last executing test programs: 8.183998051s ago: executing program 2 (id=2141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) unshare(0x28000600) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x100040d4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9ff05760a03076804268c989e14", 0x0, 0x10503, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 7.69102358s ago: executing program 3 (id=2145): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x4, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1f1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000500)="de21cff472aa580c2ee9f8", 0xb}, {&(0x7f0000000540)="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", 0xdea}, {0x0}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) unshare(0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4000}, 0x18) close(0x4) 7.01784308s ago: executing program 2 (id=2147): unshare(0x8040480) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x8000000b}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x804) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000500)='A', 0x1}], 0x1}}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000003c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)}, 0x20) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffffaf5a00000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200), 0xfffffffffffffef6}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r6, &(0x7f0000000500), 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000080)=r8, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r11], 0x20}}, 0x4084) shutdown(r9, 0x0) 6.440131786s ago: executing program 4 (id=2150): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff00000000850000000600000095000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) socket$alg(0x26, 0x5, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)={0x80000043, 0x0, 0x0, 0x3}, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 6.206688047s ago: executing program 4 (id=2152): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x5c, 0x9, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x18}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, 0xb, 0x6, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44) getuid() r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x24000800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000003060300000000000000000001000007090002fc73797a31000000000500010007039b923a"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x28880) 5.989289203s ago: executing program 1 (id=2153): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x5c, 0x9, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x18}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x48, 0xb, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x18}]}]}, 0x48}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44) getuid() r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x24000800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000003060300000000000000000001000007090002fc73797a31000000000500010007039b923a"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x28880) 5.939028539s ago: executing program 3 (id=2154): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000002c0)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="05000000010000", 0x7) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}, 0x2000) recvfrom$unix(r0, &(0x7f00000002c0)=""/199, 0xc7, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x1c, 0x0, 0x0, 0x80000001, 0xb3, &(0x7f000000cf3d)=""/179, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x6}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000980)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0xe9, &(0x7f0000000780)=""/233, 0x0, 0xc}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FSGEOMETRY_V4(r6, 0x8070587c, &(0x7f0000000600)) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x2f, 0xa0005, 0x6f}, 0x2c) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5.82615988s ago: executing program 4 (id=2155): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x40000) unshare(0x6a040000) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, 0x0, 0x4094) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto(r2, 0x0, 0x0, 0xc0, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x11, 0x0}}, 0x3, 0x2, 0x3, 0x2}}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x8095) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x1, @empty, 0xee}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000580)={0x0, 0x3ff}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) listen(r3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000000406030000000000000000000200000105000100070000000500010007000000e4457b6c2de0dde8110efdf8601dc31108b4baf79cf130aced039f84b4c5f71801e337aaa2313fed8105537cd8783e15d65cb57ecde4de23d2bdf6fa91d7e34f9d687aa483251a206d30fc1341c59f49f80ebfecb264e73655c1600620cb97c4d8bf4f25a9aa802be9778ebf3f5abaa555fcd7d977e1c0a0c736dba33d1e2e5d4ab5f3983b6c04cf4edd2d614d50578c5e81056de8241d96a0f0a5df96e9cd14672e119adeb176810e66ab0d5342b0256bb5ec3d2bad3fafac9ec618d891df1103712c84a3856b54727c32c8aa2fde5eea71b3e3c868f43ba50780aa36d3854345bdec117040cf14ce4a04aeaf13feb634dc78e0561ce8daf9ed97afcc081f9f68bd2e8364c61056ab9607e1f25aafae6dab1c4881a4ffee7a9cca93eae27efc"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8041) recvfrom(r5, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) 