169'. [ 103.965368][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'. [ 104.890824][ T6616] netlink: 1484 bytes leftover after parsing attributes in process `syz.2.179'. [ 104.934688][ T6616] netlink: 1484 bytes leftover after parsing attributes in process `syz.2.179'. [ 105.470021][ T6642] netlink: 44 bytes leftover after parsing attributes in process `syz.0.189'. [ 105.491227][ T6642] netlink: 44 bytes leftover after parsing attributes in process `syz.0.189'. [ 105.513511][ T6645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.188'. [ 105.662312][ T6645] veth0_macvtap: left promiscuous mode [ 105.788613][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 105.836068][ T6655] netlink: 1 bytes leftover after parsing attributes in process `syz.3.193'. [ 106.576860][ T6694] netlink: 'syz.4.203': attribute type 13 has an invalid length. [ 106.836108][ T6694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.857835][ T6694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.943130][ T6694] veth0_macvtap: left allmulticast mode [ 107.149234][ T3545] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.171946][ T3545] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.233083][ T3545] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.251046][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'. [ 107.275304][ T3545] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.334691][ T6713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.208'. [ 107.948182][ T6741] macvlan2: entered promiscuous mode [ 107.963791][ T6741] macvlan2: entered allmulticast mode [ 108.207140][ T6744] netlink: 36 bytes leftover after parsing attributes in process `syz.1.218'. [ 108.252083][ T6744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.218'. [ 108.344467][ T6753] syz_tun: entered allmulticast mode [ 108.420699][ T29] audit: type=1800 audit(1777095083.959:2): pid=6757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.221" name="memory.events" dev="tmpfs" ino=289 res=0 errno=0 [ 108.444729][ T6756] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 108.463103][ T6752] syz_tun: left allmulticast mode [ 108.721783][ T6762] syzkaller0: entered promiscuous mode [ 108.756037][ T6762] syzkaller0: entered allmulticast mode [ 109.177747][ T29] audit: type=1800 audit(1777095084.719:3): pid=6792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.232" name="r" dev="tmpfs" ino=301 res=0 errno=0 [ 109.530544][ T6809] netlink: 'syz.3.237': attribute type 1 has an invalid length. [ 110.112336][ T6826] __nla_validate_parse: 2 callbacks suppressed [ 110.112352][ T6826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.242'. [ 110.169747][ T6829] netlink: 'syz.3.242': attribute type 1 has an invalid length. [ 110.204465][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 110.377975][ T6839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.402826][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 110.582095][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'. [ 110.613295][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'. [ 110.646237][ T6843] netlink: 124 bytes leftover after parsing attributes in process `syz.3.247'. [ 110.781854][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'. [ 111.183443][ T6862] netlink: 65019 bytes leftover after parsing attributes in process `syz.4.253'. [ 111.437487][ T6875] netlink: 72 bytes leftover after parsing attributes in process `syz.0.254'. [ 111.487893][ T6873] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 111.511590][ T6877] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 112.423986][ T6899] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 112.496032][ T6905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.266'. [ 112.592588][ T6909] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 113.003571][ T6925] trusted_key: syz.3.271 sent an empty control message without MSG_MORE. [ 113.968450][ T6952] pim6reg1: entered promiscuous mode [ 113.974185][ T6945] netlink: 'syz.4.279': attribute type 4 has an invalid length. [ 113.994789][ T6952] pim6reg1: entered allmulticast mode [ 114.713779][ T6970] netlink: 'syz.3.285': attribute type 9 has an invalid length. [ 114.761560][ T6970] sctp: [Deprecated]: syz.3.285 (pid 6970) Use of int in max_burst socket option. [ 114.761560][ T6970] Use struct sctp_assoc_value instead [ 114.979643][ T6982] netlink: 'syz.3.288': attribute type 21 has an invalid length. [ 115.075295][ T6982] netlink: 'syz.3.288': attribute type 1 has an invalid length. [ 115.314301][ T6993] __nla_validate_parse: 12 callbacks suppressed [ 115.314317][ T6993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.291'. [ 115.356664][ T6994] netlink: 256 bytes leftover after parsing attributes in process `syz.1.291'. [ 115.464392][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.294'. [ 115.674223][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'. [ 115.789790][ T7013] netlink: 48 bytes leftover after parsing attributes in process `syz.1.297'. [ 115.801384][ T7009] bond1: Invalid ad_actor_system MAC address. [ 115.808005][ T7009] bond1: option ad_actor_system: invalid value (7) [ 115.825082][ T7009] bond1 (unregistering): Released all slaves [ 115.927804][ T7021] netlink: 'syz.1.301': attribute type 4 has an invalid length. [ 115.958677][ T7021] netlink: 'syz.1.301': attribute type 4 has an invalid length. [ 116.079587][ T7032] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.087392][ T7032] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.136346][ T7032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.150375][ T7032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.251687][ T35] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.273361][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.292663][ T35] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.304039][ T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.501628][ T7049] xt_bpf: check failed: parse error [ 117.230444][ T7068] netlink: 72 bytes leftover after parsing attributes in process `syz.3.311'. [ 117.289526][ T7075] netlink: 'syz.2.315': attribute type 1 has an invalid length. [ 117.393655][ T7075] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 117.402043][ T7078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.316'. [ 117.558779][ T7082] netlink: 'syz.4.316': attribute type 2 has an invalid length. [ 117.939977][ T7096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.321'. [ 117.951260][ T7094] xt_bpf: check failed: parse error [ 117.961083][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.321'. [ 118.129582][ T7110] netlink: 'syz.4.325': attribute type 10 has an invalid length. [ 118.160266][ T7111] netlink: 'syz.4.325': attribute type 10 has an invalid length. [ 118.192557][ T7111] netlink: 40 bytes leftover after parsing attributes in process `syz.4.325'. [ 118.193021][ T7110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.305041][ T7110] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 118.337355][ T7111] batadv0: entered promiscuous mode [ 118.349597][ T7111] batadv0: entered allmulticast mode [ 118.382570][ T7111] bond0: (slave batadv0): Releasing backup interface [ 118.431084][ T7111] bridge0: port 3(batadv0) entered blocking state [ 118.440273][ T7111] bridge0: port 3(batadv0) entered disabled state [ 118.455425][ T7110] batadv0: left promiscuous mode [ 118.467008][ T7110] bridge0: port 3(batadv0) entered disabled state [ 118.565162][ T7110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.576045][ T7110] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 118.627472][ T7111] batadv0: entered promiscuous mode [ 118.774702][ T7111] bond0: (slave batadv0): Releasing backup interface [ 119.670706][ T7111] bridge0: port 3(batadv0) entered blocking state [ 119.684080][ T7111] bridge0: port 3(batadv0) entered disabled state [ 119.695649][ T7110] batadv0: left promiscuous mode [ 119.701081][ T7110] bridge0: port 3(batadv0) entered disabled state [ 119.756707][ T77] batman_adv: batadv0: IGMP Querier appeared [ 119.763752][ T77] batman_adv: batadv0: MLD Querier appeared [ 121.222755][ T7110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.231432][ T7110] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 121.244269][ T7132] syzkaller0: entered promiscuous mode [ 121.251826][ T7132] syzkaller0: entered allmulticast mode [ 121.443990][ T7149] __nla_validate_parse: 2 callbacks suppressed [ 121.444009][ T7149] netlink: 72 bytes leftover after parsing attributes in process `syz.4.334'. [ 121.555619][ T7155] xt_bpf: check failed: parse error [ 121.729727][ T7164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.340'. [ 121.804451][ T7169] bridge_slave_0: left allmulticast mode [ 121.828465][ T7169] bridge_slave_0: left promiscuous mode [ 121.843323][ T7169] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.913370][ T7169] bridge_slave_1: left allmulticast mode [ 121.938619][ T7169] bridge_slave_1: left promiscuous mode [ 121.972576][ T7169] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.023833][ T7169] bond0: (slave bond_slave_0): Releasing backup interface [ 122.050656][ T7169] bond0: (slave bond_slave_1): Releasing backup interface [ 122.076080][ T7169] team0: Port device team_slave_0 removed [ 122.105051][ T7169] team0: Port device team_slave_1 removed [ 122.132180][ T7169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.157939][ T7169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.175056][ T7169] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 122.564599][ T7211] xt_bpf: check failed: parse error [ 122.668285][ T7221] netlink: 64 bytes leftover after parsing attributes in process `syz.2.354'. [ 122.921426][ T7235] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 122.982618][ T7214] netlink: 72 bytes leftover after parsing attributes in process `syz.3.356'. [ 123.583971][ T7262] xt_bpf: check failed: parse error [ 124.039238][ T7286] validate_nla: 4 callbacks suppressed [ 124.039254][ T7286] netlink: 'syz.0.375': attribute type 4 has an invalid length. [ 124.090371][ T7286] netlink: 'syz.0.375': attribute type 4 has an invalid length. [ 126.782993][ T7273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.824143][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.940892][ T7288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.953246][ T7288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.978013][ T7298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.377'. [ 127.027201][ T7298] nbd: socks must be embedded in a SOCK_ITEM attr [ 127.039124][ T5858] block nbd64: NBD_DISCONNECT [ 127.098398][ T7298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.377'. [ 127.127322][ T7298] nbd: device at index 64 is going down [ 127.156246][ T77] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.178414][ T77] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.225081][ T77] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.269757][ T77] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.333383][ T7308] xt_cluster: node mask cannot exceed total number of nodes [ 127.345665][ T5857] udevd[5857]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 127.362486][ T7309] xt_cluster: node mask cannot exceed total number of nodes [ 127.617502][ T7304] netlink: 72 bytes leftover after parsing attributes in process `syz.0.379'. [ 127.628472][ T7324] xt_bpf: check failed: parse error [ 127.676025][ T7328] netlink: 'syz.4.386': attribute type 1 has an invalid length. [ 127.724376][ T7328] netlink: 96 bytes leftover after parsing attributes in process `syz.4.386'. [ 127.799135][ T29] audit: type=1107 audit(1777095103.339:4): pid=7329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 128.233026][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.392'. [ 128.266156][ T7346] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 128.303215][ T7346] netlink: 96 bytes leftover after parsing attributes in process `syz.3.392'. [ 128.376923][ T7346] syzkaller1: entered promiscuous mode [ 128.403642][ T7346] syzkaller1: entered allmulticast