last executing test programs: 51.842243025s ago: executing program 3 (id=3512): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0xa4, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x4}, {0x8e, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x13a260736e98a861}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x766c, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x6, 0x3, 0x9, 0x1, 0x54, 0x101}}, {0x4}}]}]}, 0xa4}}, 0x24000814) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0xa4, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x4}, {0x8e, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x13a260736e98a861}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x766c, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x6, 0x3, 0x9, 0x1, 0x54, 0x101}}, {0x4}}]}]}, 0xa4}}, 0x24000814) (async) 51.401968492s ago: executing program 3 (id=3517): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x5, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r3, 0x0, 0x22, &(0x7f0000000000)=0x1, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, 0x0, &(0x7f0000000040)=0xffffffffffffff5f) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x30) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r1, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)={0x5b0, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_SDP={0x68, 0x13, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [{0xf, 0x1, 'NLBL_UNLBL\x00'}, {0xf, 0x1, 'NLBL_UNLBL\x00'}, {0xa, 0x1, '\'^\xda]w['}, {0xf, 0x1, 'NLBL_UNLBL\x00'}, {0x5, 0x1, '\x00'}, {0x6, 0x1, '--'}]}, {0x14, 0x0, 0x0, 0x1, [{0xf, 0x1, 'NLBL_UNLBL\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x168, 0x13, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [{0x4}, {0xc, 0x1, ':-&[%(%!'}, {0x5, 0x1, '.'}, {0x5, 0x1, '{'}, {0x4}]}, {0x18, 0x0, 0x0, 0x1, [{0xb, 0x1, '}[}@@/-'}, {0x5, 0x1, '@'}]}, {0x30, 0x0, 0x0, 0x1, [{0x8, 0x1, '&}&*'}, {0x5, 0x1, ':'}, {0x6, 0x1, '+*'}, {0x7, 0x1, '!/['}, {0x5, 0x1, ']'}, {0x4}]}, {0x10, 0x0, 0x0, 0x1, [{0x5, 0x1, '['}, {0x4}]}, {0x40, 0x0, 0x0, 0x1, [{0x8, 0x1, '$]$,'}, {0x5, 0x1, '}'}, {0x4}, {0x4}, {0x14, 0x1, '\'*z@,+\xca)$F],\\./('}, {0x6, 0x1, '*^'}, {0x6, 0x1, ',.'}]}, {0x30, 0x0, 0x0, 0x1, [{0x5, 0x1, '#'}, {0x4}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '+'}, {0x8, 0x1, '}*+&'}, {0x7, 0x1, '*#['}]}, {0x24, 0x0, 0x0, 0x1, [{0x5, 0x1, '}'}, {0x8, 0x1, ':!\\@'}, {0x5, 0x1, '%'}, {0x6, 0x1, '&\''}]}, {0x2c, 0x0, 0x0, 0x1, [{0x4}, {0x5, 0x1, '\xe5'}, {0x4}, {0x5, 0x1, '@'}, {0x7, 0x1, '{\'+'}, {0x5, 0x1, '&'}]}, {0x24, 0x0, 0x0, 0x1, [{0x15, 0x1, ':#!(,/##-+-.\\@/}+'}, {0x7, 0x1, '*+,'}]}]}, @NFC_ATTR_LLC_SDP={0x154, 0x13, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [{0xf, 0x1, 'NLBL_UNLBL\x00'}, {0xf, 0x1, 'NLBL_UNLBL\x00'}, {0x4}, {0x12, 0x1, '-\'\'(*:{\\{*:\xdd-w'}, {0x4}, {0x5, 0x1, ']'}, {0x5, 0x1, '\x00'}]}, {0x14, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}]}, {0x68, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x9, 0x1, '.\'+-]'}, {0x5, 0x1, '\x00'}, {0x7, 0x1, '#(!'}, {0x15, 0x1, ':#!(,/##-+-.\\@/}+'}, {0xf, 0x1, 'NLBL_UNLBL\x00'}, {0x9, 0x1, '\\#-})'}, {0x4}, {0x7, 0x1, '#:-'}]}, {0x24, 0x0, 0x0, 0x1, [{0x5, 0x1, '$'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x6, 0x1, '+*'}]}, {0x4c, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0xf, 0x1, 'NLBL_UNLBL\x00'}, {0xf, 0x1, 'NLBL_UNLBL\x00'}, {0xf, 0x1, 'NLBL_UNLBL\x00'}, {0x5, 0x1, '\x00'}, {0x4}, {0x4}]}, {0x14, 0x0, 0x0, 0x1, [{0x7, 0x1, '+}+'}, {0x6, 0x1, '&\''}]}]}, @NFC_ATTR_LLC_SDP={0x78, 0x13, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [{0xf, 0x1, 'NLBL_UNLBL\x00'}, {0x6, 0x1, '&-'}, {0x8, 0x1, '+@$.'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x87'}]}, {0x3c, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x6, 0x1, ',.'}, {0x6, 0x1, '+('}, {0x5, 0x1, ':'}, {0x5, 0x1, '\x00'}, {0xf, 0x1, 'NLBL_UNLBL\x00'}]}, {0x4}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_LLC_SDP={0x24, 0x13, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [{0x4}, {0xf, 0x1, 'NLBL_UNLBL\x00'}, {0x8, 0x1, '{(:\''}]}]}, @NFC_ATTR_LLC_SDP={0x138, 0x13, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [{0x18, 0x1, '\\-:\\),\\)[$\xb3*&\xf3\xbd^&e.\\'}, {0x5, 0x1, 'H'}, {0x5, 0x1, '$'}, {0x7, 0x1, '%)-'}, {0xf, 0x1, 'NLBL_UNLBL\x00'}, {0x4}, {0x5, 0x1, '\x00'}]}, {0x38, 0x0, 0x0, 0x1, [{0xf, 0x1, 'NLBL_UNLBL\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0xf, 0x1, 'NLBL_UNLBL\x00'}, {0x4}]}, {0x44, 0x0, 0x0, 0x1, [{0x8, 0x1, ']+$p'}, {0x7, 0x1, '*:('}, {0x5, 0x1, '+'}, {0xf, 0x1, 'NLBL_UNLBL\x00'}, {0x7, 0x1, '!/['}, {0x5, 0x1, '}'}, {0x5, 0x1, '$'}]}, {0x64, 0x0, 0x0, 0x1, [{0x4}, {0x9, 0x1, '-.*-['}, {0xf, 0x1, 'NLBL_UNLBL\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0xf, 0x1, 'NLBL_UNLBL\x00'}, {0x5, 0x1, '\x00'}, {0xf, 0x1, 'NLBL_UNLBL\x00'}, {0x5, 0x1, '\x00'}]}, {0x4}]}, @NFC_ATTR_LLC_SDP={0x9c, 0x13, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [{0x8, 0x1, '^##@'}, {0x4}]}, {0x24, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x5, 0x1, '}'}, {0x4}, {0x5, 0x1, '\x00'}, {0x4}]}, {0x38, 0x0, 0x0, 0x1, [{0x6, 0x1, '\\\x00'}, {0xf, 0x1, 'NLBL_UNLBL\x00'}, {0x5, 0x1, '\x00'}, {0x14, 0x1, '\'*z@,+\xca)$F],\\./('}]}, {0x2c, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x5, 0x1, '\xe5'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}]}]}]}, 0x5b0}, 0x1, 0x0, 0x0, 0x40081}, 0x2000c001) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x28}}, 0x0) 49.180465258s ago: executing program 3 (id=3529): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc6, &(0x7f0000000080)=""/198, 0x0, 0xe4}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0x4, 0x6, {{0xe, 0x4, 0x1, 0x1a, 0x38, 0x66, 0x0, 0x4, 0x2f, 0x0, @multicast1, @multicast2, {[@generic={0x83, 0xb, "82e03705e34b3c52a4"}, @timestamp_addr={0x44, 0x14, 0xe, 0x1, 0x5, [{@multicast1, 0x10000}, {@remote, 0x9}]}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x4, [@struct={0xe, 0x1, 0x0, 0x4, 0x1, 0x3, [{0xf, 0x1, 0x1}]}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x50, 0x4}, @enum={0xb, 0x4, 0x0, 0x6, 0x4, [{0x8, 0x2}, {0x2, 0x8001}, {0xe, 0x5}, {0xb, 0x4}]}, @fwd={0xb}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000340)=""/64, 0x7c, 0x40, 0x1, 0x401}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x1, &(0x7f0000000000)=@raw=[@ldst={0x3, 0x1, 0x1, 0x4, 0x5, 0xfffffffffffffffe, 0x10}], &(0x7f0000000180)='GPL\x00', 0x8, 0x2f, &(0x7f00000001c0)=""/47, 0x40f00, 0x10, '\x00', r1, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x9, 0x93c, 0x2}, 0x10, 0x21ba9, r0, 0x7, 0x0, &(0x7f0000000400)=[{0x2, 0x5, 0x4, 0x4}, {0x5, 0x1, 0xb, 0x2}, {0x3, 0x1, 0x9, 0x2}, {0x4, 0x64, 0xa, 0xf}, {0x0, 0x1, 0xc, 0x9}, {0x0, 0x4, 0x3, 0xb}, {0x4, 0x1, 0x3, 0x3}], 0x10, 0x1ff}, 0x94) 48.829063557s ago: executing program 3 (id=3531): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) getsockopt(r0, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x3}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x9, 0x8, 0x0, 0x0, 0x4, 0x200002}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r3, 0x8b1b, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) sendto$inet6(r5, &(0x7f0000000000)="18f9", 0xc3ff, 0x4, 0x0, 0x0) close(0x3) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 48.14618666s ago: executing program 3 (id=3538): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb4b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004080) recvmsg$kcm(r0, 0x0, 0x2) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010102}}, 0x24) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000) recvmsg$kcm(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x100) 47.748050903s ago: executing program 3 (id=3542): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000004000000070000007f00400000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000900)=ANY=[@ANYBLOB="1803000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000001b0000009505000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 39.410026519s ago: executing program 4 (id=3551): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000100085060000e2fffe6122314a000800", @ANYRES8=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40d4) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000380)={0x9, {{0xa, 0x4e22, 0xa00000, @mcast1, 0x1}}}, 0x88) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) socket(0x1f, 0x3, 0xc798) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 38.582423703s ago: executing program 1 (id=3553): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) 37.689026316s ago: executing program 2 (id=3555): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xd, "aa"}, {0x18, 0x110, 0x1, '\x00'}], 0x30}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xda2fd66c5583f6de}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="290000e3bb7ecff0c2f3719eed5a0c8f127765e9be70c797cf8eab972062a715c8bca87b28af055d1911a530da63a00cc338c7bdd3956ef8b14f56914f", @ANYRES16=r2, @ANYBLOB="00022dbd7000ffdbdf25120000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8004) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000110001002abd7000fedbdf2500000080000000000000000000000000000004d502003c0014000d00"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40008c4) setsockopt$sock_int(r3, 0x1, 0x22, 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006ddbb4af7e5f9f5d87bb54703952000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x21, 0x2, 0xa) (async) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xd, "aa"}, {0x18, 0x110, 0x1, '\x00'}], 0x30}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xda2fd66c5583f6de}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="290000e3bb7ecff0c2f3719eed5a0c8f127765e9be70c797cf8eab972062a715c8bca87b28af055d1911a530da63a00cc338c7bdd3956ef8b14f56914f", @ANYRES16=r2, @ANYBLOB="00022dbd7000ffdbdf25120000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8004) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000110001002abd7000fedbdf2500000080000000000000000000000000000004d502003c0014000d00"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40008c4) (async) setsockopt$sock_int(r3, 0x1, 0x22, 0x0, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000280)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006ddbb4af7e5f9f5d87bb54703952000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 37.198863339s ago: executing program 1 (id=3556): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x1ff, 0x72, 0x8, 0x2, 0x1, 0xfffffffa, 0x6f2, 0x9, 0xb00, 0x17, 0xb, 0x1c, 0x8, 0x7, 0x1}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r7, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x0, 0x0, 0x200}, 0x20) r9 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f0000001b00)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x43}, @local}}}], 0x20}}], 0x1, 0x8000004) openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x5}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x727}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, r10}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r11, 0x4058587a, &(0x7f0000000280)={{r11, &(0x7f0000000040)='].-^(%\x00', 0x20000, &(0x7f0000000080)={@_ha_fsid={[0x9, 0x8]}, {0x0, 0x6, 0x3, 0x1}}, 0x3, &(0x7f00000000c0), &(0x7f0000000180)=0xfffffffa}, {[0x6, 0x1, 0x9, 0x5]}, 0x4, 0x96, &(0x7f00000001c0)=""/150}) write$nci(r12, &(0x7f0000000300)=ANY=[@ANYBLOB="4200070403"], 0x5) 36.937269963s ago: executing program 4 (id=3557): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x401, @loopback}], 0x1c) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x401, @loopback}], 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtaction={0xfffffffffffffe25, 0x30, 0xb}, 0x14}}, 0x4000) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) 36.3554298s ago: executing program 2 (id=3559): r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x2, {0x1, 0x0, 0x2}}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async) listen(r1, 0x800) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff"], 0x78) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x69a0a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4b0) 35.673851706s ago: executing program 4 (id=3560): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x15, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x33461edb45e8909a}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x28c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x258, 0x2, [@TCA_U32_ACT={0x230, 0x7, [@m_ct={0x134, 0x18, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x6}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}]}, {0xf2, 0x6, "68c00c99553219aefb9da83eb6b99911816e1fff3464a0ef69dd3b9e590537dfa0fde46731cca3684563c1610021c83442fa9d9f38b1a4fd4fd5bbf4dd0a4191921deaa2b6ff56c934c716dab3aa1fd359e4a80d694b9fe6be9aefaa5568a764167c6d1246cf019d70db770f68e3ea13fdb56da6a1a5acde138727f137ffd669bfc04a269cc9fe66839b7ff2f0e964ab39836fbee9dc1fb91b2eec7c728a28b37744d8faa18bee05257b06e53aefd0fee775de2bffc1c735658b1539daabdad9af920e68a6d7203792d5f54531d23b19791a70bf0134dbd1b81f9c3b402e74394e0f393e7ba11fec88b1142c54fa"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0xf8, 0x6, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x8, 0xca7ba13, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x0, 0x1c000000, 0xfff}}, @TCA_DEF_DATA={0x6, 0x3, '[\x00'}]}, {0x94, 0x6, "490e9eff91a5ee48eaf64977cb32e392a12bf7ae245aaf79d11e1c539c1446a2fd675b0140ef768656b7bccf65707178bb26302d301917f2ded6d66e6aa6b628f41e162c97afdb6e720d6d7e3a12403713bf420fb31207eb68546da7d9bc311cab4445927a4b42a49fa5a44299cdae00e1c438c8cf031e3f454e36e27ee17d14bb09ad5100f8ebd3f4da566899f78790"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x28c}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000006401010200000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0800000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000000004400050000000000000000000000000000000000000004d23c00"], 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r10, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r11, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x32}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xc080) 35.308723243s ago: executing program 1 (id=3561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000100008000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x20) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='veno', 0x4) (async) shutdown(r4, 0x1) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r8, @ANYRES32=r8], 0x44}}, 0x2000800) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000100)) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r11, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r9}, 0x20) 33.804936561s ago: executing program 1 (id=3563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000102010100000000000000000a00ad7fc3792c9dce3939c5c545d7000006000740000000003c0001802c00018014000300fe88000000000000000000000000000114000400ff0100"/88], 0x58}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0x40305839, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000880)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7004fddbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="0400cd00380033"], 0x60}, 0x1, 0x0, 0x0, 0x24048844}, 0x8800) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711233000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff5}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r5) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000800000100000a48000000030a050200000000000000000a0000050900030073797a30000000000900011f73797a3100000000080007006e617400140004800800014000dd041a67138ca62ddd5e54140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x4) bpf$MAP_CREATE(0xb00000000000014, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e338e8a43bdf220226ce3639cacbd1ec98daf578469f8f7091cb4ac25239d26e9942f51ec19e78a9408dcab3cbd81fda6"], 0x48) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)={0x54, r6, 0x111, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x20000) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0x4, 0x1}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x3, 0x220104, 0xb, 0x1}, 0x50) 33.564628862s ago: executing program 2 (id=3564): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a802000018014000300000000000000000001020004"], 0x40}}, 0x0) (async, rerun: 64) r4 = socket(0x18, 0x6, 0x100) (rerun: 64) getsockopt$inet_int(r4, 0x111, 0x32, 0x0, &(0x7f0000000380)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="d09d00"/12], &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 33.275630886s ago: executing program 0 (id=3565): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200400d0}, 0x0) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r4) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) 31.751650866s ago: executing program 32 (id=3542): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000004000000070000007f00400000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000900)=ANY=[@ANYBLOB="1803000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000001b0000009505000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 31.666431741s ago: executing program 4 (id=3567): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'bridge_slave_0\x00', 0x3}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES8=r0], 0x24}}, 0x40) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x24}}, 0x0) 31.020692674s ago: executing program 2 (id=3568): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x80000008, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x3, 0x1966f9ad, 0x200, 0x20200, 0xb0fd, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x3, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x3, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x8, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x2, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x6, 0x5cf1, 0x0, 0x1, 0x773, 0xfffffffb, 0x9, 0x8000, 0xa00000, 0x1, 0x0, 0x80000000, 0x9, 0x2a5, 0x4, 0x95e3, 0x8, 0xb, 0x7, 0x80000000, 0x4, 0x7fffffff, 0x56, 0x2, 0x3, 0x401, 0x3c6, 0x4, 0x56, 0x6d, 0x400, 0x93fb, 0x853c, 0x5, 0xfffffff0, 0x5, 0xfffff0d4, 0x7, 0xffffffff, 0x10000, 0x8, 0x7fffffff, 0xfffffffc, 0x4a, 0x800, 0xb, 0xffff, 0xb, 0xc, 0x7, 0x4, 0x6, 0x8, 0x800, 0x850e7fb, 0xd2dd, 0x2, 0x8001, 0x5, 0x8000, 0x9, 0x7, 0xffffff18, 0x0, 0x81, 0x2, 0x0, 0x1ff, 0x80, 0x4, 0x2, 0x7fff, 0xa64, 0x92e, 0xfffff682, 0xbc, 0x1, 0x8, 0x80000001, 0x7, 0x2, 0x1, 0x7fff, 0x4, 0x4, 0x100, 0x6, 0x9, 0x6, 0xffffffff, 0x8001, 0xc9, 0x0, 0x81, 0x7fffffff, 0x10000, 0x30, 0xfffffff6, 0x3000, 0xfffffffe, 0x8, 0x0, 0x400, 0x2, 0x9, 0x6, 0x0, 0x2ce2, 0x5, 0x0, 0x4, 0x7, 0x9, 0x6, 0x9d7, 0x2, 0x839, 0xe459, 0x1, 0x3630, 0x7, 0x6, 0x5, 0xd905, 0x9a, 0x5891, 0x3, 0x9, 0x9, 0x9f33, 0x1, 0xc0, 0x3ffc00, 0x8, 0x7, 0x8, 0x9, 0x3, 0x2, 0x97, 0x5, 0x7, 0x2, 0xc631, 0x3ff, 0xd43, 0x6, 0x800, 0x415, 0x3322, 0x0, 0x6, 0x4, 0x6, 0x8, 0xf50d, 0xd, 0x1ff, 0x7, 0xb07, 0x8, 0x5, 0x2, 0x1, 0x9f, 0x1000, 0xa, 0x4, 0x401, 0x175ac67f, 0x9, 0x7fff, 0x4, 0x6, 0xcc1, 0x800, 0xeff1, 0x8, 0xa, 0x3, 0x0, 0x6, 0x3, 0x1, 0x1000, 0x8, 0x3ff, 0x9, 0xfffffffb, 0x3, 0x268c, 0x1d, 0x4, 0x9, 0x5, 0xa, 0x2, 0x4, 0xbf33, 0x8, 0x8001, 0x0, 0x1ff, 0x200, 0x2, 0x1, 0x7, 0xfffffeff, 0x1, 0x0, 0x80, 0xa, 0xffffffff, 0xf07, 0xe6d, 0xff, 0x9, 0x400, 0x5, 0x6, 0x101, 0x7f, 0x8, 0x800, 0x60a, 0x3, 0x4df17694, 0x8, 0x4, 0x5, 0x6, 0x6, 0xb6e, 0x4, 0x3, 0xd, 0x400, 0x0, 0x5, 0x89e, 0x3, 0x9, 0x6, 0x5, 0x2, 0x1, 0x9, 0x8, 0x4, 0x7ff, 0x6, 0x6, 0x81, 0x0, 0x4]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x80000008, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x3, 