5.684075409s ago: executing program 2 (id=2156): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000380)="4e813cbfba79", 0x6, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000014c0)='dctcp', 0xfc56) shutdown(r1, 0x1) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=0x1000) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003780)=[{0x0, 0x0, &(0x7f0000001a80), 0x0, 0x0, 0x0, 0x200008c0}], 0x1, 0x44840) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)}, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000020303000000000000000011000000100800010001"], 0x1c}}, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004004}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x4040004) ioctl$XFS_IOC_INUMBERS(r2, 0x80405880, &(0x7f0000000100)={{0xfffffffeffffffff, 0x7, 0x9, 0x6, 0x10000}, [{0x80, 0x4, 0xa, 0xc}, {0x9, 0x7fffffff, 0x6, 0x8}]}) recvfrom$packet(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) 5.289654712s ago: executing program 0 (id=2157): openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680), 0x0, 0x20004855) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000100)=0x99, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000002c0)={0x3, 'veth0_vlan\x00', {0x4}, 0x100}) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) readv(r3, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/50, 0x32}], 0x1) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000440)={&(0x7f0000000340)=[{0x6, 0xe9c, 0x0, 0xa746, 0x2}, {0x7ff, 0x7, 0xe5, 0x1, 0x4}, {0x1ff, 0x2, 0x9, 0x7ff, 0x54d}, {0xffffffffffff57b5, 0xe7fe, 0x46fb, 0x769, 0x4}], 0x4, 0x28, 0x5, 0xaeb9}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x1, 0x0, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r6, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) connect$can_bcm(r3, &(0x7f0000000700)={0x1d, r7}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40082}, 0x8000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000203050000000000000000000200000008000340000003ff0900020047628c67be"], 0x28}, 0x1, 0x0, 0x0, 0x40049d1}, 0x0) r10 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@loopback, 0x4e23, 0x10000, 0x1c8, 0x12d61, 0x6}}, 0x44) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5.255176677s ago: executing program 1 (id=2158): socket$rds(0x15, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}}, 0x40090) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x40800) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x36, 0x301, 0x70bd25, 0xfffffffc, {0x3}}, 0x14}}, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x87, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@loopback, 0x0, 0x5, 0x0, 0x0, 0xa, 0x70, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xffb, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x7f15fe41, 0xa04, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x4c009}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x45, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x70bd2b, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x58, 0x1, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @local}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008890}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.862380511s ago: executing program 4 (id=2159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000000806010100b7000000000000020000020500010007000000090002"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8900) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "dce02de9d7bd466b", "72e64b3892060025848c9f40363cf916", "000400", "e2b768b4bb9e0d9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="02000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x4800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) close(0xffffffffffffffff) socket(0x28, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x11, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) socket(0x28, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 4.534442312s ago: executing program 2 (id=2160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000098", 0x24) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "8a0d98976fa77c52154820c0bade20c6cc80e4d6896979f863007b9caf4e0fee", "cb3c292d34c34ace42f5a7d38a8da2838809a1a8d73bf14ff8bff111c7afbd81", "f7c893d41751a78a5431f9f71ecec3e8a3c2e552d432efb39a2f1ca28b1f91df", "31e10dc5b71519bfa16623871e1af24fd6e471ab0d203770f70bad15c7f6bb0a", "cf61dc6f215ca0b22abd5c938b2acff2ed2dc6f6851f9fe77fb382ae8bd5fbb6", "7b8601e788761d2872fdd753", 0x3, 0x6, 0x3, 0x5, 0x101}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4000800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r7, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xe, 0x9}, {0x0, 0x9}, {0xf, 0x16}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88be}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4009}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8084) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="aa00000000000000000020e50000001000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x9, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000040)=r11, 