mode [ 128.516600][ T7361] xt_hashlimit: size too large, truncated to 1048576 [ 128.631418][ T7369] xt_bpf: check failed: parse error [ 128.917630][ T7367] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 128.996069][ T7375] netlink: 72 bytes leftover after parsing attributes in process `syz.1.401'. [ 129.265664][ T7385] netlink: 'syz.0.403': attribute type 4 has an invalid length. [ 129.541660][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 129.555813][ T7396] openvswitch: netlink: Flow actions attr not present in new flow. [ 129.822294][ T7408] xt_bpf: check failed: parse error [ 130.029725][ T7412] syzkaller1: entered promiscuous mode [ 130.048549][ T7412] syzkaller1: entered allmulticast mode [ 130.092222][ T7427] raw_sendmsg: syz.1.418 forgot to set AF_INET. Fix it! [ 130.366866][ T7447] netlink: 36 bytes leftover after parsing attributes in process `syz.1.424'. [ 130.394787][ T7447] netlink: 36 bytes leftover after parsing attributes in process `syz.1.424'. [ 130.558986][ T7452] netlink: 'syz.3.426': attribute type 2 has an invalid length. [ 130.603635][ T7450] xt_bpf: check failed: parse error [ 131.255599][ T7479] bond1: entered promiscuous mode [ 131.263189][ T7479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.278054][ T7480] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 131.360642][ T7488] netlink: 'syz.1.434': attribute type 1 has an invalid length. [ 131.488102][ T7495] SET target dimension over the limit! [ 131.501062][ T7488] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.651532][ T7500] netlink: 'syz.0.437': attribute type 1 has an invalid length. [ 131.663722][ T7505] xt_bpf: check failed: parse error [ 131.811725][ T7501] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 131.823484][ T7501] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 131.867609][ T7515] netlink: 'syz.3.441': attribute type 10 has an invalid length. [ 131.883453][ T7515] team0: Port device dummy0 added [ 131.952617][ T7518] sctp: [Deprecated]: syz.4.443 (pid 7518) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.952617][ T7518] Use struct sctp_sack_info instead [ 132.199434][ T7535] x_tables: duplicate underflow at hook 1 [ 132.668255][ T7548] xt_bpf: check failed: parse error [ 132.712911][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.722788][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.300497][ T7584] __nla_validate_parse: 153 callbacks suppressed [ 133.300517][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 133.348825][ T7575] netlink: 40 bytes leftover after parsing attributes in process `syz.3.458'. [ 134.057041][ T7608] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 134.092914][ T7608] SET target dimension over the limit! [ 134.365079][ T7623] Bluetooth: MGMT ver 1.23 [ 134.371187][ T7621] netlink: 'syz.3.470': attribute type 4 has an invalid length. [ 134.638708][ T7637] netlink: 'syz.3.473': attribute type 9 has an invalid length. [ 134.660698][ T7631] xt_CT: No such helper "syz1" [ 134.874737][ T7594] syz.2.464 (7594) used greatest stack depth: 17248 bytes left [ 135.246001][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 135.725119][ T7666] netlink: 40 bytes leftover after parsing attributes in process `syz.3.478'. [ 135.901080][ T7669] xt_bpf: check failed: parse error [ 136.672205][ T7626] Set syz1 is full, maxelem 65536 reached [ 136.678815][ T7690] netlink: 44 bytes leftover after parsing attributes in process `syz.2.486'. [ 136.786423][ T7690] xt_CT: No such helper "syz1" [ 136.879014][ T7697] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 136.888068][ T7697] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 137.130674][ T7705] veth2: entered allmulticast mode [ 137.159582][ T7707] xt_bpf: check failed: parse error [ 137.829335][ T7715] netlink: 20 bytes leftover after parsing attributes in process `syz.2.494'. [ 137.913064][ T7715] ip6erspan1: entered allmulticast mode [ 137.985469][ T7734] xt_CT: No such helper "syz1" [ 138.190732][ T7743] syzkaller0: entered promiscuous mode [ 138.218093][ T7743] syzkaller0: entered allmulticast mode [ 139.044358][ T7757] xt_bpf: check failed: parse error [ 139.152197][ T7750] FAULT_INJECTION: forcing a failure. [ 139.152197][ T7750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.220888][ T7750] CPU: 0 UID: 0 PID: 7750 Comm: syz.2.504 Not tainted syzkaller #0 PREEMPT(full) [ 139.220932][ T7750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.220944][ T7750] Call Trace: [ 139.220952][ T7750] [ 139.220959][ T7750] dump_stack_lvl+0xe8/0x150 [ 139.221002][ T7750] should_fail_ex+0x412/0x560 [ 139.221035][ T7750] _copy_from_user+0x2d/0xb0 [ 139.221057][ T7750] kstrtouint_from_user+0xd6/0x180 [ 139.221086][ T7750] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 139.221130][ T7750] proc_fail_nth_write+0x8e/0x210 [ 139.221150][ T7750] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 139.221176][ T7750] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 139.221197][ T7750] vfs_write+0x29a/0xb90 [ 139.221227][ T7750] ? __pfx_vfs_write+0x10/0x10 [ 139.221251][ T7750] ? __fget_files+0x2a/0x420 [ 139.221273][ T7750] ? __fget_files+0x3a0/0x420 [ 139.221290][ T7750] ? __fget_files+0x2a/0x420 [ 139.221317][ T7750] ksys_write+0x150/0x270 [ 139.221341][ T7750] ? __pfx_ksys_write+0x10/0x10 [ 139.221371][ T7750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.221389][ T7750] do_syscall_64+0x15f/0xf80 [ 139.221413][ T7750] ? trace_irq_disable+0x3b/0x140 [ 139.221436][ T7750] ? clear_bhb_loop+0x40/0x90 [ 139.221457][ T7750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.221473][ T7750] RIP: 0033:0x7f5a4075d60e [ 139.221494][ T7750] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 139.221507][ T7750] RSP: 002b:00007f5a416a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 139.221532][ T7750] RAX: ffffffffffffffda RBX: 00007f5a416a66c0 RCX: 00007f5a4075d60e [ 139.221545][ T7750] RDX: 0000000000000001 RSI: 00007f5a416a60a0 RDI: 0000000000000004 [ 139.221555][ T7750] RBP: 00007f5a416a6090 R08: 0000000000000000 R09: 0000000000000000 [ 139.221565][ T7750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.221575][ T7750] R13: 00007f5a40a16038 R14: 00007f5a40a15fa0 R15: 00007ffcb7498ab8 [ 139.221606][ T7750] [ 141.205579][ T7728] Set syz1 is full, maxelem 65536 reached [ 141.735743][ T7770] netlink: 288 bytes leftover after parsing attributes in process `syz.0.509'. [ 142.321838][ T7787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.515'. [ 142.388158][ T7787] ip6erspan1: entered allmulticast mode [ 142.394175][ T7797] xt_CT: No such helper "syz1" [ 142.504004][ T7808] xt_bpf: check failed: parse error [ 142.558594][ T7811] syzkaller1: entered promiscuous mode [ 142.573793][ T7811] syzkaller1: entered allmulticast mode [ 142.701826][ T7815] netlink: 'syz.3.525': attribute type 1 has an invalid length. [ 142.952704][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.528'. [ 143.026303][ T7825] netlink: 20 bytes leftover after parsing attributes in process `syz.0.528'. [ 143.302539][ T7820] netlink: 1 bytes leftover after parsing attributes in process `syz.3.527'. [ 143.779506][ T7857] xt_bpf: check failed: parse error [ 143.813771][ T7846] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.853858][ T7861] netlink: 20 bytes leftover after parsing attributes in process `syz.3.536'. [ 143.935661][ T7851] xt_CT: No such helper "syz1" [ 143.997528][ T7869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.540'. [ 144.197348][ T7874] netlink: 'syz.2.542': attribute type 1 has an invalid length. [ 144.217031][ T7874] netlink: 476 bytes leftover after parsing attributes in process `syz.2.542'. [ 144.226208][ T7874] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.542'. [ 144.581818][ T29] audit: type=1800 audit(1777095120.119:5): pid=7890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.547" name=CB dev="tmpfs" ino=624 res=0 errno=0 [ 144.710155][ T7894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.548'. [ 144.783694][ T7892] veth0_to_batadv: entered promiscuous mode [ 144.796383][ T7892] veth0_to_batadv: entered allmulticast mode [ 144.865548][ T7904] xt_bpf: check failed: parse error [ 145.065494][ T7894] syzkaller1: entered promiscuous mode [ 145.073173][ T7894] syzkaller1: entered allmulticast mode [ 145.367157][ T7923] xt_CT: No such helper "syz1" [ 145.829373][ T7940] ip6erspan0: entered allmulticast mode [ 146.263757][ T7947] xt_bpf: check failed: parse error [ 146.620964][ T7967] netlink: 'syz.3.571': attribute type 2 has an invalid length. [ 146.765096][ T7972] tipc: Invalid UDP bearer configuration [ 146.773065][ T7972] tipc: Enabling of bearer rejected, failed to enable media [ 146.954464][ T7972] __nla_validate_parse: 2 callbacks suppressed [ 146.954482][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.570'. [ 147.413883][ T8004] xt_bpf: check failed: parse error [ 147.528904][ T7993] ip6erspan0: entered allmulticast mode [ 147.588571][ T7918] Set syz1 is full, maxelem 65536 reached [ 147.961339][ T8021] netlink: 'syz.1.585': attribute type 3 has an invalid length. [ 148.359812][ T8034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.590'. [ 148.414241][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 148.454604][ T8034] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 148.472919][ T8041] xt_bpf: check failed: parse error [ 148.752564][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 148.797289][ T8049] xt_CT: No such helper "syz1" [ 148.805567][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 148.831972][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 148.842940][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 148.854185][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 148.864642][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 148.886256][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 148.921265][ T8054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.930897][ T8054] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.948181][ T8054] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.177606][ T8064] ip6erspan2: entered allmulticast mode [ 150.036186][ T8085] netlink: 'syz.4.604': attribute type 2 has an invalid length. [ 150.084278][ T8080] IPVS: Scheduler module ip_vs_ not found [ 150.169987][ T8085] bond2: option primary_reselect: invalid value (133) [ 150.191407][ T8085] bond2 (unregistering): Released all slaves [ 150.300831][ T8085] bond2: option primary_reselect: invalid value (133) [ 150.337316][ T8085] bond2 (unregistering): Released all slaves [ 150.433584][ T8091] xt_bpf: check failed: parse error [ 150.954261][ T8044] Set syz1 is full, maxelem 65536 reached [ 151.696333][ T8127] xt_bpf: check failed: parse error [ 152.407188][ T8154] netlink: 'syz.2.625': attribute type 1 has an invalid length. [ 152.422042][ T8144] xt_CT: No such helper "syz1" [ 152.592768][ T8154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.612891][ T8161] netlink: 'syz.3.627': attribute type 1 has an invalid length. [ 152.641117][ T8154] netlink: 'syz.2.625': attribute type 1 has an invalid length. [ 152.667318][ T8155] bond1: (slave veth3): Enslaving as an active interface with an up link [ 152.725502][ T8161] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.743182][ T8154] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 152.752706][ T8154] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 152.818031][ T8165] bond2: (slave veth3): Enslaving as an active interface with an up link [ 152.861579][ T8168] xt_bpf: check failed: parse error [ 153.138043][ T8181] __nla_validate_parse: 15 callbacks suppressed [ 153.138063][ T8181] netlink: 48 bytes leftover after parsing attributes in process `syz.2.632'. [ 153.405422][ T8195] netlink: 5 bytes leftover after parsing attributes in process `syz.2.637'. [ 153.448348][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'. [ 153.586273][ T8192] ip6erspan0: entered allmulticast mode [ 153.834397][ T8208] xt_bpf: check failed: parse error [ 154.386443][ T8223] xt_CT: No such helper "syz1" [ 154.809205][ T8248] xt_bpf: check failed: parse error [ 154.959605][ T8263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.658'. [ 155.221660][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'. [ 155.463139][ T8285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.491394][ T8283] syzkaller0: entered promiscuous mode [ 155.521221][ T8283] syzkaller0: entered allmulticast mode [ 156.039292][ T8302] xt_bpf: check failed: parse error [ 156.092331][ T8300] netlink: 32 bytes leftover after parsing attributes in process `syz.0.668'. [ 156.109771][ T8300] netlink: 32 bytes leftover after parsing attributes in process `syz.0.668'. [ 156.284906][ T8316] netlink: 24 bytes leftover after parsing attributes in process `syz.0.672'. [ 156.309880][ T8305] xt_CT: No such helper "syz1" [ 156.326102][ T8316] netlink: 'syz.0.672': attribute type 29 has an invalid length. [ 156.337106][ T8316] netlink: 'syz.0.672': attribute type 29 has an invalid length. [ 156.360484][ T8316] netlink: 'syz.0.672': attribute type 32 has an invalid length. [ 156.374618][ T8316] netlink: 500 bytes leftover after parsing attributes in process `syz.0.672'. [ 156.398852][ T8316] netlink: 'syz.0.672': attribute type 1 has an invalid length. [ 156.515324][ T8324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.672'. [ 156.580828][ T8316] bond3 (unregistering): Released all slaves [ 156.722999][ T8334] debugfs: 'netdev:syzkaller0' already exists in 'phy4' [ 156.830668][ T8345] xt_policy: output policy not valid in PREROUTING and INPUT [ 156.837815][ T8343] ip6erspan2: entered allmulticast mode [ 157.938400][ T8382] netlink: 'syz.0.688': attribute type 4 has an invalid length. [ 158.408972][ T8385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.689'. [ 158.565704][ T8389] netlink: 16 bytes leftover after parsing attributes in process `syz.1.690'. [ 158.576698][ T8389] sctp: [Deprecated]: syz.1.690 (pid 8389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.576698][ T8389] Use struct sctp_sack_info instead [ 158.593321][ T8389] sctp: [Deprecated]: syz.1.690 (pid 8389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.593321][ T8389] Use struct sctp_sack_info instead [ 160.148939][ T8357] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.378562][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.691'. [ 160.398641][ T8397] bridge: RTM_NEWNEIGH with invalid ether address [ 160.686674][ T8415] xt_bpf: check failed: parse error [ 160.862043][ T8426] netlink: 'syz.2.701': attribute type 83 has an invalid length. [ 161.003941][ T8428] sit1: entered allmulticast mode [ 161.034449][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.704'. [ 161.153206][ T8435] netlink: 'syz.1.706': attribute type 1 has an invalid length. [ 161.247491][ T8435] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.299623][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 161.384666][ T8439] bond4: (slave gretap1): making interface the new active one [ 161.424195][ T8439] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 161.457273][ T8435] bond4 (unregistering): (slave gretap1): Releasing active interface [ 161.470432][ T8435] bond4 (unregistering): Released all slaves [ 161.736091][ T8455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.974105][ T8477] netlink: 'syz.3.718': attribute type 9 has an invalid length. [ 161.984832][ T8477] netlink: 'syz.3.718': attribute type 11 has an invalid length. [ 161.994955][ T8477] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.718'. [ 162.287763][ T8495] lo speed is unknown, defaulting to 1000 [ 162.295129][ T8495] lo speed is unknown, defaulting to 1000 [ 162.328334][ T8495] lo speed is unknown, defaulting to 1000 [ 162.408732][ T8495] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 162.453721][ T8495] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 162.471438][ T8495] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 162.489810][ T8495] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 162.520402][ T8495] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 162.643924][ T8495] lo speed is unknown, defaulting to 1000 [ 162.660663][ T8495] lo speed is unknown, defaulting to 1000 [ 162.671192][ T8495] lo speed is unknown, defaulting to 1000 [ 162.679129][ T8495] lo speed is unknown, defaulting to 1000 [ 162.687423][ T8495] lo speed is unknown, defaulting to 1000 [ 163.152330][ T8518] netlink: 'syz.0.728': attribute type 3 has an invalid length. [ 163.160453][ T8518] netlink: 224 bytes leftover after parsing attributes in process `syz.0.728'. [ 163.286211][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'. [ 163.295287][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'. [ 163.363365][ T8525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.731'. [ 164.942324][ T8477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.468341][ T8554] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 165.508075][ T8553] team0: Port device bond0 removed [ 165.542019][ T8553] team0: Port device dummy0 removed [ 165.553583][ T8553] bridge_slave_0: left allmulticast mode [ 165.560911][ T8553] bridge_slave_0: left promiscuous mode [ 165.567086][ T8553] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.592685][ T8553] bridge_slave_1: left allmulticast mode [ 165.608581][ T8553] bridge_slave_1: left promiscuous mode [ 165.614401][ T8553] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.632892][ T8553] bond0: (slave ..@ÿ): Releasing backup interface [ 165.656914][ T8553] bond0: (slave bond_slave_1): Releasing backup interface [ 165.679726][ T8553] team0: Port device team_slave_0 removed [ 165.696341][ T8553] team0: Port device team_slave_1 removed [ 165.709984][ T8553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.718711][ T8553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.730999][ T8553] bond2: (slave veth3): Releasing backup interface [ 165.942139][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.746'. [ 165.968639][ T8573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.747'. [ 165.989277][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'. [ 166.090220][ T8574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.102807][ T8579] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 166.112192][ T8580] netlink: 'syz.4.746': attribute type 1 has an invalid length. [ 166.283516][ T8584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.750'. [ 166.392652][ T8590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.752'. [ 166.400169][ T8591] netlink: 72 bytes leftover after parsing attributes in process `syz.3.751'. [ 166.429913][ T8591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.751'. [ 166.457796][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.751'. [ 166.693271][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 167.109640][ T8625] can: request_module (can-proto-4) failed. [ 167.163616][ T8632] syzkaller0: entered promiscuous mode [ 167.171682][ T8632] syzkaller0: entered allmulticast mode [ 167.252109][ T8634] tipc: Enabled bearer , priority 0 [ 167.265725][ T8634] syzkaller0: entered promiscuous mode [ 167.272503][ T8634] syzkaller0: entered allmulticast mode [ 167.294773][ T8634] tipc: Resetting bearer [ 167.339593][ T8634] tipc: Disabling bearer [ 167.473979][ T8645] netlink: 44 bytes leftover after parsing attributes in process `syz.3.767'. [ 168.115775][ T8677] xt_bpf: check failed: parse error [ 168.123883][ T5969] IPVS: starting estimator thread 0... [ 168.216581][ T8678] IPVS: using max 33 ests per chain, 79200 per kthread [ 168.246852][ T8675] xt_bpf: check failed: parse error [ 168.397103][ T8689] netlink: 'syz.1.780': attribute type 4 has an invalid length. [ 168.427990][ T8690] netlink: 'syz.1.780': attribute type 1 has an invalid length. [ 168.462922][ T8681] xt_CT: No such helper "syz1" [ 169.174890][ T8728] netlink: 'syz.3.789': attribute type 21 has an invalid length. [ 169.203752][ T178] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.213337][ T8728] netlink: 'syz.3.789': attribute type 21 has an invalid length. [ 169.225405][ T178] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.246958][ T178] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.311791][ T178] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.534069][ T8736] xt_bpf: check failed: parse error [ 169.798965][ T8742] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 169.884728][ T8742] syzkaller0: entered promiscuous mode [ 169.917037][ T8742] syzkaller0: entered allmulticast mode [ 170.217523][ T8749] lo speed is unknown, defaulting to 1000 [ 170.595064][ T8686] Set syz1 is full, maxelem 65536 reached [ 170.615460][ T8759] FAULT_INJECTION: forcing a failure. [ 170.615460][ T8759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.668094][ T8759] CPU: 1 UID: 0 PID: 8759 Comm: syz.3.798 Not tainted syzkaller #0 PREEMPT(full) [ 170.668119][ T8759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 170.668129][ T8759] Call Trace: [ 170.668136][ T8759] [ 170.668143][ T8759] dump_stack_lvl+0xe8/0x150 [ 170.668176][ T8759] should_fail_ex+0x412/0x560 [ 170.668208][ T8759] _copy_from_user+0x2d/0xb0 [ 170.668229][ T8759] do_sock_getsockopt+0x200/0x7e0 [ 170.668253][ T8759] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 170.668286][ T8759] ? __fget_files+0x3a0/0x420 [ 170.668304][ T8759] ? __fget_files+0x2a/0x420 [ 170.668326][ T8759] __x64_sys_getsockopt+0x1a4/0x240 [ 170.668349][ T8759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.668368][ T8759] do_syscall_64+0x15f/0xf80 [ 170.668390][ T8759] ? trace_irq_disable+0x3b/0x140 [ 170.668412][ T8759] ? clear_bhb_loop+0x40/0x90 [ 170.668434][ T8759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.668451][ T8759] RIP: 0033:0x7f3e47f9cdd9 [ 170.668468][ T8759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.668482][ T8759] RSP: 002b:00007f3e461f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 170.668501][ T8759] RAX: ffffffffffffffda RBX: 00007f3e48216090 RCX: 00007f3e47f9cdd9 [ 170.668514][ T8759] RDX: 000000000000000e RSI: 0000000000000084 RDI: 0000000000000003 [ 170.668524][ T8759] RBP: 00007f3e461f6090 R08: 0000200000000200 R09: 0000000000000000 [ 170.668535][ T8759] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 170.668546][ T8759] R13: 00007f3e48216128 R14: 00007f3e48216090 R15: 00007ffdbfebf578 [ 170.668573][ T8759] [ 170.972352][ T8770] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.009524][ T8763] __nla_validate_parse: 16 callbacks suppressed [ 171.009541][ T8763] netlink: 28 bytes leftover after parsing attributes in process `syz.0.799'. [ 171.109337][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 171.154837][ T8779] xt_CT: No such helper "syz1" [ 171.177667][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 171.485221][ T8788] syzkaller0: entered promiscuous mode [ 171.491794][ T8788] syzkaller0: entered allmulticast mode [ 171.610698][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.804'. [ 171.645980][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.804'. [ 174.501648][ T8801] syzkaller0: entered promiscuous mode [ 174.524463][ T8801] syzkaller0: entered allmulticast mode [ 174.688999][ T8817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.812'. [ 174.703314][ T8817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.812'. [ 174.715207][ T8817] netlink: 58 bytes leftover after parsing attributes in process `syz.4.812'. [ 174.846841][ T8817] team0 (unregistering): Port device team_slave_0 removed [ 174.899980][ T8817] team0 (unregistering): Port device team_slave_1 removed [ 175.104486][ T8829] xt_bpf: check failed: parse error [ 175.328600][ T8837] xt_hashlimit: max too large, truncated to 1048576 [ 175.357420][ T8837] xt_ecn: cannot match TCP bits for non-tcp packets [ 175.442617][ T8844] macvtap0: entered promiscuous mode [ 175.728872][ T8849] xt_CT: No such helper "syz1" [ 175.811548][ T8776] Set syz1 is full, maxelem 65536 reached [ 176.145812][ T8857] xt_CT: No such helper "syz1" [ 176.284544][ T8866] batadv0: left allmulticast mode [ 176.320103][ T8866] macvtap0: left promiscuous mode [ 176.329227][ T8883] xt_bpf: check failed: parse error [ 176.335378][ T8866] vlan2: left allmulticast mode [ 176.343848][ T8866] macvtap0: left allmulticast mode [ 176.352687][ T8866] ip6erspan0: left allmulticast mode [ 176.567749][ T8890] openvswitch: netlink: Message has 4 unknown bytes. [ 176.590374][ T8890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.635279][ T8894] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.824333][ T8902] can: request_module (can-proto-0) failed. [ 176.920238][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.839'. [ 176.964390][ T8911] gtp0: entered promiscuous mode [ 176.978141][ T8911] gtp0: entered allmulticast mode [ 177.004508][ T8913] xt_CT: No such helper "syz1" [ 177.011763][ T8919] netlink: 84 bytes leftover after parsing attributes in process `syz.4.840'. [ 177.146376][ T8924] delete_channel: no stack [ 177.373976][ T8930] xt_bpf: check failed: parse error [ 177.584957][ T8943] netlink: 72 bytes leftover after parsing attributes in process `syz.2.848'. [ 177.609466][ T8945] netlink: 32 bytes leftover after parsing attributes in process `syz.3.850'. [ 177.624571][ T8943] netlink: 'syz.2.848': attribute type 1 has an invalid length. [ 177.646768][ T8946] netlink: 72 bytes leftover after parsing attributes in process `syz.2.848'. [ 177.684602][ T8946] netlink: 'syz.2.848': attribute type 1 has an invalid length. [ 178.116025][ T8859] Set syz1 is full, maxelem 65536 reached [ 178.265367][ T8965] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 178.282356][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.855'. [ 178.405447][ T8968] xt_CT: No such helper "syz1" [ 178.728614][ T8990] netlink: 148 bytes leftover after parsing attributes in process `syz.4.864'. [ 178.752455][ T8990] netlink: 'syz.4.864': attribute type 1 has an invalid length. [ 178.811122][ T8990] netlink: 36 bytes leftover after parsing attributes in process `syz.4.864'. [ 178.882608][ T9004] netlink: 364 bytes leftover after parsing attributes in process `syz.0.867'. [ 178.895206][ T9002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.866'. [ 178.914348][ T9002] gretap0: entered promiscuous mode [ 178.953333][ T9002] gretap0: left promiscuous mode [ 178.971532][ T9004] netlink: 'syz.0.867': attribute type 7 has an invalid length. [ 179.117811][ T9019] netlink: 'syz.3.870': attribute type 9 has an invalid length. [ 179.321395][ T9008] netlink: 'syz.4.868': attribute type 10 has an invalid length. [ 179.385659][ T9027] tc_dump_action: action bad kind [ 179.737570][ T9038] xt_CT: No such helper "syz1" [ 180.332880][ T9057] tipc: Enabled bearer , priority 0 [ 180.356820][ T9057] sit0: entered allmulticast mode [ 180.585770][ T9066] tipc: Started in network mode [ 180.590883][ T9066] tipc: Node identity d24acdddbe9c, cluster identity 4711 [ 180.598421][ T9066] tipc: Enabled bearer , priority 0 [ 180.629994][ T9066] syzkaller0: entered promiscuous mode [ 180.654212][ T9066] syzkaller0: entered allmulticast mode [ 180.692070][ T9066] tipc: Resetting bearer [ 180.712046][ T9065] tipc: Resetting bearer [ 180.778912][ T9065] tipc: Disabling bearer [ 181.230142][ T9077] xt_bpf: check failed: parse error [ 181.328659][ T5924] tipc: Node number set to 981131651 [ 181.627661][ T9089] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.680133][ T9093] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.720382][ T9093] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.728963][ T9093] IPv6: NLM_F_CREATE should be set when creating new route [ 181.736289][ T9093] IPv6: NLM_F_CREATE should be set when creating new route [ 181.743566][ T9093] IPv6: NLM_F_CREATE should be set when creating new route [ 181.778278][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.958274][ T9100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.079010][ T9099] netlink: 'syz.1.894': attribute type 12 has an invalid length. [ 182.211425][ T9096] lo speed is unknown, defaulting to 1000 [ 182.602448][ T9119] xt_bpf: check failed: parse error [ 183.645743][ T9148] __nla_validate_parse: 3 callbacks suppressed [ 183.645762][ T9148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.907'. [ 183.720613][ T9151] ipvlan0: entered promiscuous mode [ 184.317811][ T9176] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 184.333663][ T9176] syzkaller1: linktype set to 0 [ 184.504269][ T9187] ip6t_REJECT: ECHOREPLY is not supported [ 184.562320][ T9030] Set syz1 is full, maxelem 65536 reached [ 184.711793][ T9198] tipc: Trying to set illegal importance in message [ 184.874378][ T9205] netlink: 'syz.1.920': attribute type 1 has an invalid length. [ 184.905179][ T9205] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.993916][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.918'. [ 185.076171][ T9213] netlink: 'syz.4.921': attribute type 2 has an invalid length. [ 185.092885][ T9213] tipc: Started in network mode [ 185.107955][ T9213] tipc: Node identity 340008, cluster identity 4711 [ 185.119856][ T9213] tipc: Node number set to 3407880 [ 185.180262][ T9215] xt_bpf: check failed: parse error [ 185.283392][ T9220] netlink: 'syz.2.924': attribute type 8 has an invalid length. [ 185.329749][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.924'. [ 185.356296][ T9220] veth1_to_team: entered promiscuous mode [ 185.370018][ T9220] gretap0: entered promiscuous mode [ 185.379626][ T9220] batadv_slave_0: entered promiscuous mode [ 185.389240][ T9220] batadv_slave_0: left promiscuous mode [ 185.399859][ T9220] veth1_to_team: left promiscuous mode [ 185.410018][ T9220] gretap0: left promiscuous mode [ 186.075077][ T9243] xt_CT: No such helper "syz1" [ 186.514492][ T9271] xt_bpf: check failed: parse error [ 186.609452][ T9277] xt_hashlimit: max too large, truncated to 1048576 [ 186.750317][ T9279] netlink: 60 bytes leftover after parsing attributes in process `syz.1.940'. [ 186.784318][ T9279] netlink: 44 bytes leftover after parsing attributes in process `syz.1.940'. [ 186.804761][ T9279] netlink: 43 bytes leftover after parsing attributes in process `syz.1.940'. [ 186.821672][ T9279] netlink: 'syz.1.940': attribute type 5 has an invalid length. [ 186.838710][ T9279] netlink: 43 bytes leftover after parsing attributes in process `syz.1.940'. [ 187.286584][ T9294] xt_CT: No such helper "syz1" [ 187.321177][ T9288] netlink: 36 bytes leftover after parsing attributes in process `syz.2.942'. [ 187.427676][ T5897] IPVS: starting estimator thread 0... [ 187.526694][ T9305] IPVS: using max 28 ests per chain, 67200 per kthread [ 187.634577][ T9299] lo speed is unknown, defaulting to 1000 [ 187.786135][ T9307] lo speed is unknown, defaulting to 1000 [ 188.554675][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'. [ 188.725962][ T5507] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.833580][ T9351] tipc: Enabled bearer , priority 0 [ 188.850079][ T9353] xt_bpf: check failed: parse error [ 188.858706][ T9351] syzkaller0: entered promiscuous mode [ 188.871826][ T9351] syzkaller0: entered allmulticast mode [ 189.131615][ T9358] tipc: Resetting bearer [ 189.172756][ T9350] tipc: Resetting bearer [ 189.234526][ T9350] tipc: Disabling bearer [ 190.000230][ T9290] Set syz1 is full, maxelem 65536 reached [ 190.227478][ T9392] lo speed is unknown, defaulting to 1000 [ 190.250828][ T9394] netlink: 84 bytes leftover after parsing attributes in process `syz.4.958'. [ 190.432648][ T9400] mac80211_hwsim hwsim3 wlan1: Master is either lo or non-ether device [ 190.528269][ T9396] xt_CT: No such helper "syz1" [ 190.753644][ T9416] netlink: 'syz.3.965': attribute type 3 has an invalid length. [ 192.212241][ T9458] FAULT_INJECTION: forcing a failure. [ 192.212241][ T9458] name failslab, interval 1, probability 0, space 0, times 0 [ 192.240297][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 192.259466][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.977'. [ 192.272199][ T9458] CPU: 0 UID: 0 PID: 9458 Comm: syz.0.976 Not tainted syzkaller #0 PREEMPT(full) [ 192.272224][ T9458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.272234][ T9458] Call Trace: [ 192.272241][ T9458] [ 192.272248][ T9458] dump_stack_lvl+0xe8/0x150 [ 192.272280][ T9458] should_fail_ex+0x412/0x560 [ 192.272313][ T9458] should_failslab+0xa8/0x100 [ 192.272339][ T9458] __kmalloc_noprof+0xe8/0x760 [ 192.272360][ T9458] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 192.272381][ T9458] ? sock_kmalloc+0xd6/0x160 [ 192.272411][ T9458] sock_kmalloc+0xd6/0x160 [ 192.272434][ T9458] af_alg_alloc_areq+0x99/0x200 [ 192.272455][ T9458] skcipher_recvmsg+0x321/0x1140 [ 192.272495][ T9458] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 192.272513][ T9458] ? __lock_acquire+0x6b5/0x2cf0 [ 192.272537][ T9458] ? aa_sock_msg_perm+0xf1/0x1b0 [ 192.272557][ T9458] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 192.272577][ T9458] ? security_socket_recvmsg+0x7e/0x2c0 [ 192.272599][ T9458] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 192.272619][ T9458] sock_recvmsg+0x172/0x1b0 [ 192.272646][ T9458] ____sys_recvmsg+0x1e6/0x4a0 [ 192.272679][ T9458] ? __pfx_____sys_recvmsg+0x10/0x10 [ 192.272721][ T9458] ? import_iovec+0x73/0xa0 [ 192.272745][ T9458] ___sys_recvmsg+0x215/0x590 [ 192.272771][ T9458] ? __pfx____sys_recvmsg+0x10/0x10 [ 192.272796][ T9458] ? __fget_files+0x2a/0x420 [ 192.272832][ T9458] ? __fget_files+0x3a0/0x420 [ 192.272860][ T9458] do_recvmmsg+0x334/0x800 [ 192.272890][ T9458] ? __pfx_do_recvmmsg+0x10/0x10 [ 192.272923][ T9458] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 192.272967][ T9458] __x64_sys_recvmmsg+0x198/0x250 [ 192.272991][ T9458] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 192.273021][ T9458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.273040][ T9458] do_syscall_64+0x15f/0xf80 [ 192.273063][ T9458] ? trace_irq_disable+0x3b/0x140 [ 192.273087][ T9458] ? clear_bhb_loop+0x40/0x90 [ 192.273109][ T9458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.273126][ T9458] RIP: 0033:0x7f244ff9cdd9 [ 192.273143][ T9458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.273157][ T9458] RSP: 002b:00007f2450e48028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 192.273176][ T9458] RAX: ffffffffffffffda RBX: 00007f2450215fa0 RCX: 00007f244ff9cdd9 [ 192.273189][ T9458] RDX: 0000000000000001 RSI: 0000200000001780 RDI: 000000000000000a [ 192.273199][ T9458] RBP: 00007f2450e48090 R08: 0000000000000000 R09: 0000000000000000 [ 192.273210][ T9458] R10: 0000000000010101 R11: 0000000000000246 R12: 0000000000000001 [ 192.273221][ T9458] R13: 00007f2450216038 R14: 00007f2450215fa0 R15: 00007ffe1465e3d8 [ 192.273251][ T9458] [ 192.376773][ T9462] netlink: 'syz.1.977': attribute type 7 has an invalid length. [ 192.520166][ T9387] Set syz1 is full, maxelem 65536 reached [ 192.751874][ T9478] xt_bpf: check failed: parse error [ 192.755033][ T9464] xt_CT: No such helper "syz1" [ 192.862487][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.983'. [ 192.890333][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.983'. [ 192.893192][ T9486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.983'. [ 192.919297][ T9486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 192.945951][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.983'. [ 192.959448][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.983'. [ 192.977980][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 193.465104][ T9516] lo speed is unknown, defaulting to 1000 [ 193.695906][ T9516] xt_CT: No such helper "syz1" [ 193.769956][ T9531] dvmrp0: entered allmulticast mode [ 193.926305][ T9538] lo speed is unknown, defaulting to 1000 [ 194.151749][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.669375][ T9537] Can't find ip_set type hash7¾)3‚AO½t [ 194.999873][ T9571] geneve1: entered promiscuous mode [ 195.292847][ T9468] Set syz1 is full, maxelem 65536 reached [ 195.492420][ T9577] tipc: Enabled bearer , priority 14 [ 195.889785][ T9525] Set syz1 is full, maxelem 65536 reached [ 195.979271][ T9598] bpq0: entered promiscuous mode [ 195.990702][ T9598] bpq0: entered allmulticast mode [ 