0x1966f9ad, 0x200, 0x20200, 0xb0fd, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x3, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x3, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x8, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x2, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x6, 0x5cf1, 0x0, 0x1, 0x773, 0xfffffffb, 0x9, 0x8000, 0xa00000, 0x1, 0x0, 0x80000000, 0x9, 0x2a5, 0x4, 0x95e3, 0x8, 0xb, 0x7, 0x80000000, 0x4, 0x7fffffff, 0x56, 0x2, 0x3, 0x401, 0x3c6, 0x4, 0x56, 0x6d, 0x400, 0x93fb, 0x853c, 0x5, 0xfffffff0, 0x5, 0xfffff0d4, 0x7, 0xffffffff, 0x10000, 0x8, 0x7fffffff, 0xfffffffc, 0x4a, 0x800, 0xb, 0xffff, 0xb, 0xc, 0x7, 0x4, 0x6, 0x8, 0x800, 0x850e7fb, 0xd2dd, 0x2, 0x8001, 0x5, 0x8000, 0x9, 0x7, 0xffffff18, 0x0, 0x81, 0x2, 0x0, 0x1ff, 0x80, 0x4, 0x2, 0x7fff, 0xa64, 0x92e, 0xfffff682, 0xbc, 0x1, 0x8, 0x80000001, 0x7, 0x2, 0x1, 0x7fff, 0x4, 0x4, 0x100, 0x6, 0x9, 0x6, 0xffffffff, 0x8001, 0xc9, 0x0, 0x81, 0x7fffffff, 0x10000, 0x30, 0xfffffff6, 0x3000, 0xfffffffe, 0x8, 0x0, 0x400, 0x2, 0x9, 0x6, 0x0, 0x2ce2, 0x5, 0x0, 0x4, 0x7, 0x9, 0x6, 0x9d7, 0x2, 0x839, 0xe459, 0x1, 0x3630, 0x7, 0x6, 0x5, 0xd905, 0x9a, 0x5891, 0x3, 0x9, 0x9, 0x9f33, 0x1, 0xc0, 0x3ffc00, 0x8, 0x7, 0x8, 0x9, 0x3, 0x2, 0x97, 0x5, 0x7, 0x2, 0xc631, 0x3ff, 0xd43, 0x6, 0x800, 0x415, 0x3322, 0x0, 0x6, 0x4, 0x6, 0x8, 0xf50d, 0xd, 0x1ff, 0x7, 0xb07, 0x8, 0x5, 0x2, 0x1, 0x9f, 0x1000, 0xa, 0x4, 0x401, 0x175ac67f, 0x9, 0x7fff, 0x4, 0x6, 0xcc1, 0x800, 0xeff1, 0x8, 0xa, 0x3, 0x0, 0x6, 0x3, 0x1, 0x1000, 0x8, 0x3ff, 0x9, 0xfffffffb, 0x3, 0x268c, 0x1d, 0x4, 0x9, 0x5, 0xa, 0x2, 0x4, 0xbf33, 0x8, 0x8001, 0x0, 0x1ff, 0x200, 0x2, 0x1, 0x7, 0xfffffeff, 0x1, 0x0, 0x80, 0xa, 0xffffffff, 0xf07, 0xe6d, 0xff, 0x9, 0x400, 0x5, 0x6, 0x101, 0x7f, 0x8, 0x800, 0x60a, 0x3, 0x4df17694, 0x8, 0x4, 0x5, 0x6, 0x6, 0xb6e, 0x4, 0x3, 0xd, 0x400, 0x0, 0x5, 0x89e, 0x3, 0x9, 0x6, 0x5, 0x2, 0x1, 0x9, 0x8, 0x4, 0x7ff, 0x6, 0x6, 0x81, 0x0, 0x4]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) (async) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r11, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r12, 0xe6905000) setsockopt$SO_J1939_SEND_PRIO(r11, 0x6b, 0x3, &(0x7f0000000040)=0x5, 0x4) (async) setsockopt$SO_J1939_SEND_PRIO(r11, 0x6b, 0x3, &(0x7f0000000040)=0x5, 0x4) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r11, 0x1000) mmap(&(0x7f0000362000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) (async) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) 31.020268424s ago: executing program 0 (id=3569): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x3, 0x1ff, 0x5, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80, 0x8, 0xfffffff9, 0x75e8}}) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/153, 0x99}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0046d828cd3b00000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a090000ecffffff00b2e6b5397f7806b6ff846de37a34c8342bbac5a51eac662f717c429a2ee1d41f67235605e4f8a09cede8676044d4fd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3bd368c188df160da087aafd68dc", 0xa0}], 0x1, 0x0, 0x0, 0x84}, 0x24000081) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000) close(r3) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r0, 0x2205, 0x48}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x4c}, 0x1, 0xba01}, 0x0) 30.618891032s ago: executing program 4 (id=3570): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x24004000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003b00)=@delchain={0xfe8, 0x65, 0x4, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0x9}, {0x6, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @filter_kind_options=@f_flow={{0x9}, {0x394, 0x2, [@TCA_FLOW_EMATCHES={0x390, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x18, 0x3, 0x0, 0x0, {{0x1, 0x0, 0xb}, "1c0312edcb30a44dd2"}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x5e, 0x2, 0x100}, {0x1, 0x5, 0x1, "24a6c1e2b8"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x6}, {0xfff, 0x8, 0x4, 0x4, 0xf, 0x2}}}, @TCF_EM_IPSET={0x10, 0x7, 0x0, 0x0, {{0x100, 0x8, 0x5d}, {0x0, 0x6}}}, @TCF_EM_CONTAINER={0x3c, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x4}, "1874c91328db744531121160cb6cfdf1c08b8dc969d6042f67b8b7ed2b727b7a67b06970cac416fee2d267f97c"}}]}, @TCA_EMATCH_TREE_LIST={0x2ac, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xf0, 0x1, 0x0, 0x0, {{0x9, 0x9, 0xfff8}, [@TCA_EM_IPT_MATCH_DATA={0xc5, 0x5, "e8cf364a1749071a28ca0785eee0c302cbb471cdc077dcb2f894a5e775e526f9e760735534cc2db2f63efaa19e78a4df2156dfec8803958ea589a625c7c29ec4fcadd39f222c9a953635de670f6d28b006d003be09e945b39d76f3fdbe2bc49f148181ca0471354bfd7443cf6ebad4d7354ae6e93883e6e711b15eaa604172fa01367f6e0f80698c6bbb1212b4ce20906a611a7e95d9f3cf4a8eae2cd9c02b4029d10309e523cc6745581d00d3efc4075082a901533ac675a88df99a8a72f3d88b"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPT={0x1b8, 0x2, 0x0, 0x0, {{0x5}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x85, 0x5, "d1c29811c8071633b253c065850aabc5cf24c121fe99a69426335e89e9bc42ed8e04a152bfeb4f06435fb3e63d579312f9bc947673b910ca3d52a581c00fa126fa1d3501260866bdc7be0863edf28be3e5f1c6c17035cc0ae2f18a398d92864bcdaaf3e8acc7038bc8ddb7d9c482795d6f14e1915de1cb16ace4fd908d65e98b82"}, @TCA_EM_IPT_MATCH_DATA={0xf1, 0x5, "6226848700e9fa41e4ed4959189e695dd3dafb61113b2264a9fc8fa00fdc7d47a7040d035024bedec8bd0ea2fdaeaeebe7abf7d2dc94af5c43b5d651448cf68642afbb86dccecbc1117d34dddf6a02c87e1a37e472244940c503967c3cba2205f91885dbe159c5e99b70d3929ae9978bff59a40d34d4126a200e97c36234a270d881b6083b0b6c96e323647ec6f9d7bf3f1d293b8a3a137e8611ed9479130d4490a4294effbb24c0f6fe1dd8253a0095ccd03fce9de2fc3a3a829ec4de86896d06a321cfd45d0af26e8171c50ed89c08df070f7e16bd9269d3d189c43bea3dd8a36967eb86272b33439019e193"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xae, 0x1, 0x7}, {0xfffffffc, 0x1, 0xdc, 0x5, 0x4, 0x0, 0x1}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x66}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}]}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc14, 0x2, [@TCA_BPF_POLICE={0xc10, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x3, 0x4, 0xfaba, 0x2, 0x7, 0x9, 0xffffffff, 0x9, 0x6, 0xf, 0x2, 0xff, 0x7, 0x5, 0x9, 0x9, 0x8, 0x1, 0x14, 0xd, 0x2b, 0x1, 0x7, 0x5, 0xddf, 0x1, 0x2, 0xb, 0x4, 0xa, 0x9, 0xd, 0xfffff651, 0x81, 0x1, 0x5c, 0xfeaa, 0x6, 0x0, 0x1, 0x2, 0x1, 0x5, 0x1, 0x5, 0x4, 0x6e20, 0x400, 0x7, 0x5, 0x8, 0x6, 0x7, 0x10, 0x1000, 0x6, 0xfffffffc, 0x54, 0xc2, 0x5, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x7, 0x4, 0x3, 0x2, 0x7, 0x7, 0x1, 0x4, 0x6, 0x10000, 0x1, 0x5, 0x7, 0x5, 0x6, 0x10000, 0x3, 0x80000000, 0xa84e, 0x0, 0x5, 0x6c9e, 0x4, 0x80, 0xd, 0x8, 0xe, 0x4, 0x0, 0x7, 0x0, 0x5, 0x3, 0xeb17, 0xfffffff1, 0x3, 0xffff, 0xa020, 0xbb, 0xf, 0x3, 0x10, 0x2, 0x7ee5, 0x3, 0x5fe4, 0x401, 0x2, 0x98b, 0x1, 0x7fffffff, 0x4, 0x6, 0xfffffffa, 0x7, 0x7fffffff, 0x3, 0x1, 0x198b400, 0xe7, 0x2, 0xe31, 0x8, 0x2f, 0x7, 0x3e3, 0x3, 0xc, 0x3, 0xffffffff, 0x0, 0x5, 0x8, 0xfffffffc, 0x2d1000, 0xa, 0xfffffffd, 0x8, 0x7, 0x4, 0x0, 0x80000000, 0x8, 0x7, 0x6, 0x6, 0x8, 0x5, 0x6, 0x1, 0x8d76, 0x80000000, 0xe, 0x5, 0x6, 0x7, 0x0, 0x8, 0x8000, 0x0, 0x7fffffff, 0x0, 0x2, 0x6, 0x81, 0x2, 0x0, 0xc0000, 0x3, 0x2d, 0xfffffff2, 0x5, 0x8, 0x7, 0xdb23, 0x27, 0x6, 0x0, 0x7, 0x0, 0x3, 0x3e, 0xa8b7, 0x6f0f2833, 0x80000000, 0x0, 0x10001, 0x244d, 0x227b, 0x56497fb0, 0x400, 0x5, 0x3, 0x1000, 0x6, 0x2, 0x40000, 0x0, 0x7, 0x3ff, 0x3, 0x6, 0x3, 0x60b, 0x100, 0xffff, 0x1, 0x4, 0x8, 0x8000, 0x8, 0x0, 0x80, 0x1, 0xff, 0xa, 0xf5d0, 0x3, 0x8000, 0x2, 0x406, 0x401, 0x8, 0xda79, 0x7fffffff, 0x1, 0x7, 0x4, 0x4c3, 0x4, 0x10000, 0x9, 0x1, 0x6, 0x4, 0xd708a80, 0xff, 0x4, 0x37d, 0x400, 0x9, 0x7, 0x23894440, 0x9, 0xd75, 0x9, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xffffffb6, 0x1, 0x1, 0x5, 0x0, 0x2, 0x1000, 0x1000, 0x8, 0x9, 0x7, 0x8, 0xe, 0x698, 0x4, 0x22, 0x200, 0xfffffff3, 0x8, 0x9, 0x876, 0xbb97, 0x8000000, 0x81c, 0x64127ccb, 0x9, 0x3, 0x4, 0xd, 0x8, 0x8, 0xa, 0xfffffffa, 0x0, 0x2, 0x7, 0xce0, 0xceb1, 0x80, 0x1, 0xe, 0x10, 0x100, 0x9, 0x1, 0x3, 0x3ff, 0x80, 0x1, 0x1, 0x3, 0x7, 0xda96, 0x7, 0x9, 0x4, 0x5, 0x8, 0xfffffffb, 0x3, 0x1, 0xa, 0x6, 0x8246, 0xd2, 0xf9, 0x3, 0x3, 0x401, 0x2, 0x3, 0x8, 0x8c3, 0x9, 0x55d, 0x8, 0x8001, 0x9, 0x5, 0x7, 0x5b4a, 0xfffffff2, 0x2, 0x6, 0xfffffffb, 0x8, 0x7, 0x1, 0x2, 0xf, 0x0, 0x0, 0x484c, 0x9, 0x800, 0x9, 0x157, 0x4, 0x4a05, 0x1000, 0xd93d, 0xc3, 0x3, 0x6, 0x3, 0x6, 0x80000001, 0x81, 0x2, 0xc, 0xff, 0x1, 0x7, 0x8, 0x8, 0xc, 0xaaed, 0x795, 0xc5, 0x10001, 0x4, 0x5, 0x1000, 0x9, 0x3, 0x3, 0x1, 0x10000, 0x6, 0x3b910aad, 0x200, 0x3a3, 0x91, 0x7, 0xfffffffd, 0x854, 0x4, 0x4, 0x7, 0x3, 0x5, 0x9, 0x2, 0x5, 0x8, 0x7, 0x8001, 0x100, 0x0, 0x5, 0x4, 0x7, 0x7fff, 0x8, 0x3, 0x4, 0x1, 0x1, 0xfff, 0xd8a, 0x6, 0x5, 0xc72f, 0x8a46, 0xcb, 0x7, 0xff6e, 0x8000, 0xce, 0x7fff, 0x5, 0x9, 0x1, 0x821a, 0x6, 0x7, 0x9, 0xf, 0x1, 0xfff, 0xe7, 0x887, 0x0, 0x3, 0x5, 0x9, 0x56e6, 0x49, 0x8ca, 0x0, 0x4, 0x3, 0x4, 0x9, 0x4, 0x8, 0x0, 0xffff4247, 0x0, 0x1, 0x422, 0x2, 0x2, 0x28, 0x8, 0x8, 0x4fb, 0x8, 0x0, 0x6, 0x4, 0xc1, 0x7, 0x80000001, 0x9, 0x3, 0xf3, 0x2, 0x1, 0x3, 0x1, 0x8, 0x3, 0xf87, 0x3, 0x5, 0xfffffffd, 0x401, 0x4, 0x3, 0xfff, 0xffff8001, 0x2, 0xb0, 0x4, 0x4, 0x2, 0xb, 0x0, 0x0, 0x4, 0xe, 0x6, 0x4, 0x8, 0x1, 0x100, 0x8001, 0xd, 0x4, 0x0, 0xda, 0xb, 0x5, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x8, 0xff, 0x81, 0x1, 0x1, 0x5, 0x8, 0xff, 0x0, 0x5, 0x9, 0x30, 0x6, 0x0, 0x7227, 0x4, 0x2020, 0xa39, 0x3, 0x3, 0x8, 0x5, 0x5, 0x7, 0x9, 0x2, 0x35, 0x81, 0x800, 0x4, 0x2, 0x16701ef0, 0x3, 0x5, 0x3, 0x3, 0x3, 0x8, 0x4, 0xffffff8b, 0x5, 0x7, 0x5, 0x40, 0xfe, 0x46, 0x2706, 0x9, 0x1, 0x10001, 0x2, 0x481, 0x4cdb, 0x4e7, 0x3, 0x101, 0x6, 0x3ff, 0x3, 0x8, 0x0, 0x6, 0x2, 0x1, 0xb, 0x10000, 0x8, 0x0, 0x3, 0x4, 0x86, 0x5, 0x9, 0x4c8, 0x1ff, 0x2e, 0x3, 0x8, 0x59a, 0x980, 0xb16, 0x3, 0x9, 0x9, 0x4, 0x8002, 0x5, 0x1, 0xfa, 0x3, 0x5, 0x0, 0x7, 0x6, 0x7, 0xf8, 0xffffffff, 0x8, 0x10001, 0x100, 0x1000, 0x2, 0x1000, 0x4, 0x3, 0x8001, 0x4, 0x2, 0x7, 0xf, 0x5, 0x3ff, 0x0, 0x910e, 0x965d, 0x86e1, 0x8, 0x9, 0xff, 0x7, 0x8, 0x0, 0xfffffffa, 0x9, 0x8, 0x1e, 0x0, 0x2, 0x3, 0x3, 0x5, 0x252b, 0x80, 0x8, 0x8000, 0x3, 0x7, 0x1, 0xffff3736, 0xffffffff, 0x7fff, 0x8, 0x8, 0x10001, 0x80000000, 0x2, 0x8dc, 0x2, 0x80000000, 0x6, 0x763, 0x410, 0x6, 0x4000, 0x80000000, 0x3, 0x2, 0xad02, 0x1, 0x628aab26, 0x7, 0x8, 0x8, 0x9, 0x9, 0x3, 0x80000000, 0x929e, 0xc, 0xbf7, 0xffff1d13, 0x3, 0x9, 0x7, 0x4, 0x9, 0x80, 0xd584, 0x2f72, 0x5, 0x1, 0x7fffffff, 0x2, 0x2, 0x6e42fd, 0x2, 0x3, 0x10001, 0x7fffffff, 0x4, 0x5, 0x3, 0x2, 0x1ff, 0x7, 0x1ef60d56, 0xf, 0x3, 0x3, 0x4, 0x4, 0x2, 0x5, 0x7, 0x0, 0x400, 0xb, 0x80000001, 0x7, 0x4a9, 0x9, 0xe, 0xf, 0x10000, 0xc528, 0xffff, 0x5, 0x8, 0x3, 0xc, 0xe8bb, 0x6, 0x3, 0x101, 0x9, 0x0, 0x0, 0x5a, 0x9, 0x6, 0xd, 0x2, 0xf2, 0x0, 0x9, 0x0, 0x1, 0x8, 0x1, 0x0, 0x28, 0x4, 0x4, 0x1, 0x10001, 0x4, 0x5, 0x5, 0x4, 0x1, 0x6, 0x80000001, 0x8, 0x7b4, 0x7]}]}]}}]}, 0xfe8}, 0x1, 0x0, 0x0, 0x40004}, 0x400c004) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x1e4, r5, 0x1, 0x0, 0x2, {}, [@WGDEVICE_A_PEERS={0x1bc, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x1ac, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x164, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 30.262662901s ago: executing program 1 (id=3571): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000010240)={&(0x7f0000000180), 0xc, &(0x7f0000010200)={&(0x7f00000001c0)={0x10, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x453, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="3daa000000000000711011c590c13be2b7507cd800000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 29.473126278s ago: executing program 0 (id=3572): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0xd32}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r1, 0xd59}, &(0x7f0000000280)=0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4f23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="0b2f1a1d46364d7b40ec9f19bd594f4bc067f28d596c73ff233ae1a6988f026c6a0949de58d67ac42221d678e54c28c9f0af25f5377e4814010bb525feff099560946b8e38d8b2046f23a5f17886c2d92a34504cf6a4123ce16197279c369bcceea6409d7edaa259dbe931cc48c8bab9d33d80d58d76ed76f069b06e7bd142edd43ad8584def02ce579de15e727c567599c60b82679005b9efca2b308211722ab0324b58874769f27b43f8e112434aad31160c6de2b9bbbb22d766747e75c72199d69a34eef7412d94c533ed3fb2764eb91463bb283a117fd7f18a17677e52104c60e865e7db4389a42b4cc1", 0xec) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x8a}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) write$bt_hci(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="f1"], 0xa) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 28.944559533s ago: executing program 1 (id=3573): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xa, 0x1, 0x7, 0xd988, 0x3, 0x8000, 0xa08c, 0x1, 0x3fb, 0x5, 0x5, 0x6, 0xde02, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0x1000e13, 0x5, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0x8, 0x80000001, 0x5, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xb, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x4, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x801, 0x86e1, 0x4, 0xfffffff9, 0x3, 0x1, 0x3, 0x7, 0x5, 0x6, 0xf3, 0xd, 0x7fffffff, 0xfffffff9, 0x800, 0x2726a3ed, 0x2, 0x14, 0x7, 0x6, 0x10000, 0x5, 0x7ff, 0x1000fd, 0x1ff, 0x7, 0xffffffff, 0xd, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x205, 0x8000, 0x8, 0x6, 0x8, 0xfa, 0x3, 0x0, 0x9, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0xee, 0x2, 0x401, 0xa955, 0x5000, 0x3, 0x7fffffff, 0x2, 0x9, 0x6e4, 0x1, 0x80005, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x5, 0x998, 0x9c4, 0x7f, 0xd, 0x5, 0xff800, 0x1, 0x7, 0x6, 0xff, 0x7, 0x6, 0xfff, 0x800, 0x7, 0x5, 0xff, 0x80000000, 0xd, 0x7, 0x8, 0xff, 0x0, 0x0, 0xff, 0x6, 0xffff, 0x3, 0x7f, 0x9, 0x1, 0xffff, 0x4, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x0, 0x7, 0xfffffffe, 0x6, 0x5, 0x7fc, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0x44, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x5, 0x9, 0x10003, 0x1, 0x42b, 0x1, 0x10000, 0xb, 0xcf9, 0x6, 0xfc, 0x9c, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0x725, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x1, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0x0, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0xff, 0xfffffff7, 0xfffffb98, 0xfffffffb, 0x0, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x4, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x7d, 0x6572, 0x3}, {0x2, 0x0, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x4}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20044804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r9) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061105f000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5}, 0x90) 28.378913446s ago: executing program 4 (id=3574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) (async) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000074c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x4, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x4, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x9, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0xa, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0xffffffff}, {0xffff, 0x4, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x8001}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x8, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000074c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x4, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x4, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x9, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0xa, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0xffffffff}, {0xffff, 0x4, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x8001}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x8, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 26.949155056s ago: executing program 0 (id=3575): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001800390497b500713a708d5a2efa580078c17af180f6fa7b606c0ea3eeef1087372e863a5b1063f1509da7ba90132d7d49aaf28c93bf16d73e1f71371ae341b769734db1b1788ccac6a572a1e94dc4536658e49e2ce7a999cc67defe21326bb4012e487be85c822d375134508836acf6a76e0bf3bdd5e07777e7c1b759ade08a9bc168de5b203bbd11c02a734986cc3f01f471f814", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010069703667726500001c0002800600030080000000080004000300000006000e0002000000"], 0x4c}}, 0x0) 24.275315895s ago: executing program 0 (id=3576): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) (async) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r6, r8, 0x25, 0x4, @void}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r9, r10, 0x4, r10}, 0x5) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r9}, 0x8) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2800ee84c04ab305f719db240c000000d9db62693c94d6084b75d21bc001d060a2820b66d73add69166bb1cb26b1e46e3cd3bcfe55bf563668a6f8279ad8c92580562d5d97a1f3c296bf9ec77d3025dd7e24acca7c44783ced3694fbfce9647e9cee47e9f622fc8259ef1415205cde6dba9f6fa49a295401057b1aa101d8f69f9fa4ede69723237980a2353e5bab44fc928856b6d4946ba36444bdaa97f597646e11e90b377772cf78d87664c261cf8019b35844c400d6aab7a1c36410a83bd76f2af94937504abf4413b2e95720be9bf63f45cc1a57b6466842b36ab23ef0586dbc9ec0e0e4dc68a30653653b83930e99f89c0a1f5e44e4563d6a40a26bf82a", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf253a00000008000300", @ANYRES64=r11, @ANYBLOB="04005b0006006500b00a0000"], 0x28}}, 0x20008000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r12, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) unshare(0x20000400) (async) unshare(0x20000400) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="760a00000000000061112c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="760a00000000000061112c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={0x0, r13}, 0x18) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={0x0, r13}, 0x18) 23.664027483s ago: executing program 0 (id=3577): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}], 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x340a) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1c, 0x5a, 0x113, 0x0, 0x0, {}, [@typed={0x8, 0x12, 0x0, 0x0, @uid=r4}]}, 0x1c}}, 0x18894) 16.22875451s ago: executing program 2 (id=3578): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x4, 0x1}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x7b, 0xc0, &(0x7f0000000140)="49d2efb2ceb3cc35ab9e09d89d412e7458ab008e8d2f21f500154ab85d3145ae74fd76f4ca90762864ba6965ed4cd65f44ac045a2728e98b37db9be1744702dd9bfac896d8780b22dad286447c5825cb05c31a07c4bba1e7fd2d6417887952ccbd889f5d195023e4f5bc710d67a194c56b2044a4a85ffa7735861c", &(0x7f0000000280)=""/192, 0x4, 0x0, 0x2b, 0xa0, &(0x7f0000000340)="4b5946fc6dde9948bf38395ec116875393c1dff21a5b2299fd208136f97739efb7c62460e19529e686c34a", &(0x7f0000000380)="f313223dc5f7a7e20f3eefc3ae813c09ad9d075217c3ebf36a512fda1e505f3d261ff5ee945da793af3651e6fd49997545314b4183ab6af9df365a9e6b9c42922f7c60cfe94c83ebccf64a4b83116fc6b37ec5c3f168be2174674b12d03261ff47897bc8aaf209d4b8bced9ae2e6b101cdc9380b1fcc60f8c9c1c401ce7b66a92179f58d002a8634252135e26c89a9728ccfee0fdbf044600d33065deeca2b5e", 0x4, 0x0, 0x2a6f}, 0x50) 15.984481495s ago: executing program 2 (id=3579): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000064c0)=0x40) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x19c}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x1b}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x4df}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x800) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000002000010000000000fbdbdf250a106b00000000031f00020014000200fc0200000000000000000000010020010000000000000000000000000000240018004e214e22"], 