0x4) sendmsg$NFT_MSG_GETSET(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000880)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20008044}, 0x40) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r12, 0x1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x14, &(0x7f0000000280)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xd, 0x3, 0x0, 0x4}, @ldst={0x0, 0x1, 0x0, 0xa, 0x5, 0xffffffffffffffe0, 0x8}], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 4.465476239s ago: executing program 1 (id=2161): r0 = socket$inet6(0xa, 0x1, 0x84) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffb}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000240)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x2) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x11, 0x200000000000002, 0x300) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = socket$netlink(0x10, 0x3, 0x13) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004680), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r11, &(0x7f00000052c0)={0x0, 0x0, &(0x7f0000005280)={&(0x7f0000005100)={0x20, r10, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40008d6}, 0x840) sendmsg$NL80211_CMD_SET_WDS_PEER(r9, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24008001}, 0xc040) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x28, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, &(0x7f0000001240)=0x1) bind$rds(r6, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x3}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x12}}], 0x48}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f00000001c0)=""/4128, &(0x7f0000000180)=0x1020) 4.389000012s ago: executing program 3 (id=2162): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05f858a60aa00000ffffffe60000", @ANYRES32=0x0, @ANYBLOB="0a003400020202020202000014002a0075080000050002002d001001de1001090800350007000000080026006c090000"], 0x4c}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000080)=0xb1, 0x4) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e5f, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB="b8a9fe0043b6b014810308021100000008021100000147ff4daa0a004201a09a26066482308ccda13e000948f3fbb63abba0c89d0406e913715a1485954815641c49622857b5d5e3d0d207852e397a3f6751e31e8138f039e0a18ea01b54100e19d7aa52e7e1a4fc6a097f5f70d4f9fc2f23eac01d28bd17f75b720e0cfcffcc5c3999db279c4815ce7e5c5363180fdfc2d7d6c909775c6a413445eb112b1dc4b2a6cb34afdfe00a227fe749c3b10eceb50791bc7718fb0925e2e87ab094935d8e2d5c6368aecf1ad547b33e875ed8e795a1df097381b4ac5d34b2534f1a04bae13e20daf554a7bd0e3ea72b259d0d80c236240122a21b1a69ea95390e7c561d3320c193cd81f03c4c2324f6d0bc5ea9325b27ee07c8eea036e1d51dd1bdfced690918e0f3823c388a2caf651b0e50c34fb250bb63f45f79de6636a818ba80634dae8a2801af75b2301b2eea868f2feddb85d8babdb1e880732e212d281c028d71490fc229c720af9d9d8841bc1aaa105c33982c5893fff416d35904b06efad2b56f85d6db1fcf806858f303b4fea6a06a5bacd20e22609cf4004f2da22e9f43e0a465dd574b0c0bf8b00f1cad26f9ea26a464991c4ecb854363cde0bccb272a57bf1986c4afcb67996b598f7d91cbb863717000a0b8d140820e61212e40e5c5a09f045a77027a5f3f8bb5536c6297e3b03b5e6062267b7be8868eef680ed74d19911d0f82782ddea9c08e5960a69c0d5259d82fb81dc35967fcaa49080c02c7723d33e2ead76d07c968b9cfc372866aa85dbd4ae5676059761b9eb7d27c869cae4286930b0e2bde34f9837f54efab347ad090798573fd36b087a10f14eeeaf86cbf4a32d5abaf46c8470a6823f217e9ae1c9dce9c3cd3735cb5d116c0b6c8b826353ef51f1c4d0066a9b6737e0d8addc53341da7dde884cc963c2eacd6865bf37b52c7ed9935099173467a011c1afd8331a84066cf766611c06c9e7c6ff0ddb8f230e6d197cbe9f7f3f93f0ca7de850e76eb774f9d3bbc76665c7932959b86700783fef5df41bea5061d138f7f7495d210be0389f6313a67c033e5b1ea01176c4ba5ddd47acea2c89b73b96812586ef4823b700f7fd28c171064ebbb6c40e4add6c2f20e2f7a422324f924c28117f837b1f9a68"], 0x339) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xe}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x21, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r3, &(0x7f0000002d80)={&(0x7f0000000b00)=@can, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/13, 0xd}, {&(0x7f0000002ac0)=""/45, 0x2d}, {&(0x7f0000002b00)=""/104, 0x68}, {&(0x7f0000002b80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/113, 0x71}], 0x6, &(0x7f0000002d40)}, 0x40000002) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x256, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) recvmmsg$unix(r3, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000280)={0x77359400}) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000003c0)={r4, 0xcb}, 0x8) nanosleep(&(0x7f0000000b80), &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000080211000001080a11000000080211000000200000000000010001078284960c1218"], 0x27) 4.202502807s ago: executing program 0 (id=2163): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000002000000000000070000000003000000000000080100000000000000000000020200000000002e2e"], 0x0, 0x44}, 0x28) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x43, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000640)={'syz_tun\x00', &(0x7f00000003c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x33f, 