196.025193][ T9598] dummy0: entered promiscuous mode [ 196.032237][ T9598] bridge0: entered promiscuous mode [ 196.041665][ T9598] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 196.056577][ T9598] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 196.073932][ T9598] hsr1: entered allmulticast mode [ 196.079426][ T9598] dummy0: entered allmulticast mode [ 196.085859][ T9598] bridge0: entered allmulticast mode [ 196.112762][ T9598] dvmrp1: tun_chr_ioctl cmd 2147767507 [ 196.303613][ T9608] __nla_validate_parse: 11 callbacks suppressed [ 196.303630][ T9608] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1015'. [ 196.320982][ T9608] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1015'. [ 196.332149][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1013'. [ 196.415550][ T9617] netlink: 'syz.2.1016': attribute type 10 has an invalid length. [ 196.444075][ T9617] team0: Device wg1 is of different type [ 196.562865][ T9624] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1019'. [ 196.594573][ T9624] bond3: (slave bond0): Device is not bonding slave [ 196.601396][ T9624] bond3: option active_slave: invalid value (bond0) [ 196.609603][ T9624] bond3 (unregistering): Released all slaves [ 196.846976][ T9631] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1021'. [ 196.920943][ T9638] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1022'. [ 197.443867][ T9645] tipc: Resetting bearer [ 199.279301][ T9607] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 199.546898][ T5897] IPVS: starting estimator thread 0... [ 199.558317][ T9652] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 199.686990][ T9661] IPVS: using max 29 ests per chain, 69600 per kthread [ 199.864512][ T5897] lo speed is unknown, defaulting to 1000 [ 200.120181][ T9684] gre0 speed is unknown, defaulting to 1000 [ 200.129946][ T9684] gre0 speed is unknown, defaulting to 1000 [ 200.137170][ T9684] gre0 speed is unknown, defaulting to 1000 [ 200.244474][ T9685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.262498][ T9685] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.298609][ T9685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.338138][ T5897] lo speed is unknown, defaulting to 1000 [ 200.352312][ T5897] syz2: Port: 1 Link ACTIVE [ 200.502579][ T5924] gre0 speed is unknown, defaulting to 1000 [ 200.509539][ T9684] infiniband syz1: set active [ 200.516074][ T5924] syz1: Port: 1 Link ACTIVE [ 200.520859][ T9684] infiniband syz1: added gre0 [ 200.547126][ T9684] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 200.562960][ T9684] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 200.590019][ T9684] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 200.673641][ T9684] RDS/IB: syz1: added [ 200.687418][ T9684] smc: adding ib device syz1 with port count 1 [ 200.705266][ T9684] smc: ib device syz1 port 1 has no pnetid [ 200.753738][ T5924] gre0 speed is unknown, defaulting to 1000 [ 200.955585][ T9691] x_tables: duplicate underflow at hook 2 [ 201.045910][ T9684] gre0 speed is unknown, defaulting to 1000 [ 201.354976][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 201.355020][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 201.361114][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 201.361140][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 201.380074][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 201.790554][ T9694] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1037'. [ 201.839960][ T9684] gre0 speed is unknown, defaulting to 1000 [ 201.856178][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.870901][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.913068][ T9694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.280291][ T9684] gre0 speed is unknown, defaulting to 1000 [ 202.573615][ T9719] xt_CT: No such helper "syz1" [ 202.623647][ T9723] FAULT_INJECTION: forcing a failure. [ 202.623647][ T9723] name failslab, interval 1, probability 0, space 0, times 0 [ 202.638443][ T9723] CPU: 1 UID: 0 PID: 9723 Comm: syz.3.1042 Not tainted syzkaller #0 PREEMPT(full) [ 202.638467][ T9723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 202.638477][ T9723] Call Trace: [ 202.638484][ T9723] [ 202.638491][ T9723] dump_stack_lvl+0xe8/0x150 [ 202.638523][ T9723] should_fail_ex+0x412/0x560 [ 202.638556][ T9723] should_failslab+0xa8/0x100 [ 202.638581][ T9723] __kmalloc_noprof+0xe8/0x760 [ 202.638601][ T9723] ? skcipher_walk_virt+0x85/0x6a0 [ 202.638617][ T9723] ? skcipher_next_slow+0xee/0x230 [ 202.638634][ T9723] ? skcipher_walk_next+0x7b3/0xbe0 [ 202.638653][ T9723] skcipher_next_slow+0xee/0x230 [ 202.638675][ T9723] xts_xor_tweak+0x1a7/0x6b0 [ 202.638705][ T9723] ? ecb_decrypt+0x24e/0x2d0 [ 202.638723][ T9723] ? __pfx_xts_xor_tweak+0x10/0x10 [ 202.638744][ T9723] ? cipher_crypt_one+0x13f/0x280 [ 202.638780][ T9723] ? af_alg_pull_tsgl+0x900/0x9e0 [ 202.638810][ T9723] ? __kmalloc_noprof+0x1b8/0x760 [ 202.638834][ T9723] xts_decrypt+0x290/0x3a0 [ 202.638860][ T9723] skcipher_recvmsg+0xae6/0x1140 [ 202.638898][ T9723] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 202.638916][ T9723] ? __lock_acquire+0x6b5/0x2cf0 [ 202.638941][ T9723] ? aa_sock_msg_perm+0xf1/0x1b0 [ 202.638961][ T9723] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 202.638980][ T9723] ? security_socket_recvmsg+0x7e/0x2c0 [ 202.639002][ T9723] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 202.639022][ T9723] sock_recvmsg+0x172/0x1b0 [ 202.639050][ T9723] ____sys_recvmsg+0x1e6/0x4a0 [ 202.639079][ T9723] ? __pfx_____sys_recvmsg+0x10/0x10 [ 202.639114][ T9723] ? import_iovec+0x73/0xa0 [ 202.639138][ T9723] ___sys_recvmsg+0x215/0x590 [ 202.639163][ T9723] ? __pfx____sys_recvmsg+0x10/0x10 [ 202.639188][ T9723] ? __fget_files+0x2a/0x420 [ 202.639223][ T9723] ? __fget_files+0x3a0/0x420 [ 202.639252][ T9723] do_recvmmsg+0x334/0x800 [ 202.639280][ T9723] ? __pfx_do_recvmmsg+0x10/0x10 [ 202.639313][ T9723] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 202.639355][ T9723] __x64_sys_recvmmsg+0x198/0x250 [ 202.639386][ T9723] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 202.639415][ T9723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.639435][ T9723] do_syscall_64+0x15f/0xf80 [ 202.639461][ T9723] ? trace_irq_disable+0x3b/0x140 [ 202.639483][ T9723] ? clear_bhb_loop+0x40/0x90 [ 202.639505][ T9723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.639523][ T9723] RIP: 0033:0x7f3e47f9cdd9 [ 202.639539][ T9723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.639553][ T9723] RSP: 002b:00007f3e48d73028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 202.639572][ T9723] RAX: ffffffffffffffda RBX: 00007f3e48215fa0 RCX: 00007f3e47f9cdd9 [ 202.639584][ T9723] RDX: 0000000000000001 RSI: 0000200000001780 RDI: 000000000000000a [ 202.639595][ T9723] RBP: 00007f3e48d73090 R08: 0000000000000000 R09: 0000000000000000 [ 202.639606][ T9723] R10: 0000000000010101 R11: 0000000000000246 R12: 0000000000000001 [ 202.639616][ T9723] R13: 00007f3e48216038 R14: 00007f3e48215fa0 R15: 00007ffdbfebf578 [ 202.639645][ T9723] [ 202.744033][ T9684] gre0 speed is unknown, defaulting to 1000 [ 202.965089][ T9732] xt_bpf: check failed: parse error [ 203.138885][ T9739] xt_bpf: check failed: parse error [ 203.815092][ T9684] gre0 speed is unknown, defaulting to 1000 [ 203.835895][ T9760] bpq0: left promiscuous mode [ 203.858817][ T9760] bpq0: left allmulticast mode [ 203.873252][ T9760] netlink: 'syz.3.1050': attribute type 11 has an invalid length. [ 203.896629][ T9760] netlink: 'syz.3.1050': attribute type 23 has an invalid length. [ 203.910846][ T9760] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1050'. [ 203.973652][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1052'. [ 204.019508][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1052'. [ 204.073023][ T9764] x_tables: duplicate underflow at hook 3 [ 204.489250][ T9791] xt_CT: No such helper "syz1" [ 204.504553][ T9797] xt_bpf: check failed: parse error [ 205.995172][ T9852] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1071'. [ 206.034667][ T9852] netlink: 'syz.2.1071': attribute type 2 has an invalid length. [ 206.422597][ T9872] xt_bpf: check failed: parse error [ 206.997332][ T9790] Set syz1 is full, maxelem 65536 reached [ 207.390280][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1090'. [ 207.419273][ T9917] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1090'. [ 207.442169][ T9927] netlink: 'syz.4.1093': attribute type 13 has an invalid length. [ 207.915915][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1098'. [ 207.957155][ T9948] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1101'. [ 207.991626][ T9946] bond0: entered promiscuous mode [ 208.029630][ T9946] batadv_slave_0: entered promiscuous mode [ 208.223340][ T9957] lo speed is unknown, defaulting to 1000 [ 208.234050][ T9957] gre0 speed is unknown, defaulting to 1000 [ 208.334506][ T9966] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1104'. [ 208.361346][ T9966] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes. [ 209.170981][ T9995] veth0_macvtap: Caught tx_queue_len zero misconfig [ 209.402876][T10005] xt_bpf: check failed: parse error [ 209.740681][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1115'. [ 209.830630][T10012] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1115'. [ 210.015615][T10024] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 210.046310][T10024] bond3 (unregistering): Released all slaves [ 210.199865][T10028] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1118'. [ 210.209797][T10028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1118'. [ 210.222109][T10028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1118'. [ 210.505299][T10044] syzkaller0: entered promiscuous mode [ 210.530839][T10044] syzkaller0: entered allmulticast mode [ 210.727011][T10055] xt_bpf: check failed: parse error [ 211.153201][T10080] syzkaller0: entered promiscuous mode [ 211.160836][T10080] syzkaller0: entered allmulticast mode [ 211.407463][T10099] xt_hashlimit: size too large, truncated to 1048576 [ 211.712099][T10114] netlink: 'syz.2.1140': attribute type 1 has an invalid length. [ 211.749046][T10106] xt_bpf: check failed: parse error [ 211.954278][T10124] xt_limit: Overflow, try lower: 268435456/134217728 [ 213.200294][T10113] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 213.201901][T10118] netlink: 'syz.3.1142': attribute type 3 has an invalid length. [ 213.218909][T10118] netlink: 'syz.3.1142': attribute type 3 has an invalid length. [ 213.226998][T10118] __nla_validate_parse: 10 callbacks suppressed [ 213.227015][T10118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1142'. [ 213.471942][T10128] vxcan5: entered promiscuous mode [ 213.609850][T10144] netlink: 'syz.4.1146': attribute type 13 has an invalid length. [ 213.645183][T10144] netlink: 'syz.4.1146': attribute type 17 has an invalid length. [ 213.780018][T10162] netlink: 'syz.0.1150': attribute type 13 has an invalid length. [ 213.793501][T10162] netlink: 'syz.0.1150': attribute type 17 has an invalid length. [ 213.811379][T10144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.822860][T10144] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.138560][T10162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.159341][T10162] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.169428][T10162] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.632653][T10194] xfrm0: left promiscuous mode [ 214.652639][T10194] xfrm0: left allmulticast mode [ 214.672752][T10194] ip6erspan0: left allmulticast mode [ 214.682587][T10194] sit1: left allmulticast mode [ 214.706211][T10205] syzkaller0: entered promiscuous mode [ 214.716942][T10205] syzkaller0: entered allmulticast mode [ 214.764882][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1161'. [ 214.933415][T10210] lo speed is unknown, defaulting to 1000 [ 214.943830][T10210] gre0 speed is unknown, defaulting to 1000 [ 215.234382][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'. [ 215.591293][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1176'. [ 