0x4c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x8044) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000030a0108000000000000100002000000090240000000000000000104000480080007006e617400140000001100010000000000000000000000000a00"/96], 0x60}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) listen(r7, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xf4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000019080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=r8, @ANYRES64=r4], 0x74}, 0x1, 0x0, 0x0, 0x14008002}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4) 12.939535579s ago: executing program 33 (id=3573): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xa, 0x1, 0x7, 0xd988, 0x3, 0x8000, 0xa08c, 0x1, 0x3fb, 0x5, 0x5, 0x6, 0xde02, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0x1000e13, 0x5, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0x8, 0x80000001, 0x5, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xb, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x4, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x801, 0x86e1, 0x4, 0xfffffff9, 0x3, 0x1, 0x3, 0x7, 0x5, 0x6, 0xf3, 0xd, 0x7fffffff, 0xfffffff9, 0x800, 0x2726a3ed, 0x2, 0x14, 0x7, 0x6, 0x10000, 0x5, 0x7ff, 0x1000fd, 0x1ff, 0x7, 0xffffffff, 0xd, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x205, 0x8000, 0x8, 0x6, 0x8, 0xfa, 0x3, 0x0, 0x9, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0xee, 0x2, 0x401, 0xa955, 0x5000, 0x3, 0x7fffffff, 0x2, 0x9, 0x6e4, 0x1, 0x80005, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x5, 0x998, 0x9c4, 0x7f, 0xd, 0x5, 0xff800, 0x1, 0x7, 0x6, 0xff, 0x7, 0x6, 0xfff, 0x800, 0x7, 0x5, 0xff, 0x80000000, 0xd, 0x7, 0x8, 0xff, 0x0, 0x0, 0xff, 0x6, 0xffff, 0x3, 0x7f, 0x9, 0x1, 0xffff, 0x4, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x0, 0x7, 0xfffffffe, 0x6, 0x5, 0x7fc, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0x44, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x5, 0x9, 0x10003, 0x1, 0x42b, 0x1, 0x10000, 0xb, 0xcf9, 0x6, 0xfc, 0x9c, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0x725, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x1, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0x0, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0xff, 0xfffffff7, 0xfffffb98, 0xfffffffb, 0x0, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x4, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x7d, 0x6572, 0x3}, {0x2, 0x0, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x4}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20044804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r9) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061105f000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5}, 0x90) 12.754003417s ago: executing program 34 (id=3574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) (async) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000074c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x4, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x4, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x9, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0xa, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0xffffffff}, {0xffff, 0x4, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x8001}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x8, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000074c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x4, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x4, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x9, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0xa, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0xffffffff}, {0xffff, 0x4, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x8001}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x8, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 8.584171707s ago: executing program 35 (id=3577): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}], 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x340a) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1c, 0x5a, 0x113, 0x0, 0x0, {}, [@typed={0x8, 0x12, 0x0, 0x0, @uid=r4}]}, 0x1c}}, 0x18894) 0s ago: executing program 36 (id=3579): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000064c0)=0x40) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x19c}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x1b}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x4df}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x800) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000002000010000000000fbdbdf250a106b00000000031f00020014000200fc0200000000000000000000010020010000000000000000000000000000240018004e214e22"], 0x4c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x8044) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000030a0108000000000000100002000000090240000000000000000104000480080007006e617400140000001100010000000000000000000000000a00"/96], 0x60}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) listen(r7, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xf4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000019080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=r8, @ANYRES64=r4], 0x74}, 0x1, 0x0, 0x0, 0x14008002}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4) kernel console output (not intermixed with test programs): es in process `syz.4.2841'. [ 360.043340][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2844'. [ 360.083228][T16535] netlink: 'syz.2.2844': attribute type 5 has an invalid length. [ 360.102462][T16535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2844'. [ 360.320942][T16256] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.332985][T16256] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.344652][T16256] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 360.368693][T16547] netlink: 'syz.4.2846': attribute type 3 has an invalid length. [ 360.411878][T16535] geneve3: entered promiscuous mode [ 360.418245][T16535] geneve3: entered allmulticast mode [ 360.480167][ T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 360.520090][ T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 360.668700][ T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 360.793010][T16256] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.857277][T16256] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.873856][T16256] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 360.912639][ T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 361.115271][T16256] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.129147][T16256] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.149672][T16256] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 361.300127][T16256] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.317104][T16256] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.329343][T16256] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 361.643086][T16582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2855'. [ 361.702026][T16586] xt_socket: unknown flags 0x8 [ 361.822319][T16585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2856'. [ 361.882174][T16592] netlink: 'syz.4.2858': attribute type 1 has an invalid length. [ 361.932050][T16592] netlink: 'syz.4.2858': attribute type 1 has an invalid length. [ 362.068775][T16589] 0: reclassify loop, rule prio 0, protocol 700 [ 362.201988][T16603] Cannot find del_set index 4 as target [ 362.273929][T16605] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 362.313604][T16256] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 362.365897][T16256] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 362.412404][T16256] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 362.491374][T16256] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.517975][T16256] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 362.613662][T16256] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.734664][T16618] netlink: set zone limit has 4 unknown bytes [ 362.770503][T16256] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 362.810995][T16256] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 362.819411][T16632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2869'. [ 362.901479][T16628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.969931][T16628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2868'. [ 363.184347][T16256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.325183][T16256] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.432441][T16649] macvtap0: entered promiscuous mode [ 363.457517][T16649] macvtap0: entered allmulticast mode [ 363.470667][T16649] veth1_vlan: entered allmulticast mode [ 363.529434][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.536649][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.563261][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.570487][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.746906][T16694] netlink: 'syz.2.2882': attribute type 1 has an invalid length. [ 364.798438][T16705] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 364.891263][T16705] bond7: (slave lo): Enslaving as an active interface with an up link [ 364.972206][T16705] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 365.378874][T16733] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2892'. [ 365.478878][T16736] netlink: 'syz.2.2893': attribute type 1 has an invalid length. [ 365.499079][T16736] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2893'. [ 365.653624][T16736] tipc: Enabled bearer , priority 0 [ 365.929030][T16736] syzkaller0: entered promiscuous mode [ 365.948136][T16736] syzkaller0: entered allmulticast mode [ 365.991268][T16736] tipc: Resetting bearer [ 366.232058][ T155] tipc: Resetting bearer [ 366.254175][T16735] tipc: Resetting bearer [ 366.360986][T16772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2899'. [ 366.514509][T16777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2901'. [ 366.930995][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.941403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.785148][T16735] tipc: Disabling bearer [ 368.798444][T16772] netlink: 'syz.1.2899': attribute type 1 has an invalid length. [ 368.807000][T16772] netlink: 'syz.1.2899': attribute type 2 has an invalid length. [ 368.862159][T16256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.094060][T16256] veth0_vlan: entered promiscuous mode [ 369.148818][T16256] veth1_vlan: entered promiscuous mode [ 369.275939][T16256] veth0_macvtap: entered promiscuous mode [ 369.350596][T16256] veth1_macvtap: entered promiscuous mode [ 369.464048][T16256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.480444][ T8652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.490652][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.518245][T16256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.569339][ T8662] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.613868][ T8662] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.661848][ T8662] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.704012][T16817] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2910'. [ 369.732300][ T8662] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.745384][T16817] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2910'. [ 369.923350][T16821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2911'. [ 369.973903][T16826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2911'. [ 370.018322][T16827] ip6tnl0: Caught tx_queue_len zero misconfig [ 370.089100][T16822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2912'. [ 370.136641][T16822] lo: Caught tx_queue_len zero misconfig [ 370.247344][ T8662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.280758][ T8662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.414550][T16850] xt_ecn: cannot match TCP bits for non-tcp packets [ 370.444602][T16850] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2917'. [ 370.492312][ T8650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.522736][ T8650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.649616][T16856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2919'. [ 370.807770][T16863] bond6: entered promiscuous mode [ 370.841531][T16863] bond6: entered allmulticast mode [ 371.252313][T16875] syzkaller0: entered promiscuous mode [ 371.263363][T16880] netlink: 'syz.3.2928': attribute type 1 has an invalid length. [ 371.280471][T16875] syzkaller0: entered allmulticast mode [ 371.664188][ T5649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 371.677752][ T5649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 371.690283][ T5649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 371.700959][ T5649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 371.705315][T16901] netlink: 'syz.2.2930': attribute type 21 has an invalid length. [ 371.720950][ T5649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 371.800796][T16901] IPv6: NLM_F_CREATE should be specified when creating new route [ 372.555088][ T5630] syz_tun (unregistering): left allmulticast mode [ 372.583773][T16925] xt_l2tp: invalid flags combination: 8 [ 372.662731][T16933] netlink: 'syz.2.2940': attribute type 4 has an invalid length. [ 372.681706][ T8658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.690899][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.890502][T16940] netlink: 'syz.3.2941': attribute type 83 has an invalid length. [ 373.200499][T16895] xfrm0 speed is unknown, defaulting to 1000 [ 373.393249][T16959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2948'. [ 373.426830][T16959] netlink: 'syz.2.2948': attribute type 7 has an invalid length. [ 373.441797][T16959] netlink: 'syz.2.2948': attribute type 8 has an invalid length. [ 373.498008][T16959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2948'. [ 373.564597][T16964] tipc: Enabling of bearer rejected, failed to enable media [ 373.796154][ T5645] Bluetooth: hci0: command tx timeout [ 373.807620][T16979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2950'. [ 373.997836][T16983] netlink: 'syz.0.2953': attribute type 21 has an invalid length. [ 374.033494][T16983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 374.083081][T16983] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2953'. [ 374.105343][T16985] IPv6: sit1: Disabled Multicast RS [ 374.446067][T16993] lo: entered promiscuous mode [ 374.456235][T16993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.727227][T17009] xt_hashlimit: size too large, truncated to 1048576 [ 374.994271][T17013] bond1 (unregistering): Released all slaves [ 375.250531][ T8650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.261409][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.449587][T17028] dvmrp0: entered allmulticast mode [ 375.647999][T17041] tipc: Started in network mode [ 375.664967][T17041] tipc: Node identity fe16499883c9, cluster identity 4711 [ 375.683316][T17041] tipc: Enabled bearer , priority 0 [ 375.865475][T17045] syzkaller0: entered promiscuous mode [ 375.881239][ T5645] Bluetooth: hci0: command tx timeout [ 375.905146][T17045] syzkaller0: entered allmulticast mode [ 375.952994][T17045] tipc: Resetting bearer [ 376.016217][T17055] xt_l2tp: wrong L2TP version: 0 [ 376.175596][T17038] tipc: Resetting bearer [ 377.961345][ T5645] Bluetooth: hci0: command tx timeout [ 378.440922][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.452105][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.462352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.246777][T17068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 379.342859][T17038] tipc: Disabling bearer [ 379.444540][ T5631] tipc: Node number set to 2111785368 [ 379.914601][T17085] netlink: 'syz.0.2979': attribute type 15 has an invalid length. [ 380.037259][ T5645] Bluetooth: hci0: command tx timeout [ 380.214081][T16895] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.223812][T16895] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.247931][T16895] bridge_slave_0: entered allmulticast mode [ 380.274996][T16895] bridge_slave_0: entered promiscuous mode [ 380.349875][T16895] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.378816][T16895] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.403162][T16895] bridge_slave_1: entered allmulticast mode [ 380.503669][T16895] bridge_slave_1: entered promiscuous mode [ 380.918223][T16895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.004831][T16895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.015178][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.015638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.050477][T17120] openvswitch: netlink: Missing valid actions attribute. [ 381.076326][T17120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.110447][T17124] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2989'. [ 381.128628][T17118] netlink: 'syz.2.2986': attribute type 1 has an invalid length. [ 381.157465][T17124] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2989'. [ 381.468914][T17118] 8021q: adding VLAN 0 to HW filter on device bond8 [ 381.544438][T17128] bond8: (slave veth0_to_bond): making interface the new active one [ 381.574973][T17128] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 381.631170][T16895] team0: Port device team_slave_0 added [ 381.745638][T16895] team0: Port device team_slave_1 added [ 381.931342][T16895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.978333][T16895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.088726][T16895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.118816][T16895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.141889][T16895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.179430][T16895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.232941][T17153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2996'. [ 382.539989][T16895] hsr_slave_0: entered promiscuous mode [ 382.547925][T16895] hsr_slave_1: entered promiscuous mode [ 382.562039][T16895] debugfs: 'hsr0' already exists in 'hsr' [ 382.616515][T16895] Cannot create hsr debugfs directory [ 382.679581][T17158] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 382.789500][T17162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3000'. [ 382.811381][T17162] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3000'. [ 382.869970][T17163] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3000'. [ 383.451135][T17183] xt_CT: You must specify a L4 protocol and not use inversions on it [ 384.065096][T17192] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3005'. [ 384.200846][ T8662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.211695][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.290311][T17197] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3005'. [ 384.478994][T17201] ±ÿª¨úrBº“: left allmulticast mode [ 384.613487][T17201] tunl0: left allmulticast mode [ 384.683085][T17201] gre0: left allmulticast mode [ 384.719001][T17201] gretap0: left allmulticast mode [ 384.750036][T17201] erspan0: left allmulticast mode [ 384.804108][T17201] ip_vti0: left allmulticast mode [ 384.833588][T17201] ip6_vti0: left allmulticast mode [ 384.859022][T17201] sit0: left allmulticast mode [ 384.913063][T17201] ip6tnl0: left allmulticast mode [ 384.945037][T17201] ip6gre0: left allmulticast mode [ 384.980193][T17201] syz_tun: left allmulticast mode [ 385.025451][T17201] bridge0: left allmulticast