0x8, 0x800, 0x8, 0x2, 0x0, 0xfffffff3, 0xd00b, 0x8, 0x8, 0xe, 0x1ef, 0xa3, 0x7, 0x1, 0x7ff, 0x9, 0x401, 0x1, 0x2, 0x2, 0x3b0, 0x2b, 0xfffffffa, 0x9, 0x401, 0xfffffffc, 0x4, 0x10a, 0x2, 0x7, 0x9, 0x5, 0x3, 0xf0c3, 0x6, 0x98, 0x5, 0xfffff552, 0x6, 0x1, 0x1, 0xfe, 0x9, 0xd, 0x4, 0x9, 0xa5, 0xfffffffc, 0x7, 0x6, 0x5, 0x1ff, 0x8, 0x8e, 0x0, 0x69, 0x8, 0x4, 0x400, 0x1, 0x5, 0x200, 0xcdd, 0xa, 0x3, 0x7, 0x4, 0x9, 0x7, 0x2, 0x8, 0x2, 0xbd90, 0x49, 0x400, 0x2, 0x2, 0xe7d6, 0x6, 0x8, 0x379274d8, 0x10001, 0xf, 0x1, 0x4, 0x2, 0x401, 0x2, 0x7fff, 0x1, 0x101, 0x800, 0xf3, 0xfffffda3, 0x9, 0x1, 0x463, 0xd, 0x0, 0xd738, 0xb6f6, 0x5, 0xd7, 0x0, 0x1, 0xb, 0x9, 0x8, 0xe, 0x0, 0xfffffffe, 0x8, 0x4, 0x80, 0x7fffffff, 0x1, 0x3, 0x1, 0x8001, 0x2b, 0x45a, 0x8, 0xe5, 0xffffffff, 0xa, 0x0, 0x5], "a40983393cb9cc4b3cdbdca5031744e481359fde83e3f0bf2e30c5b0e66325a528e19147533b148bd785033dc4e8a20c5450a30d19408b4edf20ff9641e69b08e8cc982601f30392622ef56bfd9bed"}}) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a00007000ffdbdf258020000afe090000001e0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x100) socket$inet6(0xa, 0x6, 0x76) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'geneve0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r7, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xc2) 3.558724482s ago: executing program 0 (id=2164): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000500)=0xf338cc85023ba7e3) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r2, 0x400000000000003a, 0x1, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000b00)={0x0, 0x3ff}, &(0x7f0000000b40)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b80)={0x0, 0xf, 0x1, [0x2]}, &(0x7f0000000bc0)=0xa) sendmsg$inet_sctp(r5, &(0x7f0000000d00)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x12}, 0x48c}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000900)="6d5e28986860c786ab4541e2eb09a125b1256d6f744582da616d916c0b1e372353291cb342b5d9843a943a426bf4ab8e303fd4dcacb7f3ff7059675d01a0413151980a55f6b50c3c346066af294415b9f04f63a6a940aec3742ee57796fef3cc3a60313d8f82d78448997524c371ba84ab1172c8392a547609ce1c16dfd676d97ecf2fe5c755ae19", 0x88}, {&(0x7f00000009c0)="74c87af8605745aa9aa10a3c776bb6f321ac23fc902a7454dcf2635ccff92710fc111ae2ee742da4d79110fb3e93", 0x2e}, {&(0x7f0000000a00)="9165d8a64a6b37a53e0570065bbb3d1c7bf6dce2534b", 0x16}, {&(0x7f0000000a40)="6bd9d9d149724928e728d05cfc24c1c5804e3cca1bf8ce7b4b376d05385d775a5770f88e6e8bfba2424f6e9a12bf5ddfde19ae2096144eec0fa1a6cad5c6086e58cda956142594a4a26c19b42c5421c7426f83", 0x53}], 0x4, &(0x7f0000000c00)=[@init={0x18, 0x84, 0x0, {0x1, 0x3ff, 0x401, 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x4}}, @sndrcv={0x30, 0x84, 0x1, {0x6f, 0x3913, 0x5, 0x81, 0x1, 0x5, 0x7, 0x6, r6}}, @sndrcv={0x30, 0x84, 0x1, {0x40, 0x3, 0x1, 0x40, 0xfffff001, 0x5, 0x6, 0x8, r7}}, @init={0x18, 0x84, 0x0, {0x1, 0x2, 0x3, 0x2}}], 0xc8, 0x22040005}, 0x840) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4c081) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xfffffffd, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x800) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r9, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="e50100010024d68736192d", @ANYBLOB="80d425bd7000fddbdf2506000000050030000100000008003b0061f30000"], 0x24}, 0x1, 0x0, 0x0, 0x400c1}, 0x20040044) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x30, r12, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.475941037s ago: executing program 1 (id=2165): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff0000", @ANYRES64=r0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000002900)=r5, 0x4) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="240012800b000100627269646765"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 3.346062003s ago: executing program 4 (id=2166): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @private=0xa010101}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=0x0, @ANYRES8=r3, @ANYRES8, @ANYRESHEX=r1], 0x33) sendfile(r4, r3, 0x0, 0x10000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x44, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x20000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r9, 0xc010f508, 0x0) connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r9, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r9, 0x1) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="00b0b3", @ANYRES16=r10, @ANYBLOB="08002abd7000fcdbdf25620000000600b300020000000600b300000000000600b400950f00000600b300000000000600b400a30600000600b400640f00000600b4005d080000"], 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x0) socket$unix(0x1, 0x5, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 3.304053907s ago: executing program 2 (id=2167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10002, 0x800, 0xffffffffffffffff, 0x4}, 0x50) close(0xffffffffffffffff) close(0x3) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x6, 0x104}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r7, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40010) syz_emit_ethernet(0x3b6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) 2.666165637s