215.810816][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'. [ 216.025130][T10267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1180'. [ 216.053091][T10267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1180'. [ 216.079434][T10267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1180'. [ 216.196010][T10278] netlink: 'syz.1.1181': attribute type 9 has an invalid length. [ 216.196010][T10277] netlink: 'syz.1.1181': attribute type 9 has an invalid length. [ 216.378428][T10281] erspan0: entered promiscuous mode [ 216.610618][T10256] lec:lec_atm_close: lec0: Shut down! [ 216.821481][T10298] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1188'. [ 217.153640][T10318] netlink: 'syz.2.1194': attribute type 15 has an invalid length. [ 217.500048][T10338] xt_CT: No such helper "syz1" [ 217.712757][T10357] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1203'. [ 217.929692][T10364] 8021q: adding VLAN 0 to HW filter on device bond5 [ 218.386935][ T5969] lec:lec_start_xmit: lec0:No lecd attached [ 218.444317][T10386] netlink: 'syz.4.1208': attribute type 29 has an invalid length. [ 218.478357][T10386] __nla_validate_parse: 2 callbacks suppressed [ 218.478375][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 218.538753][T10386] netlink: 'syz.4.1208': attribute type 29 has an invalid length. [ 218.582283][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 218.622224][T10386] netlink: 'syz.4.1208': attribute type 29 has an invalid length. [ 218.669950][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 218.723205][T10386] netlink: 'syz.4.1208': attribute type 29 has an invalid length. [ 218.752090][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 218.777904][T10386] netlink: 'syz.4.1208': attribute type 29 has an invalid length. [ 218.796630][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 218.835207][T10386] netlink: 'syz.4.1208': attribute type 29 has an invalid length. [ 218.864847][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 218.889982][T10386] netlink: 'syz.4.1208': attribute type 29 has an invalid length. [ 218.900191][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 218.918337][T10386] netlink: 'syz.4.1208': attribute type 29 has an invalid length. [ 218.932413][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 218.959905][T10386] netlink: 'syz.4.1208': attribute type 29 has an invalid length. [ 218.985207][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 219.020589][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 219.194571][T10407] delete_channel: no stack [ 220.146163][T10333] Set syz1 is full, maxelem 65536 reached [ 220.648536][T10449] lo speed is unknown, defaulting to 1000 [ 220.702113][T10449] gre0 speed is unknown, defaulting to 1000 [ 221.301092][T10468] tipc: Resetting bearer [ 221.354633][ T3545] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.374986][ T3545] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.386188][ T3545] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.438415][ T3545] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.902229][T10476] bond3: entered promiscuous mode [ 221.926240][T10476] 8021q: adding VLAN 0 to HW filter on device bond3 [ 221.966644][T10482] 8021q: adding VLAN 0 to HW filter on device bond3 [ 221.973890][T10482] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 221.986132][T10482] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 222.015859][T10482] bond3: (slave wireguard0): making interface the new active one [ 222.024060][T10482] wireguard0: entered promiscuous mode [ 222.031736][T10482] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 222.068896][T10483] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address [ 222.085786][T10483] bond3: (slave wireguard1): Enslaving as a backup interface with an up link [ 222.321287][T10501] xt_bpf: check failed: parse error [ 222.596114][T10508] lo speed is unknown, defaulting to 1000 [ 222.603652][T10508] gre0 speed is unknown, defaulting to 1000 [ 222.750450][T10514] validate_nla: 15 callbacks suppressed [ 222.750469][T10514] netlink: 'syz.0.1240': attribute type 13 has an invalid length. [ 223.638738][T10541] __nla_validate_parse: 15 callbacks suppressed [ 223.638757][T10541] netlink: 4972 bytes leftover after parsing attributes in process `syz.0.1244'. [ 223.789690][T10549] xt_CT: No such helper "syz1" [ 224.163868][T10566] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1253'. [ 224.226477][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5840 ms [ 224.235956][ C0] lec:lec_tx_timeout: lec0 [ 224.240897][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 224.463788][T10579] ip6gre1: entered promiscuous mode [ 224.476568][T10579] ip6gre1: entered allmulticast mode [ 224.537236][T10579] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 224.615959][T10584] netlink: 16158 bytes leftover after parsing attributes in process `syz.1.1260'. [ 224.914649][T10597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1263'. [ 225.071890][T10605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1265'. [ 225.246220][T10548] Set syz1 is full, maxelem 65536 reached [ 225.581722][T10612] lo speed is unknown, defaulting to 1000 [ 225.602223][T10612] gre0 speed is unknown, defaulting to 1000 [ 225.782986][T10622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1272'. [ 225.797808][T10622] netlink: 'syz.0.1272': attribute type 2 has an invalid length. [ 226.158588][T10641] tipc: Enabled bearer , priority 0 [ 226.336705][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1280'. [ 226.349825][T10647] syzkaller0: entered promiscuous mode [ 226.367980][T10647] syzkaller0: entered allmulticast mode [ 226.385098][T10640] tipc: Resetting bearer [ 226.431824][T10644] ipvlan2: entered allmulticast mode [ 226.446712][T10644] syz_tun: entered allmulticast mode [ 226.700397][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1287'. [ 226.820836][T10631] tipc: Resetting bearer [ 226.823731][T10669] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 226.914091][T10631] tipc: Disabling bearer [ 227.070754][T10684] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 227.228513][T10695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1293'. [ 227.425097][T10705] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1296'. [ 227.501339][T10697] xt_bpf: check failed: parse error [ 227.675842][T10705] bond2: option primary_reselect: invalid value (133) [ 227.719111][T10705] bond2 (unregistering): Released all slaves [ 227.921938][T10729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.304134][T10753] netlink: 'syz.4.1310': attribute type 1 has an invalid length. [ 228.354114][T10753] bond6: entered promiscuous mode [ 228.362944][T10753] 8021q: adding VLAN 0 to HW filter on device bond6 [ 228.598349][T10753] 8021q: adding VLAN 0 to HW filter on device bond6 [ 228.667962][T10753] bond6: (slave gre3): The slave device specified does not support setting the MAC address [ 228.701835][T10753] bond6: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 228.739292][T10753] bond6: (slave gre3): making interface the new active one [ 228.746682][T10753] gre3: entered promiscuous mode [ 228.753666][T10753] bond6: (slave gre3): Enslaving as an active interface with an up link [ 228.755962][T10769] __nla_validate_parse: 5 callbacks suppressed [ 228.755978][T10769] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.1313'. [ 228.827231][T10765] lo speed is unknown, defaulting to 1000 [ 228.867325][T10765] gre0 speed is unknown, defaulting to 1000 [ 229.860830][T10806] lo speed is unknown, defaulting to 1000 [ 229.888138][T10806] gre0 speed is unknown, defaulting to 1000 [ 229.986467][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 229.994534][ C0] lec:lec_tx_timeout: lec0 [ 229.999751][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 230.006944][ T5852] Bluetooth: hci3: command 0x0405 tx timeout [ 230.014445][T10820] bond3 (unregistering): Released all slaves [ 230.181565][T10830] netlink: 'syz.4.1331': attribute type 39 has an invalid length. [ 230.684003][T10847] xt_bpf: check failed: parse error [ 230.763402][T10855] xt_bpf: check failed: parse error [ 230.962669][T10842] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1334'. [ 231.524957][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1339'. [ 231.634553][T10890] netlink: 'syz.3.1341': attribute type 1 has an invalid length. [ 231.742976][T10890] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.784741][T10893] bond3: entered allmulticast mode [ 232.901858][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1350'. [ 233.480642][T10952] xt_CT: No such helper "syz1" [ 233.492990][T10943] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1351'. [ 233.530537][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1356'. [ 233.560806][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1356'. [ 233.594041][T10958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.610275][ T5897] lo speed is unknown, defaulting to 1000 [ 233.616262][ T5897] syz2: Port: 1 Link DOWN [ 233.712411][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1357'. [ 233.764784][T10959] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1356'. [ 234.081468][ T5969] IPVS: starting estimator thread 0... [ 234.177323][T10973] IPVS: using max 26 ests per chain, 62400 per kthread [ 234.429481][T10982] ip6tnl1: entered allmulticast mode [ 234.712691][T10996] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1364'. [ 235.273620][T10949] Set syz1 is full, maxelem 65536 reached [ 235.557039][T11010] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1369'. [ 235.616602][T11019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1373'. [ 235.740836][T11021] syzkaller0: entered promiscuous mode [ 235.746462][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 235.754592][ C0] lec:lec_tx_timeout: lec0 [ 235.759662][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 235.767477][T11021] syzkaller0: entered allmulticast mode [ 235.865194][T11025] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1373'. [ 236.353860][T11039] netlink: 'syz.1.1378': attribute type 1 has an invalid length. [ 236.371583][T11042] SET target dimension over the limit! [ 236.381565][T11039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1378'. [ 236.395431][T11039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1378'. [ 236.471845][T11046] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1378'. [ 236.548395][T11048] netlink: 'syz.0.1380': attribute type 13 has an invalid length. [ 236.567936][T11049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1380'. [ 236.588711][T11048] netlink: 'syz.0.1380': attribute type 17 has an invalid length. [ 236.758298][T11048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.780218][T11048] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.797836][T11048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.965277][T11065] netlink: 'syz.0.1385': attribute type 11 has an invalid length. [ 236.974702][T11063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1387'. [ 237.003305][T11065] netlink: 'syz.0.1385': attribute type 23 has an invalid length. [ 237.571011][T11081] syzkaller0: entered promiscuous mode [ 237.598324][T11094] netlink: 'syz.1.1393': attribute type 1 has an invalid length. [ 237.600983][T11081] syzkaller0: entered allmulticast mode [ 237.644583][T11082] syzkaller0: left promiscuous mode [ 237.659087][T11082] syzkaller0: left allmulticast mode [ 237.664443][T11094] netlink: 'syz.1.1393': attribute type 2 has an invalid length. [ 237.725811][T11096] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 237.763340][T11096] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 237.931754][T11104] xt_recent: Unsupported userspace flags (000000b1) [ 238.242639][T11116] netlink: 'syz.4.1399': attribute type 11 has an invalid length. [ 238.262536][T11116] netlink: 'syz.4.1399': attribute type 23 has an invalid length. [ 240.301060][T11134] netlink: 'syz.4.1404': attribute type 4 has an invalid length. [ 