mode [ 385.053865][T17201] bond0: left allmulticast mode [ 385.075822][T17201] netdevsim netdevsim0 netdevsim1: left allmulticast mode [ 385.115246][T17201] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 385.590267][T17232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3012'. [ 385.653087][T17233] netlink: 'syz.0.3013': attribute type 1 has an invalid length. [ 385.702360][T17234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3012'. [ 385.854440][T17227] netlink: 'syz.2.3012': attribute type 21 has an invalid length. [ 386.011112][T17227] netlink: 'syz.2.3012': attribute type 6 has an invalid length. [ 386.115612][T17238] netlink: 'syz.0.3014': attribute type 4 has an invalid length. [ 386.124298][T17227] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3012'. [ 386.235948][T17227] syzkaller0: entered promiscuous mode [ 386.270865][T17227] syzkaller0: entered allmulticast mode [ 386.328343][T17247] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3016'. [ 386.765157][T17255] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3019'. [ 386.870540][T17261] netlink: 'syz.0.3017': attribute type 4 has an invalid length. [ 388.252307][T17294] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.739069][T16895] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 388.755247][T17304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3027'. [ 388.840654][T16895] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 388.884464][T17315] xt_limit: Overflow, try lower: 604147548/4200216962 [ 388.912187][T17309] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3027'. [ 388.950600][T17315] xt_limit: Overflow, try lower: 604147548/4200216962 [ 388.990280][T17312] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 389.029507][T17315] xt_limit: Overflow, try lower: 604147548/4200216962 [ 389.030999][T17317] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3027'. [ 389.069285][T17315] xt_limit: Overflow, try lower: 604147548/4200216962 [ 389.107987][T16895] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 389.116497][T17315] xt_limit: Overflow, try lower: 604147548/4200216962 [ 389.144448][T16895] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 389.153206][T17315] xt_limit: Overflow, try lower: 604147548/4200216962 [ 389.182604][T17315] xt_limit: Overflow, try lower: 604147548/4200216962 [ 389.209175][T17315] xt_limit: Overflow, try lower: 604147548/4200216962 [ 389.234497][T16895] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 389.302098][T17315] xt_limit: Overflow, try lower: 604147548/4200216962 [ 389.315437][T16895] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 389.341749][T17315] xt_limit: Overflow, try lower: 604147548/4200216962 [ 389.360829][T16895] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 389.431866][T16895] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 389.698513][T17331] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 389.778588][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3032'. [ 390.682790][T16895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.791382][T16895] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.922618][ T8650] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.930748][ T8650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.002163][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.010136][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.260260][T16895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.809949][T16895] veth0_vlan: entered promiscuous mode [ 392.830591][T16895] veth1_vlan: entered promiscuous mode [ 392.905674][T16895] veth0_macvtap: entered promiscuous mode [ 392.917913][T16895] veth1_macvtap: entered promiscuous mode [ 392.968717][T16895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.999689][T16895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.023708][ T8650] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.033543][ T8650] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.048806][ T8650] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.059495][ T8650] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.289436][ T8652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.298412][ T8652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.368989][ T8652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.380176][ T8652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.651925][T17379] openvswitch: netlink: Key type 30 is not supported [ 393.662082][T17379] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2924'. [ 393.672703][T17379] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2924'. [ 414.103319][T17407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3037'. [ 414.105967][T17404] tipc: Enabling of bearer rejected, failed to enable media [ 414.595008][T17411] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 414.654256][T17414] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3041'. [ 414.788810][ T5649] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 414.802146][ T5649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 414.813835][ T5649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 414.831960][ T5649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 414.850537][ T5649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 415.025064][T17422] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3043'. [ 415.075209][T17424] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3043'. [ 415.296879][T17427] netlink: 'syz.3.3044': attribute type 83 has an invalid length. [ 416.057973][T17453] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 416.115842][T17455] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 416.628432][T17460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3049'. [ 416.749907][T17460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3049'. [ 416.869149][T17465] netlink: 'syz.3.3051': attribute type 6 has an invalid length. [ 416.916095][ T5645] Bluetooth: hci1: command tx timeout [ 416.975514][T17465] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3051'. [ 417.510141][T17416] xfrm0 speed is unknown, defaulting to 1000 [ 418.082981][T17501] xt_CT: You must specify a L4 protocol and not use inversions on it [ 418.996114][ T5645] Bluetooth: hci1: command tx timeout [ 419.354443][T17524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3064'. [ 419.980619][T17543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3067'. [ 421.076118][ T5645] Bluetooth: hci1: command tx timeout [ 422.114606][T17586] IPVS: ip_vs_add_dest(): server weight less than zero [ 422.133996][ T24] IPVS: starting estimator thread 0... [ 422.199381][T17586] netlink: 'syz.4.3076': attribute type 1 has an invalid length. [ 422.265770][T17591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3078'. [ 422.276395][T17588] IPVS: using max 32 ests per chain, 76800 per kthread [ 422.295690][T17586] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3076'. [ 422.335835][T17596] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3079'. [ 422.862888][T17610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3080'. [ 423.005558][T17622] netlink: 'syz.1.3081': attribute type 21 has an invalid length. [ 423.055698][T17622] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3081'. [ 423.097447][T17609] 8021q: adding VLAN 0 to HW filter on device bond3 [ 423.107111][T17609] bridge0: port 3(bond3) entered blocking state [ 423.115078][T17609] bridge0: port 3(bond3) entered disabled state [ 423.123586][T17609] bond3: entered allmulticast mode [ 423.134893][T17609] bond3: entered promiscuous mode [ 423.158384][T17609] bridge0: port 3(bond3) entered blocking state [ 423.165505][T17609] bridge0: port 3(bond3) entered forwarding state [ 423.186115][ T5645] Bluetooth: hci1: command tx timeout [ 423.300882][T17416] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.311646][T17416] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.320928][T17416] bridge_slave_0: entered allmulticast mode [ 423.340423][T17416] bridge_slave_0: entered promiscuous mode [ 423.361859][T17610] xfrm0 speed is unknown, defaulting to 1000 [ 423.370112][T17416] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.378539][T17616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3080'. [ 423.389813][T17416] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.408915][T17416] bridge_slave_1: entered allmulticast mode [ 423.440772][T17416] bridge_slave_1: entered promiscuous mode [ 423.457871][T17610] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3080'. [ 423.483040][T17622] netlink: 'syz.1.3081': attribute type 5 has an invalid length. [ 423.526562][T17622] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3081'. [ 423.801383][ T8652] bridge0: port 3(bond3) entered disabled state [ 423.884980][T17416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.017733][T17416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.403976][T17416] team0: Port device team_slave_0 added [ 424.454216][T17652] netlink: 'syz.4.3088': attribute type 1 has an invalid length. [ 424.483479][T17416] team0: Port device team_slave_1 added [ 424.989134][T17669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3091'. [ 425.044997][T17416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.098847][T17416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.152781][T17416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.152840][T17660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3090'. [ 425.236153][ T5645] Bluetooth: hci1: command tx timeout [ 425.382060][T17416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.422140][T17416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.559113][T17416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.650046][T17682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3093'. [ 425.720642][T17688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3095'. [ 426.084764][T17692] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3095'. [ 426.213182][T17416] hsr_slave_0: entered promiscuous mode [ 426.261036][T17416] hsr_slave_1: entered promiscuous mode [ 426.311097][T17416] debugfs: 'hsr0' already exists in 'hsr' [ 426.342142][T17416] Cannot create hsr debugfs directory [ 426.459712][T17698] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3097'. [ 426.501258][T17696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3096'. [ 426.550016][T17696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3096'. [ 427.695784][T17730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3103'. [ 428.005805][T17416] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.225300][T17730] hsr_slave_1 (unregistering): left promiscuous mode [ 428.234974][T17739] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3106'. [ 428.584477][T17416] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.750252][T17746] veth1_to_bond: entered allmulticast mode [ 428.765135][T17740] veth1_to_bond: left allmulticast mode [ 429.029314][T17416] bond0: (slave netdevsim1): Releasing backup interface [ 429.132219][T17416] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.520291][T17416] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.675748][T17776] xt_hashlimit: size too large, truncated to 1048576 [ 429.938594][T17781] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.105486][T17781] bridge_slave_0 (unregistering): left allmulticast mode [ 430.118690][T17781] bridge_slave_0 (unregistering): left promiscuous mode [ 430.127820][T17781] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.266839][T17787] __nla_validate_parse: 2 callbacks suppressed [ 430.266876][T17787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3117'. [ 430.963370][T17416] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 431.055724][T17416] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 431.081906][T17798] tipc: Enabling of bearer rejected, failed to enable media [ 431.113747][T17416] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 431.147504][T17416] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.170681][T17416] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 431.229427][T17416] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 431.420498][T17416] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 431.495220][T17416] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.517960][T17801] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3122'. [ 432.194712][T17825] syzkaller0: entered allmulticast mode [ 432.707545][T17416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.803717][T17843] netlink: 'syz.2.3130': attribute type 1 has an invalid length. [ 432.923294][T17416] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.955823][T17849] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3132'. [ 432.990757][ T8650] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.998710][ T8650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.210648][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.220070][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.702689][T17881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3140'. [ 434.772927][T17887] netlink: 'syz.4.3142': attribute type 1 has an invalid length. [ 435.074701][T17887] 8021q: adding VLAN 0 to HW filter on device bond2 [ 435.417830][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3145'. [ 435.507908][T17914] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3146'. [ 435.569062][T17915] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 435.601135][T17915] bond4: (slave lo): Enslaving as an active interface with an up link [ 435.616992][T17915] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 436.168924][T17416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.388446][T17928] xt_hashlimit: size too large, truncated to 1048576 [ 436.465388][T17933] netlink: 'syz.3.3153': attribute type 29 has an invalid length. [ 436.517981][T17933] netlink: 'syz.3.3153': attribute type 29 has an invalid length. [ 437.044668][T17416] veth0_vlan: entered promiscuous mode [ 437.268060][T17416] veth1_vlan: entered promiscuous mode [ 437.292288][T17949] netlink: 'syz.4.3156': attribute type 11 has an invalid length. [ 437.312624][T17949] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.3156'. [ 437.399833][T17951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.473234][T17949] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3156'. [ 437.569279][T17416] veth0_macvtap: entered promiscuous mode [ 437.677488][T17416] veth1_macvtap: entered promiscuous mode [ 437.820324][T17416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.922654][T17416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.034470][ T155] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.067626][ T155] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.080090][T17964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3160'. [ 438.112681][ T155] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.208406][ T155] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.572239][T17980] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3163'. [ 438.815188][T17983] netlink: 'syz.2.3164': attribute type 83 has an invalid length. [ 438.897737][ T8658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.942498][ T8658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.011667][T17987] sock: sock_set_timeout: `syz.1.3166' (pid 17987) tries to set negative timeout [ 439.152416][T17989] xt_hashlimit: size too large, truncated to 1048576 [ 439.258032][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.293678][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.445306][T18000] netlink: 'syz.2.3169': attribute type 1 has an invalid length. [ 439.509731][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3169'. [ 439.610880][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3169'. [ 439.610915][T18002] x_tables: duplicate entry at hook 1 [ 439.612450][T18002] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 439.866942][T18008] syzkaller0: entered promiscuous mode [ 439.885063][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.885706][ T8650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.922999][ T8658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.950895][T18008] syzkaller0: entered allmulticast mode [ 439.996438][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.104345][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.342893][ T5649] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 441.358747][ T5649] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 441.368881][ T5649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 441.386531][ T5649] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 441.402884][ T5649] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 441.722581][ T29] audit: type=1800 audit(1781108288.517:11): pid=18046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3178" name="memory.events" dev="tmpfs" ino=3242 res=0 errno=0 [ 442.410526][T18054] netlink: 1072 bytes leftover after parsing attributes in process `syz.1.3180'. [ 442.463457][T18056] syzkaller0: entered promiscuous mode [ 442.535383][T18056] syzkaller0: entered allmulticast mode [ 443.478612][ T5645] Bluetooth: hci4: command tx timeout [ 443.703920][T18095] x_tables: duplicate underflow at hook 3 [ 443.728412][T18094] x_tables: duplicate underflow at hook 3 [ 444.255165][T18040] xfrm0 speed is unknown, defaulting to 1000 [ 444.380278][T18106] netlink: zone id is out of range [ 444.426916][T18106] netlink: zone id is out of range [ 444.456697][T18106] netlink: zone id is out of range [ 444.495009][T18106] netlink: zone id is out of range [ 444.507448][T18106] netlink: zone id is out of range [ 444.534259][T18106] netlink: zone id is out of range [ 444.575743][T18109] netlink: 'syz.4.3194': attribute type 24 has an invalid length. [ 444.590102][T18106] netlink: zone id is out of range [ 444.648753][T18106] netlink: zone id is out of range [ 444.666417][T18106] netlink: zone id is out of range [ 444.698498][T18106] netlink: zone id is out of range [ 444.996270][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 445.557443][ T5645] Bluetooth: hci4: command tx timeout [ 445.586375][T18125] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3198'. [ 445.772731][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.816056][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.480809][T18142] syzkaller0: entered promiscuous mode [ 446.535330][T18142] syzkaller0: entered allmulticast mode [ 446.683419][T18152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3204'. [ 446.703040][T18152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3204'. [ 446.713430][T18152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3204'. [ 446.792243][T18146] can: request_module (can-proto-0) failed. [ 446.819106][T18155] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3206'. [ 446.879892][T18155] team0: entered promiscuous mode [ 446.904966][T18155] team_slave_0: entered promiscuous mode [ 446.948290][T18155] team_slave_1: entered promiscuous mode [ 447.253302][T18160] netlink: 816 bytes leftover after parsing attributes in process `syz.1.3208'. [ 447.636396][ T5645] Bluetooth: hci4: command tx timeout [ 447.707349][T18174] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 448.296755][T18186] IPVS: Error connecting to the multicast addr [ 448.675275][T18194] tipc: Enabling of bearer rejected, failed to enable media [ 448.700808][T18192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3218'. [ 