ago: executing program 3 (id=2168): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x5c, 0x9, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x18}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x48, 0xb, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x18}]}]}, 0x48}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44) getuid() r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x24000800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000003060300000000000000000001000007090002fc73797a31000000000500010007039b923a"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x28880) 2.469616568s ago: executing program 4 (id=2169): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x40000) unshare(0x6a040000) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, 0x0, 0x4094) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto(r2, 0x0, 0x0, 0xc0, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x11, 0x0}}, 0x3, 0x2, 0x3, 0x2}}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x2a, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x8095) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x1, @empty, 0xee}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000580)={0x0, 0x3ff}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) listen(r3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8041) recvfrom(r5, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) 2.321560123s ago: executing program 2 (id=2170): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0xfffffffffffffd3f}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@migrate={0x138, 0x21, 0x1, 0x70bd2d, 0x0, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}}, [@migrate={0xe8, 0x11, [{@in=@empty, @in=@broadcast, @in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@empty, @in6=@remote, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x1a}}, {@in=@empty, @in=@private, @in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}]}, 0x138}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r10, 0x29, 0x4, 0xfffffffffffffffd, &(0x7f00000000c0)=0xfffffecb) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r12) sendmsg$NET_DM_CMD_START(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r13, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r12) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.286573443s ago: executing program 0 (id=2171): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9ff05760a03076804268c989e14", 0x0, 0x10503, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 2.127158949s ago: executing program 3 (id=2172): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xd9, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a80)={r1, 0x18, "132bf2b2631e4a669e5ab545f4df3af85ad7e43ec2b12936"}, &(0x7f0000000180)=0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r2, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f00000006c0)}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000740)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000ac0)={0x12, 0x3, {0x2, @struct={0x7ff, 0xc2e7}, 0x0, 0x0, 0x100000001, 0x5, 0x7, 0x2, 0x10, @usage=0x3, 0x32, 0x30000000, [0x4, 0x10, 0x54, 0x6, 0x9, 0x3]}, {0x8000, @struct={0x6, 0x2}, 0x0, 0x1, 0xf335, 0x9, 0x3, 0x4, 0x10, @struct={0x800, 0x38}, 0x4, 0xe2c1, [0x1, 0x8001, 0x4, 0x9, 0x3beb, 0xfffffffffffffff7]}, {0x8000000000000000, @usage=0x7ff, 0x0, 0x8, 0x8, 0x3, 0xe, 0xffff, 0x92, @struct={0x10000, 0x4f8}, 0x1, 0x800, [0x8000000000000001, 0x1800, 0xfffffffffffffffc, 0x9, 0x1, 0xfffffffffffffff6]}, {0x3, 0x2, 0x8681}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000002380)={{r3}, r5, 0xa, @unused=[0x9, 0x8, 0x0, 0x5], @devid=r6}) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 1.99831002s ago: executing program 0 (id=2173): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000) unshare(0x6a040000) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, 0x0, 0x4094) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto(r1, 0x0, 0x0, 0xc0, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x11, 0x0}}, 0x3, 0x2, 0x3, 0x2}}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x2a, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x8095) bind$inet6(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000580)={0x0, 0x3ff}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) listen(r2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8041) recvfrom(r4, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) 1.942413765s ago: executing program 1 (id=2174): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000002c0)={0x0}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r1, 0xa2, 0x1f86}, &(0x7f00000003c0)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100001ff01bd7000000000", @ANYRES32=0x0], 0x58}}, 0x22000090) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x28, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffbf00c}, {0x6, 0x0, 0xb, 0x63552b74}]}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$netlink(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0), 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r4) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={0x0, 0x94}, 0x1, 0x0, 0x0, 0x8010}, 