240.333048][T11134] __nla_validate_parse: 4 callbacks suppressed [ 240.333074][T11134] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1404'. [ 240.388594][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1404'. [ 240.629381][T11149] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1409'. [ 240.693306][T11136] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1406'. [ 240.786878][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 240.794964][ C0] lec:lec_tx_timeout: lec0 [ 240.800112][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 240.905039][T11153] syzkaller0: entered promiscuous mode [ 240.924977][T11153] syzkaller0: entered allmulticast mode [ 241.262534][T11168] netlink: 'syz.1.1414': attribute type 1 has an invalid length. [ 241.351901][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1414'. [ 241.374207][T11172] netlink: 'syz.3.1415': attribute type 9 has an invalid length. [ 241.392368][T11172] netlink: 'syz.3.1415': attribute type 11 has an invalid length. [ 241.433703][T11172] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.1415'. [ 241.443859][T11168] 8021q: adding VLAN 0 to HW filter on device bond6 [ 241.555656][T11180] netlink: 'syz.4.1416': attribute type 9 has an invalid length. [ 241.564947][T11167] bond6: (slave geneve2): making interface the new active one [ 241.592419][T11180] netlink: 'syz.4.1416': attribute type 11 has an invalid length. [ 241.615111][T11167] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 241.633271][T11180] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.1416'. [ 241.659538][ T1174] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.690688][ T1174] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.712274][ T1174] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.722658][ T1174] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.584880][T11198] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1419'. [ 242.820949][T11198] lo speed is unknown, defaulting to 1000 [ 242.829152][T11198] gre0 speed is unknown, defaulting to 1000 [ 244.337514][T11172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.500688][T11214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'. [ 244.500888][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'. [ 244.713565][T11222] xt_CT: No such helper "syz1" [ 245.015061][T11238] xt_CT: No such helper "syz1" [ 245.568533][T11247] __nla_validate_parse: 2 callbacks suppressed [ 245.568552][T11247] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1431'. [ 245.806481][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 245.814581][ C0] lec:lec_tx_timeout: lec0 [ 245.819294][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 246.457369][T11265] netlink: 'syz.1.1435': attribute type 9 has an invalid length. [ 246.470858][T11265] netlink: 'syz.1.1435': attribute type 11 has an invalid length. [ 246.479328][T11265] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.1435'. [ 246.599538][T11272] lo speed is unknown, defaulting to 1000 [ 246.619852][T11272] gre0 speed is unknown, defaulting to 1000 [ 247.703322][T11286] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1439'. [ 248.530217][T11218] Set syz1 is full, maxelem 65536 reached [ 248.631754][T11305] netlink: 'syz.1.1444': attribute type 11 has an invalid length. [ 248.639848][T11305] netlink: 'syz.1.1444': attribute type 23 has an invalid length. [ 248.647833][T11305] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1444'. [ 248.691495][T11298] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1442'. [ 248.724446][T11308] syzkaller1: entered promiscuous mode [ 248.736822][T11308] syzkaller1: entered allmulticast mode [ 248.873750][T11310] tipc: Started in network mode [ 248.895862][T11310] tipc: Node identity e0000001, cluster identity 4711 [ 248.920335][T11310] tipc: Enabling of bearer rejected, failed to enable media [ 249.191594][T11316] netlink: 'syz.1.1448': attribute type 21 has an invalid length. [ 249.206678][T11316] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1448'. [ 249.378556][T11319] netlink: 'syz.1.1448': attribute type 2 has an invalid length. [ 249.410029][T11319] netlink: 'syz.1.1448': attribute type 1 has an invalid length. [ 249.463865][T11327] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1450'. [ 250.192834][T11342] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1456'. [ 250.210425][T11342] netlink: 'syz.1.1456': attribute type 1 has an invalid length. [ 250.262249][T11342] 8021q: adding VLAN 0 to HW filter on device bond7 [ 250.334044][T11342] bond7: (slave syz_tun): Enslaving as a backup interface with an up link [ 250.458993][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1457'. [ 250.546484][T11349] netlink: 'syz.1.1459': attribute type 11 has an invalid length. [ 250.566607][T11349] netlink: 'syz.1.1459': attribute type 23 has an invalid length. [ 250.576095][T11349] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1459'. [ 250.792034][T11354] xt_bpf: check failed: parse error [ 250.826506][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 250.834601][ C0] lec:lec_tx_timeout: lec0 [ 250.839571][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 250.871032][T11358] smc: removing ib device syz1 [ 251.003278][T11358] smbdirect: ib_dev[syz1] removed [ 251.371246][T11235] Set syz1 is full, maxelem 65536 reached [ 251.571712][T11371] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1468'. [ 251.717031][T11375] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1470'. [ 251.734294][T11379] netlink: 'syz.2.1471': attribute type 3 has an invalid length. [ 251.764025][T11379] netlink: 'syz.2.1471': attribute type 1 has an invalid length. [ 251.792923][T11379] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1471'. [ 251.931619][T11386] netlink: 'syz.3.1473': attribute type 13 has an invalid length. [ 251.962644][T11386] netlink: 'syz.3.1473': attribute type 1 has an invalid length. [ 251.994878][T11386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1473'. [ 252.175998][T11391] netlink: 'syz.1.1475': attribute type 7 has an invalid length. [ 252.261151][T11397] xt_TCPMSS: Only works on TCP SYN packets [ 252.272314][T11398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1476'. [ 252.300731][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1476'. [ 252.494782][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1478'. [ 252.728693][T11381] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1472'. [ 252.755209][T11381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.901156][T11412] netlink: 'syz.0.1482': attribute type 1 has an invalid length. [ 252.915284][T11412] netlink: 'syz.0.1482': attribute type 4 has an invalid length. [ 252.942563][T11412] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1482'. [ 253.040016][T11414] syzkaller0: entered promiscuous mode [ 253.046135][T11414] syzkaller0: entered allmulticast mode [ 253.403484][T11433] netlink: 'syz.1.1488': attribute type 1 has an invalid length. [ 253.717666][T11427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1487'. [ 253.822220][T11446] lo speed is unknown, defaulting to 1000 [ 254.200832][T11457] netlink: 'syz.0.1496': attribute type 9 has an invalid length. [ 254.208945][T11457] netlink: 'syz.0.1496': attribute type 11 has an invalid length. [ 255.598720][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.846588][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 255.854588][ C0] lec:lec_tx_timeout: lec0 [ 255.859162][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 257.153768][T11457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 257.293318][T11484] netlink: 'syz.4.1504': attribute type 11 has an invalid length. [ 257.324673][T11484] netlink: 'syz.4.1504': attribute type 23 has an invalid length. [ 257.351870][T11484] __nla_validate_parse: 5 callbacks suppressed [ 257.351887][T11484] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1504'. [ 257.371413][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1506'. [ 257.390853][T11487] tun0: tun_chr_ioctl cmd 1074025672 [ 257.410231][T11487] tun0: ignored: set checksum disabled [ 257.440963][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1505'. [ 257.469854][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1505'. [ 257.532797][T11498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1506'. [ 257.618753][T11498] geneve3: entered promiscuous mode [ 257.847691][T11519] gretap0: entered promiscuous mode [ 257.854662][T11519] vlan3: entered promiscuous mode [ 258.109643][T11531] netlink: 'syz.3.1519': attribute type 11 has an invalid length. [ 258.133495][T11531] netlink: 'syz.3.1519': attribute type 23 has an invalid length. [ 258.172702][T11531] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1519'. [ 258.256080][T11530] xt_bpf: check failed: parse error [ 258.459227][T11544] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1521'. [ 258.523265][T11551] netlink: 'syz.1.1523': attribute type 1 has an invalid length. [ 258.766263][T11560] netlink: 'syz.1.1527': attribute type 9 has an invalid length. [ 258.794709][T11560] netlink: 'syz.1.1527': attribute type 11 has an invalid length. [ 258.803654][T11560] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.1527'. [ 258.822437][T11563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1528'. [ 258.909838][T11576] netlink: 'syz.3.1531': attribute type 11 has an invalid length. [ 258.927901][T11576] netlink: 'syz.3.1531': attribute type 23 has an invalid length. [ 258.936321][T11576] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1531'. [ 259.221514][T11597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.492866][T11610] unsupported nlmsg_type 40 [ 259.609115][T11611] lo speed is unknown, defaulting to 1000 [ 259.622450][T11622] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 259.714394][T11625] tipc: Can't bind to reserved service type 0 [ 259.719756][T11626] netlink: 'syz.2.1545': attribute type 11 has an invalid length. [ 259.733428][T11626] netlink: 'syz.2.1545': attribute type 23 has an invalid length. [ 259.867349][T11630] xt_CT: No such helper "syz1" [ 260.866502][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 260.874621][ C0] lec:lec_tx_timeout: lec0 [ 260.881457][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 261.099498][T11662] nbd: couldn't find device at index 0 [ 261.278866][T11671] netlink: 'syz.1.1561': attribute type 9 has an invalid length. [ 261.306367][T11671] netlink: 'syz.1.1561': attribute type 11 has an invalid length. [ 261.492334][T11678] xt_CT: No such helper "syz1" [ 262.042090][T11715] sctp: [Deprecated]: syz.4.1574 (pid 11715) Use of int in maxseg socket option. [ 262.042090][T11715] Use struct sctp_assoc_value instead [ 263.561849][T11755] __nla_validate_parse: 20 callbacks suppressed [ 263.561867][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1582'. [ 263.946264][T11766] netlink: 'syz.4.1585': attribute type 10 has an invalid length. [ 263.948591][T11761] netlink: zone id is out of range [ 263.959374][T11761] netlink: zone id is out of range [ 263.964495][T11761] netlink: zone id is out of range [ 263.970005][T11761] netlink: zone id is out of range [ 263.975469][T11761] netlink: zone id is out of range [ 263.980924][T11761] netlink: zone id is out of range [ 263.986081][T11761] netlink: zone id is out of range [ 263.991732][T11761] netlink: zone id is out of range [ 264.034054][T11767] veth0: entered promiscuous mode [ 264.040647][T11767] bond0: entered promiscuous mode [ 264.045793][T11767] bond_slave_0: entered promiscuous mode [ 264.052319][T11767] bond_slave_1: entered promiscuous mode [ 264.058528][T11767] batadv0: entered promiscuous mode [ 264.180526][T11765] bond0: left promiscuous mode [ 264.188242][T11765] bond_slave_0: left promiscuous mode [ 264.193805][T11765] bond_slave_1: left promiscuous mode [ 264.199537][T11765] batadv0: left promiscuous mode [ 264.208085][T11765] veth0: left promiscuous mode [ 265.166798][T11721] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 265.176337][T11726] netlink: 'syz.0.1575': attribute type 