449.348293][T18040] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.395664][T18040] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.418412][T18040] bridge_slave_0: entered allmulticast mode [ 449.435510][T18212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3225'. [ 449.452494][T18211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3224'. [ 449.463199][T18040] bridge_slave_0: entered promiscuous mode [ 449.481239][T18040] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.503870][T18212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3225'. [ 449.539929][T18040] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.548147][T18212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3225'. [ 449.579175][T18040] bridge_slave_1: entered allmulticast mode [ 449.591006][T18040] bridge_slave_1: entered promiscuous mode [ 449.716313][ T5645] Bluetooth: hci4: command tx timeout [ 449.777524][T18040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.812658][T18219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3226'. [ 449.832619][T18040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.255363][T18225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3229'. [ 450.354296][T18040] team0: Port device team_slave_0 added [ 450.429043][T18040] team0: Port device team_slave_1 added [ 450.505122][T18234] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 450.828912][T18040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.898498][T18040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.071674][T18040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.223824][T18040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.275862][T18040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.446294][T18040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.610202][T18262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3236'. [ 451.632212][T18264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3237'. [ 451.845606][T18040] hsr_slave_0: entered promiscuous mode [ 451.895248][T18040] hsr_slave_1: entered promiscuous mode [ 451.940275][T18040] debugfs: 'hsr0' already exists in 'hsr' [ 452.002017][T18040] Cannot create hsr debugfs directory [ 452.294866][T18278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3241'. [ 452.928889][T18288] net_ratelimit: 464 callbacks suppressed [ 452.928922][T18288] openvswitch: netlink: IP tunnel dst address not specified [ 453.233282][T18294] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.497619][T18040] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.527507][T18040] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 453.634206][T18306] netlink: 'syz.3.3249': attribute type 1 has an invalid length. [ 453.678680][T18306] netlink: 'syz.3.3249': attribute type 1 has an invalid length. [ 453.710538][T18306] __nla_validate_parse: 1 callbacks suppressed [ 453.710565][T18306] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.3249'. [ 453.809778][T18040] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.862022][T18040] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 454.133050][T18040] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.180262][T18040] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 454.284868][T18318] netlink: 'syz.3.3252': attribute type 4 has an invalid length. [ 454.318101][T18318] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3252'. [ 454.453332][T18318] .`: renamed from bond0 (while UP) [ 454.622129][T18040] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.672105][T18040] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 454.734098][T18321] can: request_module (can-proto-4) failed. [ 454.747798][T18327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3255'. [ 454.854325][T18327] xfrm1: entered promiscuous mode [ 454.891102][T18327] xfrm1: entered allmulticast mode [ 455.355434][T18339] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3258'. [ 455.446194][T18339] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3258'. [ 455.584839][T18348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3260'. [ 455.827274][T18353] veth0: entered promiscuous mode [ 455.922204][T18352] veth0: left promiscuous mode [ 455.995404][ T8662] tipc: Subscription rejected, illegal request [ 456.304544][T18040] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 456.384145][T18040] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 456.445036][T18040] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 456.484358][T18040] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 456.498613][T18040] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 456.542824][T18040] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 456.590230][T18040] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 456.645847][T18040] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 456.681097][T18370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3266'. [ 457.193864][T18383] netlink: 'syz.4.3269': attribute type 3 has an invalid length. [ 457.307181][T18040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.453143][T18040] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.539513][ T8662] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.547536][ T8662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.624680][T18389] pimreg3: entered allmulticast mode [ 457.677923][ T8662] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.686053][ T8662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.455641][T18394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3273'. [ 458.513057][T18397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3274'. [ 459.083355][T18410] netlink: 'syz.3.3277': attribute type 15 has an invalid length. [ 460.783155][ T12] dvmrp0: left allmulticast mode [ 460.818279][ T12] C: left allmulticast mode [ 461.504014][T18461] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.3289'. [ 461.538484][T18461] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 462.965693][ T12] bond6 (unregistering): (slave geneve2): Releasing active interface [ 463.518380][ T12] bond0 (unregistering): Released all slaves [ 463.542172][ T12] bond1 (unregistering): Released all slaves [ 463.580641][ T12] bond2 (unregistering): Released all slaves [ 463.625102][ T12] bond3 (unregistering): Released all slaves [ 463.674820][ T12] bond4 (unregistering): Released all slaves [ 463.714444][ T12] bond5 (unregistering): Released all slaves [ 463.780180][ T12] bond6 (unregistering): Released all slaves [ 464.509895][T18456] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.519502][T18456] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.110734][T18456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.189894][T18456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.594697][T18457] tipc: Enabling of bearer rejected, failed to enable media [ 465.924797][ T12] tipc: Left network mode [ 465.939149][ T8661] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.990969][ T8661] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.174306][T18040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.280177][ T8661] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.319732][ T8661] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.374421][ T8661] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.411430][T18524] openvswitch: netlink: Missing valid actions attribute. [ 466.448261][T18524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.664198][T18528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3295'. [ 466.845353][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.896632][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.933065][T18527] team0: entered promiscuous mode [ 466.950573][T18534] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3297'. [ 466.958339][T18528] geneve4: entered promiscuous mode [ 466.991806][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.155180][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 467.192828][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 467.239097][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 467.443620][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 468.112532][T18555] netlink: 'syz.4.3303': attribute type 15 has an invalid length. [ 468.166853][T18040] veth0_vlan: entered promiscuous mode [ 468.214271][T18558] netlink: 'syz.0.3305': attribute type 1 has an invalid length. [ 468.629781][T18558] bond1: entered promiscuous mode [ 468.653738][T18558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.007487][T18040] veth1_vlan: entered promiscuous mode [ 469.142008][T18582] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 469.362696][T18040] veth0_macvtap: entered promiscuous mode [ 469.452913][T18040] veth1_macvtap: entered promiscuous mode [ 470.292711][T18040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.471460][T18040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.659985][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.711246][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.996761][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.083719][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.245670][ T12] hsr_slave_0: left promiscuous mode [ 471.268673][ T12] hsr_slave_1: left promiscuous mode [ 471.285460][ T12] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 471.296949][ T12] batman_adv: batadv0: Removing interface: ipvlan2 [ 471.370486][ T12] veth1_vlan: left promiscuous mode [ 471.399852][ T12] veth0_vlan: left promiscuous mode [ 472.010102][ T12] pim6reg (unregistering): left allmulticast mode [ 472.669250][T18655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3325'. [ 472.676013][ T5649] Bluetooth: hci5: command 0x0406 tx timeout [ 473.598685][T18658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3326'. [ 474.004813][T18666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3329'. [ 474.419016][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.484186][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.742113][ T12] IPVS: stop unused estimator thread 0... [ 474.888211][T18688] netlink: 'syz.1.3333': attribute type 10 has an invalid length. [ 474.963379][ T8652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.033269][ T8652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.388120][T18697] netlink: 284 bytes leftover after parsing attributes in process `syz.4.3335'. [ 475.808512][ T5763] IPVS: starting estimator thread 0... [ 475.844150][T18705] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 475.956178][T18706] IPVS: using max 26 ests per chain, 62400 per kthread [ 477.030614][T18734] netlink: 'syz.2.3344': attribute type 11 has an invalid length. [ 477.095333][T18734] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3344'. [ 477.154702][T18720] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 477.194416][T18720] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 477.402049][T18742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3345'. [ 477.541507][T18720] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 477.603544][T18720] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 477.751596][T18747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3347'. [ 477.821983][T18747] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 477.867013][T18720] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 477.904090][T18720] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 478.053199][T18748] syzkaller0: entered promiscuous mode [ 478.086087][T18748] syzkaller0: entered allmulticast mode [ 478.121090][T18720] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 478.179983][T18720] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 481.421923][T18760] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 481.498781][T18720] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 481.506550][T18720] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 481.929237][ T5649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 481.947105][ T5649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 481.958707][ T5649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 481.972339][ T5649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 481.989250][ T5649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 482.172361][T18788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3356'. [ 482.183269][ T5645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 482.194216][ T5645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 482.206263][ T5645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 482.207253][T18790] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 482.222584][ T5645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 482.243591][ T5645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 482.343214][T18800] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3358'. [ 482.939906][ T8656] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 483.544203][ T8656] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 483.812149][ T8661] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.091272][ T8656] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 484.216743][ T8661] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.242866][ T8661] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.315672][ T8661] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.362437][ T5645] Bluetooth: hci3: command tx timeout [ 484.695045][T18842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3366'. [ 484.790661][ T8656] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 485.305034][T18829] syzkaller0: entered promiscuous mode [ 485.337579][T18829] syzkaller0: entered allmulticast mode [ 485.381200][T18856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3370'. [ 485.729847][ T8652] syzkaller0: tun_net_xmit 48 [ 486.446051][ T5645] Bluetooth: hci3: command tx timeout [ 488.527498][ T5645] Bluetooth: hci3: command tx timeout [ 490.147021][T18736] xfrm0 speed is unknown, defaulting to 1000 [ 490.595957][ T5645] Bluetooth: hci3: command tx timeout [ 490.784955][ T8656] pimreg3: left allmulticast mode [ 491.286367][T18886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3376'. [ 492.676194][ T5645] Bluetooth: hci3: command tx timeout [ 492.761841][ T8656] bond0 (unregistering): Released all slaves [ 492.785246][ T8656] bond1 (unregistering): Released all slaves [ 492.839445][ T8656] bond2 (unregistering): Released all slaves [ 492.872780][ T8656] bond3 (unregistering): Released all slaves [ 492.912755][ T8656] bond4 (unregistering): Released all slaves [ 492.954037][ T8656] bond5 (unregistering): Released all slaves [ 492.999361][ T8656] bond6 (unregistering): Released all slaves [ 493.347531][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 493.400444][ T8656] tipc: Left network mode [ 493.723002][T18899] C: renamed from lo [ 493.736624][T18912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3380'. [ 493.786640][T18899] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 494.735033][T18927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3382'. [ 494.830885][T18916] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 495.063738][T18942] syz_tun: entered allmulticast mode [ 495.187110][T18943] pimreg: entered allmulticast mode [ 495.290376][T18947] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 495.371369][T18951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3387'. [ 495.485348][T18942] syz_tun: left allmulticast mode [ 495.637949][T18952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3387'. [ 495.866678][T18951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3387'. [ 496.098677][T18952] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 496.210590][T18951] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 496.250043][T18977] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3391'. [ 496.320622][T18947] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 496.911322][ T8656] veth1_vlan: left allmulticast mode [ 497.255729][ T8656] pim6reg (unregistering): left allmulticast mode [ 498.234697][T18998] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 498.264021][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 498.839285][T19020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3398'. [ 498.888470][T19024] netlink: 'syz.0.3401': attribute type 1 has an invalid length. [ 498.931828][T19024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3401'. [ 499.153140][T19029] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3401'. [ 499.333609][T19034] netlink: 'syz.3.3402': attribute type 10 has an invalid length. [ 499.391895][T19024] nbd: couldn't find a device at index 1048580 [ 499.392552][T19034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.416442][T19034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.445545][T19034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.456024][T19034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.772735][T18736] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.822064][T18736] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.873708][T18736] bridge_slave_0: entered allmulticast mode [ 499.908080][T18736] bridge_slave_0: entered promiscuous mode [ 499.946410][ T8656] IPVS: stop unused estimator thread 0... [ 499.953265][T18736] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.953561][T19040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3404'. [ 500.002476][T18736] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.062575][T18736] bridge_slave_1: entered allmulticast mode [ 500.128186][T18736] bridge_slave_1: entered promiscuous mode [ 500.173146][T19040] syz_tun: refused to change device tx_queue_len [ 500.604181][T18736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.707514][T18736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.791629][T19063] x_tables: duplicate underflow at hook 2 [ 501.075832][T18736] team0: Port device team_slave_0 added [ 501.166711][T18736] team0: Port device team_slave_1 added [ 501.321607][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.537605][T19082] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3414'. [ 501.544371][T18736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.601473][T18736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.678197][T18736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.749766][T18736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.795366][T18736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.953128][T18736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.176765][T19099] xt_CT: You must specify a L4 protocol and not use inversions on it [ 502.551843][T18736] hsr_slave_0: entered promiscuous mode [ 502.615318][T18736] hsr_slave_1: entered promiscuous mode [ 502.622137][T19109] netlink: 'syz.4.3420': attribute type 1 has an invalid length. [ 502.673521][T18736] debugfs: 'hsr0' already exists in 'hsr' [ 502.680602][T19109] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3420'. [ 502.746913][T18736] Cannot create hsr debugfs directory [ 503.022143][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 504.101333][T19141] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3425'. [ 504.803279][T19141] bond0 (unregistering): Released all slaves [ 504.826933][T19162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3429'. [ 504.849798][T19163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3429'. [ 504.879950][T19164] x_tables: duplicate underflow at hook 1 [ 505.121203][T19162] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 505.200227][T19162] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 505.280522][T19162] gretap1: entered promiscuous mode [ 505.318334][T19162] gretap1: entered allmulticast mode [ 505.530647][T19172] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.3430'. [ 505.576325][T19172] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3430'. [ 505.621254][T19172] netlink: 'syz.0.3430': attribute type 3 has an invalid length. [ 505.685538][T19172] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3430'. [ 505.733389][T19172] netlink: 'syz.0.3430': attribute type 3 has an invalid length. [ 506.811645][T19191] tipc: Enabling of bearer rejected, failed to enable media [ 508.552473][T19225] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3441'. [ 508.818231][T19225] 8021q: VLANs not supported on gre0 [ 509.020549][T19228] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3442'. [ 509.193160][T19239] netlink: 'syz.0.3443': attribute type 2 has an invalid length. [ 509.330928][T19235] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 509.404499][T19238] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 509.507058][T19238] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 509.612751][T18736] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 509.697020][T18736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 509.727338][T19243] xfrm0 speed is unknown, defaulting to 1000 [ 509.728154][T18736] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 509.792904][T18736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 509.808839][T18736] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 509.832857][T18736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 509.862147][T18736] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 509.941709][T18736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 510.013700][T19254] x_tables: duplicate underflow at hook 1 [ 510.500156][T18736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.657053][T18736] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.773981][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.782066][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.940802][ T8652] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.948869][ T8652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.163076][T18736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.301062][T18736] veth0_vlan: entered promiscuous mode [ 513.367774][T18736] veth1_vlan: entered promiscuous mode [ 513.496562][T18736] veth0_macvtap: entered promiscuous mode [ 513.533449][T18736] veth1_macvtap: entered promiscuous mode [ 513.568587][T18736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.595773][T18736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.629931][ T8650] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.670593][ T8650] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.696055][ T8650] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.730552][ T8650] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.958526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.970073][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.016703][ T8662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.043538][ T8662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.171205][ T8661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.181912][ T8661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.492105][T19325] netlink: 'syz.1.3340': attribute type 1 has an invalid length. [ 531.489115][T19357] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3455'. [ 531.536597][T19364] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 531.569640][T19357] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.3455'. [ 531.620002][T19371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3458'. [ 532.097084][T19380] netlink: 'syz.1.3459': attribute type 2 has an invalid length. [ 532.110292][T19380] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3459'. [ 532.147220][T19380] netlink: 'syz.1.3459': attribute type 4 has an invalid length. [ 532.166974][T19383] netlink: 'syz.3.3460': attribute type 9 has an invalid length. [ 532.202077][T19380] netlink: 'syz.1.3459': attribute type 4 has an invalid length. [ 532.930835][T19386] 8021q: adding VLAN 0 to HW filter on device bond1 [ 532.941640][T19386] bridge0: port 3(bond1) entered blocking state [ 532.950490][T19386] bridge0: port 3(bond1) entered disabled state [ 532.959165][T19386] bond1: entered allmulticast mode [ 532.970777][T19386] bond1: entered promiscuous mode [ 532.977662][T19386] bridge0: port 3(bond1) entered blocking state [ 532.984891][T19386] bridge0: port 3(bond1) entered forwarding state [ 533.015440][T19393] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3462'. [ 533.072117][ T8650] bridge0: port 3(bond1) entered disabled state [ 533.390580][T19406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3466'. [ 533.464537][T19406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3466'. [ 533.973406][T19425] netlink: 'syz.0.3472': attribute type 1 has an invalid length. [ 533.992374][T19428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3473'. [ 534.026811][T19425] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3472'. [ 534.046474][T19427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3473'. [ 535.911170][T19488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.142263][T19525] netlink: 'syz.2.3497': attribute type 1 has an invalid length. [ 537.191650][T19525] __nla_validate_parse: 4 callbacks suppressed [ 537.191684][T19525] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3497'. [ 537.247063][T19525] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3497'. [ 537.307122][T19525] netlink: 658 bytes leftover after parsing attributes in process `syz.2.3497'. [ 538.572463][T19567] openvswitch: netlink: Missing valid actions attribute. [ 538.580845][T19567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.259754][T19582] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3516'. [ 539.476590][T19595] netlink: 'syz.4.3519': attribute type 30 has an invalid length. [ 540.134795][T19605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3521'. [ 540.281926][T19607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3522'. [ 540.381733][T19611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3521'. [ 540.413091][T19615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.674557][T19605] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3521'. [ 540.798031][T19609] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 540.845782][T19627] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3526'. [ 540.915673][T19630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3526'. [ 540.949630][T19626] netlink: 'syz.2.3526': attribute type 4 has an invalid length. [ 541.542115][T19636] sctp: [Deprecated]: syz.4.3527 (pid 19636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 541.542115][T19636] Use struct sctp_sack_info instead [ 542.023889][T19643] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 542.873156][ T5762] IPVS: starting estimator thread 0... [ 542.976578][T19679] IPVS: using max 27 ests per chain, 64800 per kthread [ 543.045293][T19682] bridge0: port 4(veth1_to_bridge) entered blocking state [ 543.073262][T19682] bridge0: port 4(veth1_to_bridge) entered disabled state [ 543.123130][T19682] veth1_to_bridge: entered allmulticast mode [ 543.124761][T19683] netlink: 'syz.1.3543': attribute type 1 has an invalid length. [ 543.191311][T19682] veth1_to_bridge: entered promiscuous mode [ 543.238218][T19683] netlink: 'syz.1.3543': attribute type 3 has an invalid length. [ 543.280088][T19682] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 543.337962][T19683] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3543'. [ 543.488358][T19682] bridge0: port 4(veth1_to_bridge) entered blocking state [ 543.496404][T19682] bridge0: port 4(veth1_to_bridge) entered forwarding state [ 543.553611][T19696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3546'. [ 543.567211][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 543.568218][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 543.569046][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 543.569798][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 543.570544][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 543.571274][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 543.572031][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 543.576518][ C0] net_ratelimit: 5 callbacks suppressed [ 543.576546][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 543.577272][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 543.578031][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 543.578770][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 543.579504][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 543.580256][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 543.581002][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 543.581736][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 543.582483][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 543.583270][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 543.818482][T19682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3543'. [ 543.985536][T19705] netlink: 'syz.4.3547': attribute type 16 has an invalid length. [ 543.985574][T19705] netlink: 'syz.4.3547': attribute type 3 has an invalid length. [ 543.985605][T19705] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3547'. [ 548.586237][ C0] net_ratelimit: 7080 callbacks suppressed [ 548.586272][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 548.606690][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 548.620436][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 548.634132][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 548.647840][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 548.661808][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 548.677755][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 548.691354][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 548.704886][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 548.718748][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 549.856301][T19710] netlink: 'syz.1.3548': attribute type 11 has an invalid length. [ 551.177157][T19714] ip6tnl1: entered allmulticast mode [ 551.473194][T19715] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3549'. [ 551.735069][T19720] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3551'. [ 551.872308][T19723] netlink: 'syz.0.3552': attribute type 1 has an invalid length. [ 553.596086][ C0] net_ratelimit: 7628 callbacks suppressed [ 553.596118][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 553.616701][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 553.630833][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 553.644660][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 553.658543][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 553.672394][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 553.686573][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 553.700395][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 553.714270][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 553.728160][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 554.614451][T19751] netlink: 'syz.0.3558': attribute type 3 has an invalid length. [ 556.147256][T19769] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3562'. [ 558.513571][T19800] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3563'. [ 558.597294][T19801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3564'. [ 558.607366][ C0] net_ratelimit: 7151 callbacks suppressed [ 558.607393][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 558.608075][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 558.641403][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 558.655190][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 558.669060][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 558.682938][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 558.696649][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 558.710336][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 558.724561][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 558.738630][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 558.909791][T19800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3563'. [ 559.722368][ C0] sched: DL replenish lagged too much [ 561.110809][ T29] audit: type=1107 audit(1781108407.847:12): pid=19826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 561.623316][ T5649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 561.773163][T19830] sctp: [Deprecated]: syz.0.3572 (pid 19830) Use of struct sctp_assoc_value in delayed_ack socket option. [ 561.773163][T19830] Use struct sctp_sack_info instead [ 561.824190][ T5649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 561.844113][ T5649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 561.869402][ T5649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 561.880853][ T5649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 562.770882][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.615871][ C0] net_ratelimit: 7852 callbacks suppressed [ 563.615903][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 563.636049][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 563.650487][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 563.664652][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 563.678343][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 563.692121][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 563.706151][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 563.719845][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 563.733868][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 563.747882][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 563.956135][ T5649] Bluetooth: hci2: command tx timeout [ 566.037853][ T5649] Bluetooth: hci2: command tx timeout [ 566.520801][T19865] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 566.555938][T19864] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 566.608981][T19865] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 566.641586][T19864] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 568.115964][ T5649] Bluetooth: hci2: command tx timeout [ 568.626186][ C0] net_ratelimit: 7960 callbacks suppressed [ 568.626232][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 568.646600][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 568.660254][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 568.674251][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 568.687881][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 568.701615][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 568.715512][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 568.729012][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 568.742930][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 568.756640][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 570.196101][ T5649] Bluetooth: hci2: command tx timeout [ 573.635894][ C0] net_ratelimit: 7422 callbacks suppressed [ 573.635929][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.656380][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.670445][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 573.684269][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 573.697998][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.712062][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.726081][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 573.740201][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 573.754187][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.768161][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.026279][T19851] syzkaller0: entered promiscuous mode [ 574.032443][T19851] syzkaller0: entered allmulticast mode [ 574.121566][T19779] bond5: left promiscuous mode [ 574.131687][T19779] bridge0: port 4(bond5) entered disabled state [ 574.183375][T19779] bond2: left promiscuous mode [ 574.201518][T19779] bridge0: port 3(bond2) entered disabled state [ 574.342569][T19779] bridge_slave_1: left promiscuous mode [ 574.364420][T19779] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.496319][T19779] dvmrp0: left allmulticast mode [ 574.549791][T19880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3579'. [ 574.653287][T19881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3579'. [ 578.301163][ T5645] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 578.314420][ T5645] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 578.333242][ T5645] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 578.343435][ T5645] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 578.363085][ T5645] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 578.647950][ C0] net_ratelimit: 4610 callbacks suppressed [ 578.647982][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.650671][ T5649] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 578.655095][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 578.678973][ T5649] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 578.689432][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 578.709883][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.712800][ T5649] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 578.723872][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 578.732631][ T5649] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 578.746879][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.765753][ T5649] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 578.775026][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 578.788985][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 578.802364][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.816649][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 579.609013][ T8654] smbdirect: ib_dev[syz2] removed [ 579.767710][T19779] bond3 (unregistering): (slave gretap1): Releasing active interface [ 580.446173][ T5645] Bluetooth: hci6: command tx timeout [ 580.629493][T19779] bond4 (unregistering): (slave bridge3): Releasing active interface [ 580.837939][ T5645] Bluetooth: hci7: command tx timeout [ 580.942300][T19779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.967476][T19779] bond0 (unregistering): Released all slaves [ 581.035760][T19779] bond1 (unregistering): (slave team_slave_0): Removing an active aggregator [ 581.049167][T19779] bond1 (unregistering): (slave team_slave_0): Releasing backup interface [ 581.066893][T19779] bond1 (unregistering): Released all slaves [ 581.092903][T19779] bond2 (unregistering): Released all slaves [ 581.116429][T19779] bond3 (unregistering): Released all slaves [ 582.164878][ T5649] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 582.174759][ T5649] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 582.188449][ T5649] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 582.202925][ T5649] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 582.213384][ T5649] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 582.515973][ T5645] Bluetooth: hci6: command tx timeout [ 582.531288][T19779] bond4 (unregistering): Released all slaves [ 582.555462][T19779] bond5 (unregistering): Released all slaves [ 582.582983][T19779] bond6 (unregistering): Released all slaves [ 582.630142][T19779] bond7 (unregistering): Released all slaves [ 582.658506][T19779] bond8 (unregistering): Released all slaves [ 582.688462][T19779] bond9 (unregistering): Released all slaves [ 582.723041][T19779] bond10 (unregistering): Released all slaves [ 582.917579][ T5645] Bluetooth: hci7: command tx timeout [ 583.657421][ C0] net_ratelimit: 4920 callbacks suppressed [ 583.657464][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.677853][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 583.691919][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 583.705943][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.719900][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 583.736544][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.750316][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 583.764071][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 583.777681][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.791664][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 584.278942][ T5645] Bluetooth: hci8: command tx timeout [ 584.596172][ T5645] Bluetooth: hci6: command tx timeout [ 584.998145][ T5645] Bluetooth: hci7: command tx timeout [ 586.356045][ T5645] Bluetooth: hci8: command tx timeout [ 586.678939][ T5645] Bluetooth: hci6: command tx timeout [ 587.084405][ T5645] Bluetooth: hci7: command tx timeout [ 588.436105][ T5649] Bluetooth: hci8: command tx timeout [ 588.666179][ C0] net_ratelimit: 5103 callbacks suppressed [ 588.666219][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.686310][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 588.701931][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.715784][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 588.729892][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 588.743737][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.758351][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 588.774024][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.788023][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 588.801740][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 590.516123][ T5649] Bluetooth: hci8: command tx timeout [ 590.858781][ T5645] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 590.884293][ T5645] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 590.892035][ T5645] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 590.914632][ T5645] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 590.932386][ T5645] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 593.006802][ T5645] Bluetooth: hci9: command tx timeout [ 593.675938][ C0] net_ratelimit: 5378 callbacks suppressed [ 593.675972][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 593.696513][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 593.710502][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.724558][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 593.740202][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.753938][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 593.767761][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 593.781782][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.797053][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 593.812590][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.076554][ T5645] Bluetooth: hci9: command tx timeout [ 597.156391][ T5645] Bluetooth: hci9: command tx timeout [ 598.342073][T19779] tipc: Left network mode [ 598.686518][ C0] net_ratelimit: 5022 callbacks suppressed [ 598.686551][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.707095][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 598.722025][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.735998][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 598.750192][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 598.764267][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.778298][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 598.793253][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.807566][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 598.821972][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 599.244171][ T5645] Bluetooth: hci9: command tx timeout [ 603.696163][ C0] net_ratelimit: 4885 callbacks suppressed [ 603.696197][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.716946][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 603.732252][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.746564][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 603.760562][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 603.774415][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.788651][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 603.803638][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.817823][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 603.831994][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 605.803479][ T5645] Bluetooth: hci3: command 0x0406 tx timeout [ 608.706124][ C0] net_ratelimit: 4679 callbacks suppressed [ 608.706159][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 608.726266][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.740223][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 608.756753][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.770669][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 608.784609][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 608.798789][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.812601][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 608.828896][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.842788][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 613.717027][ C0] net_ratelimit: 4638 callbacks suppressed [ 613.717062][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.737831][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 613.752026][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 613.766084][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.779785][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 613.794588][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.808522][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 613.822636][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 613.836319][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.850414][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 618.725831][ C0] net_ratelimit: 5040 callbacks suppressed [ 618.725865][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.746032][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 618.760094][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 618.773733][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.787448][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 618.803037][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.816785][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 618.830590][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 618.844251][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.857914][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 619.162073][T19920] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 619.179545][T19920] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 619.189707][T19920] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 619.202674][T19920] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 619.214246][T19920] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 623.736503][ C0] net_ratelimit: 4819 callbacks suppressed [ 623.736538][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 623.758287][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.772222][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 623.786283][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 623.800169][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.814029][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 623.828575][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.842730][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 623.856283][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 623.870157][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.203258][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.746582][ C0] net_ratelimit: 5636 callbacks suppressed [ 628.746617][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.766824][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 628.780753][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 628.794315][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.807903][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 628.821587][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 628.836856][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.850781][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 628.864770][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 628.878335][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.757422][ C0] net_ratelimit: 5494 callbacks suppressed [ 633.757456][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.778000][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.792152][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.805990][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 633.820236][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 633.834417][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.848551][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 633.862806][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 633.880173][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.893964][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.495101][T19931] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 638.512039][T19931] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 638.524975][T19931] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 638.540317][T19931] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 638.548790][T19931] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 638.635994][T19937] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 638.650817][T19937] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 638.659513][T19937] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 638.668064][T19937] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 638.689487][T19937] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 638.766088][ C0] net_ratelimit: 5218 callbacks suppressed [ 638.766120][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 638.786330][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.800491][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 638.814810][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 638.830737][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.844668][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.858854][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.873075][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 638.886928][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 638.900769][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.704868][T19945] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 642.735302][T19945] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 642.747233][T19945] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 642.760208][T19945] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 642.775476][T19945] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 643.776303][ C0] net_ratelimit: 4510 callbacks suppressed [ 643.776337][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 643.797327][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.811426][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 643.825252][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 643.840890][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.854879][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.868952][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.883041][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 643.896932][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 643.912440][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.019677][T19920] Bluetooth: hci4: command tx timeout [ 646.116138][T19931] Bluetooth: hci10: command tx timeout [ 646.124237][T19920] Bluetooth: hci5: command tx timeout [ 646.131514][T19945] Bluetooth: hci0: command tx timeout [ 646.138782][T19937] Bluetooth: hci4: command tx timeout [ 648.206148][T19937] Bluetooth: hci4: command tx timeout [ 648.212241][T19920] Bluetooth: hci5: command tx timeout [ 648.217683][T19920] Bluetooth: hci10: command tx timeout [ 648.224665][T19931] Bluetooth: hci0: command tx timeout [ 648.785943][ C0] net_ratelimit: 4298 callbacks suppressed [ 648.785987][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.806352][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.820412][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.834634][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 648.848400][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 648.863188][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.877357][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 648.891478][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 648.907105][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.921202][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.275972][T19920] Bluetooth: hci10: command tx timeout [ 650.282194][T19937] Bluetooth: hci5: command tx timeout [ 650.288415][T19931] Bluetooth: hci0: command tx timeout [ 650.294975][T19945] Bluetooth: hci4: command tx timeout [ 651.219330][T19931] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 651.232961][T19931] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 651.242880][T19931] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 651.252243][T19931] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 651.265240][T19931] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 652.356276][T19920] Bluetooth: hci10: command tx timeout [ 652.362471][T19931] Bluetooth: hci0: command tx timeout [ 652.367872][T19931] Bluetooth: hci5: command tx timeout [ 653.316767][T19931] Bluetooth: hci11: command tx timeout [ 653.797222][ C0] net_ratelimit: 5144 callbacks suppressed [ 653.797255][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.817705][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.831635][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.846912][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 653.860701][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 653.876202][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 653.890252][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.904145][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 653.917862][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 653.933311][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.396289][T19931] Bluetooth: hci11: command tx timeout [ 657.476462][T19931] Bluetooth: hci11: command tx timeout [ 658.806419][ C0] net_ratelimit: 4468 callbacks suppressed [ 658.806454][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 658.826690][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.840444][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 658.854750][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 658.869492][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.883720][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.897881][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.911965][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 658.925764][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 658.941657][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 659.556350][T19931] Bluetooth: hci11: command tx timeout [ 663.818109][ C0] net_ratelimit: 4917 callbacks suppressed [ 663.818141][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.838330][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.853536][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.867665][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 663.881780][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 663.896451][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 663.910689][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.924400][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 663.938530][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 663.953159][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.826857][ C0] net_ratelimit: 4463 callbacks suppressed [ 668.826894][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.847491][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.861694][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.875914][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 668.890122][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 668.904745][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 668.918765][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.932896][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 668.947073][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 668.961969][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.835882][ C0] net_ratelimit: 4429 callbacks suppressed [ 673.835917][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.856432][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 673.870498][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 673.886123][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 673.900180][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.914110][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 673.927858][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 673.942554][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.956349][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.970201][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.847864][ C0] net_ratelimit: 4655 callbacks suppressed [ 678.847897][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 678.868407][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.882216][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 678.895982][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 678.911564][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.925465][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.939297][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.953380][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 678.967477][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 678.983210][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 679.264109][T19931] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 679.279565][T19931] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 679.290120][T19931] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 679.304129][T19931] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 679.319712][T19931] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 681.395981][ T5649] Bluetooth: hci1: command tx timeout [ 683.475964][ T5649] Bluetooth: hci1: command tx timeout [ 683.857653][ C0] net_ratelimit: 4485 callbacks suppressed [ 683.857689][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.878075][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.892222][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.906328][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 683.920157][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 683.935688][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 683.949798][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.963799][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 683.977914][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 683.993648][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.555913][ T5649] Bluetooth: hci1: command tx timeout [ 685.640452][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 685.650746][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.635963][ T5649] Bluetooth: hci1: command tx timeout [ 688.866208][ C0] net_ratelimit: 4476 callbacks suppressed [ 688.866245][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 688.888315][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 688.902369][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.916370][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 688.930170][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 688.945869][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.959729][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.973852][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.987971][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 689.001723][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 693.875925][ C0] net_ratelimit: 4453 callbacks suppressed [ 693.875959][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 693.896157][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 693.911601][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 693.925592][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.939172][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 693.953225][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 693.967856][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.983014][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.997128][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.011263][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:7f:b4:e8:96:db, vlan:0) [ 695.880208][ T30] INFO: task kworker/1:5:5762 blocked for more than 143 seconds. [ 695.890659][ T30] Not tainted syzkaller #0 [ 695.895631][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 695.912878][ T30] task:kworker/1:5 state:D stack:23784 pid:5762 tgid:5762 ppid:2 task_flags:0x4208060 flags:0x00080000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 695.946505][ T30] Workqueue: events drain_vmap_area_work [ 695.967500][ T30] Call Trace: [ 695.971559][ T30] [ 695.985923][ T30] __schedule+0x1821/0x5740 [ 695.991226][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 696.006555][ T30] ? __pfx___schedule+0x10/0x10 [ 696.022889][ T30] ? schedule+0x90/0x360 [ 696.062008][ T30] schedule+0x164/0x360 [ 696.108444][ T30] schedule_timeout+0xc3/0x2c0 [ 696.164186][ T30] ? irqentry_exit+0x218/0x8b0 [ 696.235001][ T30] ? trace_irq_disable+0x3b/0x140 [ 696.266526][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 696.286055][ T30] ? wait_for_completion+0x274/0x5e0 [ 696.300134][ T30] wait_for_completion+0x2cc/0x5e0 [ 696.329959][ T30] ? trace_irq_disable+0x3b/0x140 [ 696.338346][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 696.344707][ T30] ? __flush_work+0x100/0xc50 [ 696.351477][ T30] __flush_work+0xa17/0xc50 [ 696.356012][ T30] ? __flush_work+0x100/0xc50 [ 696.369519][ T30] ? __pfx___flush_work+0x10/0x10 [ 696.376817][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 696.382845][ T30] ? flush_work+0xd/0x30 [ 696.388451][ T30] __purge_vmap_area_lazy+0x876/0xb40 [ 696.394573][ T30] ? process_scheduled_works+0xa70/0x1860 [ 696.403669][ T30] drain_vmap_area_work+0x27/0x40 [ 696.409824][ T30] process_scheduled_works+0xb5d/0x1860 [ 696.417092][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 696.423787][ T30] ? assign_work+0x3d5/0x5e0 [ 696.428399][ T30] worker_thread+0xa53/0xfc0 [ 696.433212][ T30] kthread+0x389/0x470 [ 696.442650][ T30] ? __pfx_worker_thread+0x10/0x10 [ 696.448817][ T30] ? __pfx_kthread+0x10/0x10 [ 696.454018][ T30] ret_from_fork+0x514/0xb70 [ 696.462682][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 696.468874][ T30] ? __switch_to+0xc79/0x1410 [ 696.474141][ T30] ? __pfx_kthread+0x10/0x10 [ 696.481243][ T30] ret_from_fork_asm+0x1a/0x30 [ 696.486081][ T30] [ 696.490567][ T30] [ 696.490567][ T30] Showing all locks held in the system: [ 696.498293][ T30] 1 lock held by khungtaskd/30: [ 696.505162][ T30] #0: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 696.521101][ T30] 2 locks held by getty/5386: [ 696.525793][ T30] #0: ffff8880326a50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 696.538635][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 696.553208][ T30] 3 locks held by kworker/0:6/5761: [ 696.559285][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 696.573888][ T30] #1: ffffc90004c2fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 696.589910][ T30] #2: ffffffff8fdc8c80 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 696.614566][ T30] 3 locks held by kworker/1:5/5762: [ 696.621238][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 696.636452][ T30] #1: ffffc90004c3fc40 (drain_vmap_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 696.648803][ T30] #2: ffffffff8ea81100 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 696.661570][ T30] 6 locks held by kworker/0:7/5763: [ 696.666785][ T30] 3 locks held by kworker/u8:16/8661: [ 696.674456][ T30] #0: ffff888031d3d940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 696.692083][ T30] #1: ffffc9000358fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 696.716867][ T30] #2: ffffffff8fdc8c80 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 696.727972][ T30] 2 locks held by syz-executor/16895: [ 696.733359][ T30] #0: ffffffff8fdc8c80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 696.744674][ T30] #1: ffffffff8e962f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 696.758301][ T30] 3 locks held by kworker/0:5/18490: [ 696.763598][ T30] #0: ffff88813fe41d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 696.779903][ T30] #1: ffffc900054a7c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 696.793126][ T30] #2: ffffffff8fdc8c80 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xab/0x1090 [ 696.805269][ T30] 3 locks held by kworker/0:9/18492: [ 696.810573][ T30] 4 locks held by kworker/u8:4/19779: [ 696.820485][ T30] #0: ffff88801be86140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 696.833130][ T30] #1: ffffc90006fefc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 696.846200][ T30] #2: ffffffff8fdb9fa8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 696.857960][ T30] #3: ffffffff8fdc8c80 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 696.870427][ T30] 3 locks held by kworker/u8:8/19785: [ 696.875825][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 696.892387][ T30] #1: ffffc9000737fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 696.905360][ T30] #2: ffffffff8fdc8c80 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 696.914471][ T30] 1 lock held by syz.1.3573/19836: [ 696.923287][ T30] #0: ffffffff8fdc8c80 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x71e/0xde0 [ 696.936548][ T30] 1 lock held by syz.0.3577/19869: [ 696.942429][ T30] #0: ffffffff8fdc8c80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 696.951429][ T30] 1 lock held by syz.2.3579/19880: [ 696.959256][ T30] #0: ffffffff8fdc8c80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 696.970265][ T30] 1 lock held by syz-executor/19901: [ 696.979113][ T30] #0: ffffffff8fdc8c80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 696.989982][ T30] 1 lock held by syz-executor/19919: [ 696.995283][ T30] #0: ffffffff8fdc8c80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 697.010436][ T30] 1 lock held by syz-executor/19930: [ 697.017098][ T30] #0: ffffffff8fdc8c80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 697.030202][ T30] 1 lock held by syz-executor/19933: [ 697.038263][ T30] #0: ffffffff8fdc8c80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 697.049633][ T30] 1 lock held by syz-executor/19944: [ 697.055531][ T30] #0: ffffffff8fdc8c80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 697.064960][ T30] 1 lock held by syz-executor/19953: [ 697.073974][ T30] #0: ffffffff8fdc8c80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 697.089057][ T30] 1 lock held by syz-executor/19963: [ 697.099278][ T30] #0: ffffffff8fdc8c80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 697.110381][ T30] 1 lock held by dhcpcd/19970: [ 697.115702][ T30] #0: ffff888076a6b040 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 697.130961][ T30] 1 lock held by dhcpcd/19971: [ 697.137672][ T30] #0: ffff888076a6fb00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 697.151744][ T30] [ 697.154367][ T30] ============================================= [ 697.154367][ T30] [ 697.171578][ T30] NMI backtrace for cpu 1 [ 697.171598][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 697.171618][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 697.171628][ T30] Call Trace: [ 697.171635][ T30] [ 697.171643][ T30] dump_stack_lvl+0xe8/0x150 [ 697.171668][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 697.171770][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 697.171804][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 697.171836][ T30] sys_info+0x135/0x170 [ 697.171883][ T30] watchdog+0xfd3/0x1030 [ 697.171991][ T30] ? watchdog+0x1c9/0x1030 [ 697.172020][ T30] kthread+0x389/0x470 [ 697.172043][ T30] ? __pfx_watchdog+0x10/0x10 [ 697.172064][ T30] ? __pfx_kthread+0x10/0x10 [ 697.172087][ T30] ret_from_fork+0x514/0xb70 [ 697.172107][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 697.172125][ T30] ? __switch_to+0xc79/0x1410 [ 697.172152][ T30] ? __pfx_kthread+0x10/0x10 [ 697.172174][ T30] ret_from_fork_asm+0x1a/0x30 [ 697.172207][ T30] [ 697.172312][ T30] Sending NMI from CPU 1 to CPUs 0: [ 697.294896][ C0] NMI backtrace for cpu 0 [ 697.294912][ C0] CPU: 0 UID: 0 PID: 5763 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 697.294931][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 697.294943][ C0] Workqueue: events purge_vmap_node [ 697.294971][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 697.295017][ C0] Code: ff ff ff e8 31 bf 05 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 0b 5a 96 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 18 ed 91 [ 697.295031][ C0] RSP: 0018:ffffc90000006978 EFLAGS: 00000286 [ 697.295045][ C0] RAX: 6b1288ab990ea200 RBX: 0000000000000000 RCX: 0000000080000100 [ 697.295057][ C0] RDX: 000000007f45ee1d RSI: ffffffff8e2173a5 RDI: ffffffff8c28b8e0 [ 697.295069][ C0] RBP: ffffffff8176e256 R08: ffffffff8176e256 R09: ffffffff8e95cc20 [ 697.295081][ C0] R10: ffffc90000006ad8 R11: ffffffff81b0e0e0 R12: 0000000000000002 [ 697.295093][ C0] R13: ffffffff8e95cc20 R14: 0000000000000000 R15: 0000000000000246 [ 697.295104][ C0] FS: 0000000000000000(0000) GS:ffff8881252a0000(0000) knlGS:0000000000000000 [ 697.295117][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 697.295128][ C0] CR2: 000000110c2e1762 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 697.295142][ C0] Call Trace: [ 697.295148][ C0] [ 697.295154][ C0] ? kmem_cache_free+0x182/0x650 [ 697.295179][ C0] ? unwind_next_frame+0xa6/0x2550 [ 697.295197][ C0] unwind_next_frame+0xc3/0x2550 [ 697.295213][ C0] ? unwind_next_frame+0xa6/0x2550 [ 697.295235][ C0] ? unwind_next_frame+0xa6/0x2550 [ 697.295253][ C0] ? __kasan_slab_free+0x5c/0x80 [ 697.295296][ C0] ? kmem_cache_free+0x182/0x650 [ 697.295319][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 697.295348][ C0] arch_stack_walk+0x11b/0x150 [ 697.295369][ C0] ? kmem_cache_free+0x182/0x650 [ 697.295392][ C0] stack_trace_save+0xa9/0x100 [ 697.295412][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 697.295437][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 697.295454][ C0] kasan_save_track+0x3e/0x80 [ 697.295472][ C0] ? kasan_save_track+0x3e/0x80 [ 697.295492][ C0] ? kasan_save_free_info+0x46/0x50 [ 697.295508][ C0] ? __kasan_slab_free+0x5c/0x80 [ 697.295527][ C0] ? kmem_cache_free+0x182/0x650 [ 697.295570][ C0] ? skb_release_head_state+0x270/0x360 [ 697.295645][ C0] kasan_save_free_info+0x46/0x50 [ 697.295662][ C0] __kasan_slab_free+0x5c/0x80 [ 697.295684][ C0] kmem_cache_free+0x182/0x650 [ 697.295702][ C0] ? __skb_ext_put+0x221/0x2f0 [ 697.295727][ C0] skb_release_head_state+0x270/0x360 [ 697.295751][ C0] __kfree_skb+0x24/0x210 [ 697.295772][ C0] ip6_mc_input+0x8de/0xbd0 [ 697.295793][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 697.295813][ C0] ? ip6_rcv_finish+0x265/0x280 [ 697.295829][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 697.295844][ C0] ip_sabotage_in+0x1e1/0x270 [ 697.295908][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 697.295925][ C0] nf_hook_slow+0xc5/0x220 [ 697.295983][ C0] NF_HOOK+0x21f/0x3c0 [ 697.295998][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 697.296014][ C0] ? NF_HOOK+0x9e/0x3c0 [ 697.296028][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 697.296044][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 697.296062][ C0] ? netif_receive_skb+0x102/0xbf0 [ 697.296106][ C0] netif_receive_skb+0x278/0xbf0 [ 697.296124][ C0] ? NF_HOOK+0xfa/0x3a0 [ 697.296163][ C0] ? lock_acquire+0x106/0x350 [ 697.296181][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 697.296201][ C0] ? br_netif_receive_skb+0x126/0x190 [ 697.296220][ C0] NF_HOOK+0xa4/0x3a0 [ 697.296235][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 697.296252][ C0] ? NF_HOOK+0xfa/0x3a0 [ 697.296267][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 697.296310][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 697.296330][ C0] ? br_pass_frame_up+0x275/0x420 [ 697.296349][ C0] br_handle_frame_finish+0x1541/0x1c80 [ 697.296365][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 697.296394][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 697.296417][ C0] ? ip6t_do_table+0x123/0x1560 [ 697.296470][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 697.296489][ C0] ? nf_hook_slow+0x176/0x220 [ 697.296506][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 697.296522][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 697.296543][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 697.296560][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 697.296577][ C0] ? nf_nat_ipv6_in+0x203/0x2c0 [ 697.296659][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 697.296683][ C0] br_nf_pre_routing_finish_ipv6+0x91f/0xc30 [ 697.296702][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 697.296723][ C0] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 697.296742][ C0] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 697.296759][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 697.296797][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 697.296815][ C0] ? br_nf_pre_routing+0x75f/0x14c0 [ 697.296835][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 697.296850][ C0] br_handle_frame+0x1277/0x1510 [ 697.296869][ C0] ? irqentry_exit+0x218/0x8b0 [ 697.296888][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 697.296906][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 697.296924][ C0] ? __netif_receive_skb_core+0x17c0/0x3170 [ 697.296947][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 697.296963][ C0] __netif_receive_skb_core+0x98f/0x3170 [ 697.296988][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 697.297008][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 697.297027][ C0] ? ip6_rcv_finish+0x265/0x280 [ 697.297043][ C0] ? NF_HOOK+0x336/0x3c0 [ 697.297064][ C0] ? process_backlog+0x3eb/0x1950 [ 697.297111][ C0] ? process_backlog+0x3eb/0x1950 [ 697.297132][ C0] ? process_backlog+0x3eb/0x1950 [ 697.297150][ C0] ? process_backlog+0x3eb/0x1950 [ 697.297170][ C0] process_backlog+0x76d/0x1950 [ 697.297189][ C0] ? irqentry_exit+0x218/0x8b0 [ 697.297213][ C0] __napi_poll+0xae/0x340 [ 697.297231][ C0] ? skb_defer_free_flush+0x233/0x260 [ 697.297251][ C0] net_rx_action+0x627/0xf70 [ 697.297278][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 697.297303][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 697.297350][ C0] ? net_tx_action+0x5b6/0xc30 [ 697.297371][ C0] ? net_tx_action+0xbfb/0xc30 [ 697.297394][ C0] handle_softirqs+0x22a/0x840 [ 697.297410][ C0] ? __irq_exit_rcu+0xca/0x220 [ 697.297430][ C0] __irq_exit_rcu+0xca/0x220 [ 697.297445][ C0] irq_exit_rcu+0x9/0x30 [ 697.297460][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 697.297511][ C0] [ 697.297517][ C0] [ 697.297523][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 697.297556][ C0] RIP: 0010:__get_pfnblock_flags_mask+0x13d/0x210 [ 697.297576][ C0] Code: 00 8a 49 9a 48 c1 e8 03 80 3c 18 00 74 0c 48 c7 c7 00 8a 49 9a e8 63 c5 0e 00 48 8b 05 2c 40 27 18 48 85 c0 74 2e 4e 8d 3c f8 <4c> 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 3e c5 0e 00 4d [ 697.297590][ C0] RSP: 0018:ffffc90004c4f728 EFLAGS: 00000286 [ 697.297603][ C0] RAX: ffff88823ffe3000 RBX: dffffc0000000000 RCX: dffffc0000000000 [ 697.297616][ C0] RDX: 0000000000000017 RSI: 0000000000029532 RDI: ffffea0000a54c80 [ 697.297627][ C0] RBP: 0000000000100000 R08: dffffc0000000000 R09: 0000000000000000 [ 697.297637][ C0] R10: ffffed10052a6400 R11: fffffbfff206069f R12: 0000000000000005 [ 697.297649][ C0] R13: 0000000000000017 R14: 0000000000029532 R15: ffff88823ffe3000 [ 697.297670][ C0] __free_frozen_pages+0x69f/0xd30 [ 697.297694][ C0] ? ___free_pages+0x9a/0x1b0 [ 697.297710][ C0] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 697.297731][ C0] __apply_to_page_range+0xbdc/0x1420 [ 697.297762][ C0] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 697.297785][ C0] ? __pfx___apply_to_page_range+0x10/0x10 [ 697.297808][ C0] __kasan_release_vmalloc+0xa2/0xd0 [ 697.297828][ C0] purge_vmap_node+0x220/0x960 [ 697.297855][ C0] ? process_scheduled_works+0xa70/0x1860 [ 697.297871][ C0] ? process_scheduled_works+0xa70/0x1860 [ 697.297887][ C0] ? __pfx_purge_vmap_node+0x10/0x10 [ 697.297909][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 697.297930][ C0] ? process_scheduled_works+0xa70/0x1860 [ 697.297946][ C0] ? process_scheduled_works+0xa70/0x1860 [ 697.297962][ C0] process_scheduled_works+0xb5d/0x1860 [ 697.297993][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 697.298012][ C0] ? assign_work+0x3d5/0x5e0 [ 697.298029][ C0] worker_thread+0xa53/0xfc0 [ 697.298058][ C0] kthread+0x389/0x470 [ 697.298077][ C0] ? __pfx_worker_thread+0x10/0x10 [ 697.298092][ C0] ? __pfx_kthread+0x10/0x10 [ 697.298111][ C0] ret_from_fork+0x514/0xb70 [ 697.298128][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 697.298145][ C0] ? __switch_to+0xc79/0x1410 [ 697.298166][ C0] ? __pfx_kthread+0x10/0x10 [ 697.298185][ C0] ret_from_fork_asm+0x1a/0x30 [ 697.298211][ C0] [ 698.235348][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 698.242245][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 698.251354][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 698.261834][ T30] Call Trace: [ 698.265105][ T30] [ 698.268035][ T30] vpanic+0x56c/0xa60 [ 698.272021][ T30] ? __pfx___schedule+0x10/0x10 [ 698.276886][ T30] ? __pfx_vpanic+0x10/0x10 [ 698.281412][ T30] ? irqentry_exit+0x218/0x8b0 [ 698.286177][ T30] panic+0xc5/0xd0 [ 698.289896][ T30] ? __pfx_panic+0x10/0x10 [ 698.294328][ T30] ? __pfx_panic+0x10/0x10 [ 698.298773][ T30] watchdog+0x102c/0x1030 [ 698.303128][ T30] ? watchdog+0x1c9/0x1030 [ 698.307565][ T30] kthread+0x389/0x470 [ 698.311661][ T30] ? __pfx_watchdog+0x10/0x10 [ 698.316345][ T30] ? __pfx_kthread+0x10/0x10 [ 698.320946][ T30] ret_from_fork+0x514/0xb70 [ 698.325545][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 698.330661][ T30] ? __switch_to+0xc79/0x1410 [ 698.335361][ T30] ? __pfx_kthread+0x10/0x10 [ 698.339963][ T30] ret_from_fork_asm+0x1a/0x30 [ 698.344750][ T30] [ 698.348054][ T30] Kernel Offset: disabled [ 698.352376][ T30] Rebooting in 86400 seconds..