1 has an invalid length. [ 265.190588][T11726] netlink: 'syz.0.1575': attribute type 1 has an invalid length. [ 265.434552][T11786] netlink: 'syz.3.1591': attribute type 9 has an invalid length. [ 265.437501][T11788] netlink: 'syz.0.1592': attribute type 21 has an invalid length. [ 265.452400][T11786] netlink: 'syz.3.1591': attribute type 11 has an invalid length. [ 265.490497][T11786] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.1591'. [ 265.510411][T11791] netlink: 'syz.0.1592': attribute type 1 has an invalid length. [ 265.551893][T11792] netlink: 'syz.4.1593': attribute type 9 has an invalid length. [ 265.583835][T11792] netlink: 'syz.4.1593': attribute type 11 has an invalid length. [ 265.605738][T11794] netlink: 'syz.2.1594': attribute type 11 has an invalid length. [ 265.631540][T11792] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.1593'. [ 265.648955][T11794] netlink: 'syz.2.1594': attribute type 23 has an invalid length. [ 265.678018][T11794] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1594'. [ 265.688247][T11788] sctp: [Deprecated]: syz.0.1592 (pid 11788) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.688247][T11788] Use struct sctp_sack_info instead [ 265.826802][ C0] ------------[ cut here ]------------ [ 265.833785][ C0] ODEBUG: free active (active state 0) object: ffff88802f7fe890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 265.846763][ C0] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#0: modprobe/11814 [ 265.857358][ C0] Modules linked in: [ 265.861529][ C0] CPU: 0 UID: 0 PID: 11814 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 265.870830][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 265.880957][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 265.887378][ C0] Code: 89 44 24 20 e8 f7 bf 74 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 a0 a5 28 8c 48 c7 c2 20 ab 28 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 265.907057][ C0] RSP: 0000:ffffc90000007b48 EFLAGS: 00010246 [ 265.913151][ C0] RAX: ffffffff8a9f6db0 RBX: ffffffff9a6ed868 RCX: 0000000000000000 [ 265.921203][ C0] RDX: ffffffff8c28ab20 RSI: ffffffff8c28a5a0 RDI: ffffffff903e6a40 [ 265.929241][ C0] RBP: ffffffff8bcf39a0 R08: ffff88802f7fe890 R09: ffffffff8bcf4d00 [ 265.937303][ C0] R10: dffffc0000000000 R11: ffffffff81b236d0 R12: ffff88802f7fea00 [ 265.945379][ C0] R13: ffffffff903e6a40 R14: ffff88802f7fe000 R15: ffff88802f7fe890 [ 265.953432][ C0] FS: 00007f13974ecc80(0000) GS:ffff888125213000(0000) knlGS:0000000000000000 [ 265.962419][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.969083][ C0] CR2: 0000555bcba082b8 CR3: 000000009b56a000 CR4: 00000000003526f0 [ 265.977117][ C0] Call Trace: [ 265.980430][ C0] [ 265.983290][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 265.989028][ C0] kfree+0x13e/0x640 [ 265.992945][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 265.998144][ C0] rose_timer_expiry+0x4cb/0x600 [ 266.003125][ C0] call_timer_fn+0x192/0x5e0 [ 266.007793][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 266.013274][ C0] ? call_timer_fn+0xd4/0x5e0 [ 266.018044][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 266.023184][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 266.028815][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 266.034298][ C0] __run_timer_base+0x652/0x8b0 [ 266.039245][ C0] ? ktime_get+0x45/0x220 [ 266.043613][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 266.049093][ C0] run_timer_softirq+0xb7/0x170 [ 266.053978][ C0] handle_softirqs+0x22a/0x840 [ 266.058847][ C0] ? __irq_exit_rcu+0xca/0x220 [ 266.063657][ C0] __irq_exit_rcu+0xca/0x220 [ 266.068350][ C0] irq_exit_rcu+0x9/0x30 [ 266.072627][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 266.078355][ C0] [ 266.081309][ C0] [ 266.084262][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.090327][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 266.095652][ C0] Code: ff ff ff e8 a1 17 17 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 8b 02 9f 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d d8 11 95 [ 266.115340][ C0] RSP: 0000:ffffc9000201fd00 EFLAGS: 00000286 [ 266.121476][ C0] RAX: 7757c083ee834800 RBX: 0000000000000000 RCX: 0000000000000046 [ 266.129552][ C0] RDX: 000000005a44979c RSI: ffffffff8e24f3ee RDI: ffffffff8c289f60 [ 266.137580][ C0] RBP: ffffffff8215c9e6 R08: ffffffff8215c9e6 R09: ffffffff8e95cce0 [ 266.145577][ C0] R10: ffffc9000201fdcc R11: fffff52000403fbb R12: 0000000000000002 [ 266.153612][ C0] R13: ffffffff8e95cce0 R14: 0000000000000000 R15: 0000000000000246 [ 266.161654][ C0] ? lock_vma_under_rcu+0x116/0x500 [ 266.166926][ C0] ? lock_vma_under_rcu+0x116/0x500 [ 266.172350][ C0] ? lock_vma_under_rcu+0x116/0x500 [ 266.177657][ C0] lock_vma_under_rcu+0x133/0x500 [ 266.182713][ C0] ? lock_vma_under_rcu+0x116/0x500 [ 266.187993][ C0] ? do_faccessat+0xadb/0xde0 [ 266.192700][ C0] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 266.198333][ C0] do_user_addr_fault+0x2d8/0x1340 [ 266.203500][ C0] ? rcu_is_watching+0x15/0xb0 [ 266.208341][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 266.213761][ C0] exc_page_fault+0x6a/0xc0 [ 266.218340][ C0] asm_exc_page_fault+0x26/0x30 [ 266.223218][ C0] RIP: 0033:0x7f139764dd34 [ 266.227700][ C0] Code: 8d 34 19 49 39 d0 49 89 70 60 0f 95 c2 48 29 d8 48 83 c1 10 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 51 f8 <48> 89 46 08 48 89 cf 4c 89 e6 48 89 4c 24 08 e8 18 c7 ff ff 48 8b [ 266.247368][ C0] RSP: 002b:00007fffc574c0c0 EFLAGS: 00010206 [ 266.253465][ C0] RAX: 000000000001fd51 RBX: 00000000000009b0 RCX: 0000555bcba07910 [ 266.261501][ C0] RDX: 00000000000009b1 RSI: 0000555bcba082b0 RDI: 0000000000000000 [ 266.269551][ C0] RBP: ffffffffffffffc0 R08: 00007f1397786ac0 R09: 0000000000000000 [ 266.277587][ C0] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000000009a0 [ 266.285614][ C0] R13: 0000000000000000 R14: 0000000000000099 R15: 00007f1397786b20 [ 266.293665][ C0] [ 266.296734][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 266.304028][ C0] CPU: 0 UID: 0 PID: 11814 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 266.313244][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 266.323318][ C0] Call Trace: [ 266.326620][ C0] [ 266.329522][ C0] vpanic+0x56c/0xa60 [ 266.333521][ C0] ? __pfx__printk+0x10/0x10 [ 266.338132][ C0] ? __pfx_vpanic+0x10/0x10 [ 266.342644][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 266.347969][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 266.353210][ C0] panic+0xc5/0xd0 [ 266.356945][ C0] ? __pfx_panic+0x10/0x10 [ 266.361397][ C0] __warn+0x315/0x4c0 [ 266.365399][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 266.371153][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 266.376895][ C0] __report_bug+0x29a/0x540 [ 266.381433][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 266.387271][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 266.393016][ C0] ? __pfx___report_bug+0x10/0x10 [ 266.398078][ C0] ? kfree+0x1c5/0x640 [ 266.402163][ C0] ? rose_timer_expiry+0x4c3/0x600 [ 266.407293][ C0] ? call_timer_fn+0x192/0x5e0 [ 266.412062][ C0] ? __run_timer_base+0x652/0x8b0 [ 266.417086][ C0] ? run_timer_softirq+0xb7/0x170 [ 266.422133][ C0] ? handle_softirqs+0x22a/0x840 [ 266.427068][ C0] ? __irq_exit_rcu+0xca/0x220 [ 266.431832][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 266.437633][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.443777][ C0] ? lock_acquire+0x221/0x350 [ 266.448456][ C0] ? lock_vma_under_rcu+0x133/0x500 [ 266.453645][ C0] ? do_user_addr_fault+0x2d8/0x1340 [ 266.458935][ C0] report_bug_entry+0x19a/0x290 [ 266.463790][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 266.469500][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 266.475213][ C0] handle_bug+0xce/0x200 [ 266.479455][ C0] exc_invalid_op+0x1a/0x50 [ 266.483950][ C0] asm_exc_invalid_op+0x1a/0x20 [ 266.488797][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 266.495120][ C0] Code: 89 44 24 20 e8 f7 bf 74 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 a0 a5 28 8c 48 c7 c2 20 ab 28 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 266.514723][ C0] RSP: 0000:ffffc90000007b48 EFLAGS: 00010246 [ 266.520788][ C0] RAX: ffffffff8a9f6db0 RBX: ffffffff9a6ed868 RCX: 0000000000000000 [ 266.528747][ C0] RDX: ffffffff8c28ab20 RSI: ffffffff8c28a5a0 RDI: ffffffff903e6a40 [ 266.536706][ C0] RBP: ffffffff8bcf39a0 R08: ffff88802f7fe890 R09: ffffffff8bcf4d00 [ 266.544667][ C0] R10: dffffc0000000000 R11: ffffffff81b236d0 R12: ffff88802f7fea00 [ 266.552631][ C0] R13: ffffffff903e6a40 R14: ffff88802f7fe000 R15: ffff88802f7fe890 [ 266.560596][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 266.565963][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 266.571601][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 266.577240][ C0] kfree+0x13e/0x640 [ 266.581128][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 266.586233][ C0] rose_timer_expiry+0x4cb/0x600 [ 266.591165][ C0] call_timer_fn+0x192/0x5e0 [ 266.595751][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 266.601204][ C0] ? call_timer_fn+0xd4/0x5e0 [ 266.605873][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 266.610992][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 266.616185][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 266.621641][ C0] __run_timer_base+0x652/0x8b0 [ 266.626492][ C0] ? ktime_get+0x45/0x220 [ 266.630831][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 266.636214][ C0] run_timer_softirq+0xb7/0x170 [ 266.641068][ C0] handle_softirqs+0x22a/0x840 [ 266.645834][ C0] ? __irq_exit_rcu+0xca/0x220 [ 266.650690][ C0] __irq_exit_rcu+0xca/0x220 [ 266.655276][ C0] irq_exit_rcu+0x9/0x30 [ 266.659520][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 266.665152][ C0] [ 266.668085][ C0] [ 266.671025][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.677017][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 266.682309][ C0] Code: ff ff ff e8 a1 17 17 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 8b 02 9f 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d d8 11 95 [ 266.701908][ C0] RSP: 0000:ffffc9000201fd00 EFLAGS: 00000286 [ 266.707971][ C0] RAX: 7757c083ee834800 RBX: 0000000000000000 RCX: 0000000000000046 [ 266.715932][ C0] RDX: 000000005a44979c RSI: ffffffff8e24f3ee RDI: ffffffff8c289f60 [ 266.723896][ C0] RBP: ffffffff8215c9e6 R08: ffffffff8215c9e6 R09: ffffffff8e95cce0 [ 266.731864][ C0] R10: ffffc9000201fdcc R11: fffff52000403fbb R12: 0000000000000002 [ 266.739823][ C0] R13: ffffffff8e95cce0 R14: 0000000000000000 R15: 0000000000000246 [ 266.747872][ C0] ? lock_vma_under_rcu+0x116/0x500 [ 266.753069][ C0] ? lock_vma_under_rcu+0x116/0x500 [ 266.758268][ C0] ? lock_vma_under_rcu+0x116/0x500 [ 266.763459][ C0] lock_vma_under_rcu+0x133/0x500 [ 266.768475][ C0] ? lock_vma_under_rcu+0x116/0x500 [ 266.773664][ C0] ? do_faccessat+0xadb/0xde0 [ 266.778334][ C0] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 266.783890][ C0] do_user_addr_fault+0x2d8/0x1340 [ 266.789009][ C0] ? rcu_is_watching+0x15/0xb0 [ 266.793775][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 266.799177][ C0] exc_page_fault+0x6a/0xc0 [ 266.803684][ C0] asm_exc_page_fault+0x26/0x30 [ 266.808528][ C0] RIP: 0033:0x7f139764dd34 [ 266.812956][ C0] Code: 8d 34 19 49 39 d0 49 89 70 60 0f 95 c2 48 29 d8 48 83 c1 10 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 51 f8 <48> 89 46 08 48 89 cf 4c 89 e6 48 89 4c 24 08 e8 18 c7 ff ff 48 8b [ 266.832555][ C0] RSP: 002b:00007fffc574c0c0 EFLAGS: 00010206 [ 266.838618][ C0] RAX: 000000000001fd51 RBX: 00000000000009b0 RCX: 0000555bcba07910 [ 266.846584][ C0] RDX: 00000000000009b1 RSI: 0000555bcba082b0 RDI: 0000000000000000 [ 266.854547][ C0] RBP: ffffffffffffffc0 R08: 00007f1397786ac0 R09: 0000000000000000 [ 266.862515][ C0] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000000009a0 [ 266.870479][ C0] R13: 0000000000000000 R14: 0000000000000099 R15: 00007f1397786b20 [ 266.878452][ C0] [ 266.882054][ C0] Kernel Offset: disabled [ 266.886369][ C0] Rebooting in 86400 seconds..