0x24000000) syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000815) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x2, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x2710}) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="8000", @ANYRESHEX, @ANYBLOB="0100fcffffff00000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008e0001000000080001007063690011000200303030303a30303a31302e300089e88710a8dd5aff325f64726f70730000000005008300010000002a760a7c8f1c8e97806fca2fd638671afe0ca992a3699c13a4ff55b5acef096e7fead513ad634e3cc59ce29b54f1c656accc8d7ed8df3f8f2c3fb76321815781d335a8cb86fe7673408d9119c8e7cd9bce753589eeaca24cc5990c852aa24bf5c6761ff72bfd49dd535aa5eee034feb9734f00f302db9ee76161710e172bad209a962acc5190a321c0176769d11312e43ffced84a2a919a2f11122345ef39734e348478d2507b96c4dc4a11c701bc61ea354c3b13117ee68936dc52dda7788e2b556e27e2e03470fb697e00c034602977579fe0cf3d82bf835fbf5f88298f661985cb20103f0ae786f09f7bb950ff37c1dfcd006d107e411a04621efe16aaa7de54b8dca445e04b7fb754f756316fcb4e6386d8271d1e328a3c9609cf2be472f478546432b1a1511bd8611e82e6671a873c8a15bb25656474bd00d223605673fad3751b7b1ad78112111"], 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x32}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x9b}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xe976e0ab393ca9ac}, 0x4040) 790.532989ms ago: executing program 1 (id=2175): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0xc}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x8000000, 0x2, 0x0, 0x1, 0x2009, 0xb}, 0x20) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x107, 0x1, &(0x7f00000001c0), 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x34, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000051) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000140), 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x4, 0x34, 0x9, 0xe95, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x7, 0x0, 0xfffffffe}}) 507.091897ms ago: executing program 3 (id=2176): socket(0x27, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000600)={0xfffe, 0xb000}, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x9) write(r2, &(0x7f0000000380)='f', 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="d7f9e9c3c85efc7beeae72576320", @ANYRESDEC], 0x5d) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001", @ANYRES16=r4], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x1000000, 0x8}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, 0x0, &(0x7f00000002c0)) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010000108000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="900000000008000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4000880) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf2501000000080008"], 0x1c}}, 0x4000) ioctl$XFS_IOC_START_COMMIT(r9, 0x80585882, &(0x7f0000000580)={0xffffffffffffffff}) ioctl$sock_bt_hci(r10, 0x400448dc, &(0x7f0000000340)="095cf21e97f5163e4e7e179295bcb11bfbbdd30cb1698bd4a92b74f8741d87613037533b8e5893e8e9a86388b35d6024002200fc48c1796bae") 0s ago: executing program 0 (id=2177): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x40000) unshare(0x6a040000) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, 0x0, 0x4094) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto(r2, 0x0, 0x0, 0xc0, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x11, 0x0}}, 0x3, 0x2, 0x3, 0x2}}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x2a, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8095) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x1, @empty, 0xee}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000580)={0x0, 0x3ff}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) listen(r3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000000406030000000000000000000200000105000100070000000500010007000000e4457b6c2de0dde8110efdf8601dc31108b4baf79cf130aced039f84b4c5f71801e337aaa2313fed8105537cd8783e15d65cb57ecde4de23d2bdf6fa91d7e34f9d687aa483251a206d30fc1341c59f49f80ebfecb264e73655c1600620cb97c4d8bf4f25a9aa802be9778ebf3f5abaa555fcd7d977e1c0a0c736dba33d1e2e5d4ab5f3983b6c04cf4edd2d614d50578c5e81056de8241d96a0f0a5df96e9cd14672e119adeb176810e66ab0d5342b0256bb5ec3d2bad3fafac9ec618d891df1103712c84a3856b54727c32c8aa2fde5eea71b3e3c868f43ba50780aa36d3854345bdec117040cf14ce4a04aeaf13feb634dc78e0561ce8daf9ed97afcc081f9f68bd2e8364c61056ab9607e1f25aafae6dab1c4881a4ffee7a9cca93eae27efc"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8041) recvfrom(r5, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) kernel console output (not intermixed with test programs): ew maximum fragment MTU (-320) [ 141.762462][ T7149] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.962232][ T7159] nbd0: detected capacity change from 0 to 127 [ 142.039045][ T4938] block nbd0: Receive control failed (result -104) [ 142.058119][ T7164] netlink: 'syz.1.226': attribute type 6 has an invalid length. [ 142.874561][ T7183] netlink: 68 bytes leftover after parsing attributes in process `syz.0.231'. [ 143.651440][ T7194] netlink: 'syz.2.232': attribute type 1 has an invalid length. [ 144.159194][ T7194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.501727][ T7222] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 145.080940][ T7240] lo speed is unknown, defaulting to 1000 [ 145.199343][ T7235] team0: left allmulticast mode [ 145.204409][ T7235] team_slave_0: left allmulticast mode [ 145.211287][ T7235] team_slave_1: left allmulticast mode [ 145.217018][ T7235] team0: left promiscuous mode [ 145.224698][ T7235] team_slave_0: left promiscuous mode [ 145.237404][ T7235] team_slave_1: left promiscuous mode [ 145.248705][ T7235] bridge0: port 3(team0) entered disabled state [ 145.303773][ T1184] block nbd0: Connection timed out, retrying (0/1 alive) [ 145.314010][ T1184] block nbd0: Connection timed out, retrying (0/1 alive) [ 145.321496][ T1184] block nbd0: Connection timed out, retrying (0/1 alive) [ 145.329672][ T1184] block nbd0: Connection timed out, retrying (0/1 alive) [ 145.338515][ T1184] block nbd0: Dead connection, failed to find a fallback [ 145.347040][ T1184] block nbd0: shutting down sockets [ 145.354307][ T1184] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.366402][ T1184] Buffer I/O error on dev nbd0, logical block 3, async page read [ 145.374469][ T1184] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.384324][ T1184] Buffer I/O error on dev nbd0, logical block 2, async page read [ 145.392402][ T1184] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.402338][ T1184] Buffer I/O error on dev nbd0, logical block 1, async page read [ 145.410443][ T1184] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.421216][ T1184] Buffer I/O error on dev nbd0, logical block 0, async page read [ 145.430122][ T1184] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 145.441212][ T1184] Buffer I/O error on dev nbd0, logical block 0, async page read [ 145.449223][ T1184] Buffer I/O error on dev nbd0, logical block 1, async page read [ 145.457960][ T1184] Buffer I/O error on dev nbd0, logical block 2, async page read [ 145.467043][ T1184] Buffer I/O error on dev nbd0, logical block 3, async page read [ 145.475963][ T1184] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 145.485650][ T1184] Buffer I/O error on dev nbd0, logical block 0, async page read [ 145.493894][ T1184] Buffer I/O error on dev nbd0, logical block 1, async page read [ 145.502025][ T1184] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 145.512460][ T1184] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 145.522788][ T1184] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 145.532611][ T1184] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 145.546450][ T5624] ldm_validate_partition_table(): Disk read failed. [ 145.559931][ T5624] Dev nbd0: unable to read RDB block 0 [ 145.571372][ T5624] nbd0: unable to read partition table [ 145.593062][ T5624] ldm_validate_partition_table(): Disk read failed. [ 145.607671][ T5624] Dev nbd0: unable to read RDB block 0 [ 145.627613][ T5624] nbd0: unable to read partition table [ 145.717758][ T7235] bridge_slave_0: left allmulticast mode [ 145.731703][ T7235] bridge_slave_0: left promiscuous mode [ 145.767325][ T7235] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.841365][ T7235] bridge_slave_1: left allmulticast mode [ 145.856979][ T7235] bridge_slave_1: left promiscuous mode [ 145.917611][ T7235] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.085443][ T7235] bond0: (slave bond_slave_0): Releasing backup interface [ 146.151915][ T7235] bond0: (slave bond_slave_1): Releasing backup interface [ 146.256284][ T7235] team0: Port device team_slave_0 removed [ 146.332707][ T7235] team0: Port device team_slave_1 removed [ 146.380146][ T7235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.406683][ T7272] netlink: 68 bytes leftover after parsing attributes in process `syz.0.244'. [ 146.418722][ T7235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.463089][ T7235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.483969][ T7235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.552242][ T7279] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.559611][ T7279] IPv6: NLM_F_CREATE should be set when creating new route [ 148.663901][ T7321] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 148.731647][ T7321] veth1_vlan: left promiscuous mode [ 148.766722][ T7321] veth0_vlan: left promiscuous mode [ 148.837890][ T7321] veth0_vlan: entered promiscuous mode [ 148.897288][ T7321] veth1_vlan: entered promiscuous mode [ 149.270807][ T7321] veth1_macvtap: left promiscuous mode [ 149.451555][ T7321] veth0_macvtap: entered promiscuous mode [ 149.551546][ T7321] veth1_macvtap: entered promiscuous mode [ 149.632372][ T7321] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 149.665226][ T7321] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 149.695188][ T7321] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 149.732384][ T7321] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 149.762203][ T7321] net_ratelimit: 11 callbacks suppressed [ 149.762241][ T7321] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 149.949441][ T7341] bridge1: entered promiscuous mode [ 149.973394][ T7341] bridge1: entered allmulticast mode [ 150.039716][ T6211] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.097059][ T6217] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.139978][ T6217] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.200320][ T6211] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.282184][ T7374] syzkaller0: entered promiscuous mode [ 150.331012][ T7374] syzkaller0: entered allmulticast mode [ 150.349290][ T7384] block nbd1: server does not support multiple connections per device. [ 150.364933][ T7384] block nbd1: shutting down sockets [ 150.923510][ T7399] sch_tbf: burst 4 is lower than device lo mtu (18) ! [ 151.286001][ T7402] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 151.616038][ T7402] bond1 (unregistering): Released all slaves [ 152.537328][ T7417] syzkaller0: entered promiscuous mode [ 152.557736][ T7417] syzkaller0: entered allmulticast mode [ 152.730372][ T7445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.266'. [ 155.116393][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 155.139704][ T7447] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 155.190187][ T7463] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 155.257813][ T7463] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 155.309834][ T7457] lo speed is unknown, defaulting to 1000 [ 155.324781][ T7463] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 155.394107][ T7471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.272'. [ 155.553148][ T7471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.272'. [ 155.767281][ T7478] team_slave_1: Caught tx_queue_len zero misconfig [ 156.358274][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.276'. [ 156.418225][ T7489] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 156.549675][ T7501] netlink: 64 bytes leftover after parsing attributes in process `syz.0.278'. [ 156.600787][ T7489] bond2 (unregistering): Released all slaves [ 156.687348][ T7492] hsr_slave_1 (unregistering): left promiscuous mode [ 157.389186][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'. [ 157.418429][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'. [ 157.445840][ T7525] netlink: 200 bytes leftover after parsing attributes in process `syz.2.281'. [ 157.487229][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.281'. [ 157.777577][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'. [ 158.320566][ T7546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.287'. [ 158.386346][ T7540] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 158.493045][ T7557] netlink: 24 bytes leftover after parsing attributes in process `syz.4.287'. [ 158.635133][ T7562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.288'. [ 158.762004][ T7543] lo speed is unknown, defaulting to 1000 [ 158.838896][ T7566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.288'. [ 159.041495][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.289'. [ 159.825848][ T7589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.293'. [ 159.921600][ T7589] netlink: 16 bytes leftover after parsing attributes in process `syz.2.293'. [ 160.670794][ T7609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.874572][ T7609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.043186][ T7621] netlink: 24 bytes leftover after parsing attributes in process `syz.2.300'. [ 161.088744][ T7617] block nbd3: not configured, cannot reconfigure [ 161.200056][ T7621] netlink: 24 bytes leftover after parsing attributes in process `syz.2.300'. [ 161.491718][ T7635] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 162.070513][ T7639] syzkaller0: entered promiscuous mode [ 162.076134][ T7639] syzkaller0: entered allmulticast mode [ 163.110227][ T7670] syzkaller0: entered promiscuous mode [ 163.155565][ T7670] syzkaller0: entered allmulticast mode [ 163.951409][ T7683] __nla_validate_parse: 3 callbacks suppressed [ 163.951430][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'. [ 163.974646][ T7686] netlink: 68 bytes leftover after parsing attributes in process `syz.2.312'. [ 164.027327][ T7691] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 164.169460][ T7691] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 164.219612][ T7691] ipt_ECN: cannot use operation on non-tcp rule [ 165.194326][ T7717] netlink: 24 bytes leftover after parsing attributes in process `syz.3.315'. [ 165.375543][ T7719] netlink: 24 bytes leftover after parsing attributes in process `syz.3.315'. [ 166.025437][ T7721] netlink: 40 bytes leftover after parsing attributes in process `syz.2.316'. [ 166.319657][ T7724] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 166.482437][ T7725] netlink: 28 bytes leftover after parsing attributes in process `syz.4.317'. [ 167.148616][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'. [ 167.296947][ T7740] vlan2: entered promiscuous mode [ 167.313596][ T7740] bridge0: entered promiscuous mode [ 167.602075][ T7743] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.609836][ T7743] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.761072][ T7743] batman_adv: batadv0: Interface deactivated: dummy0 [ 167.991300][ T7749] netlink: 76 bytes leftover after parsing attributes in process `syz.1.324'. [ 168.205141][ T7743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.333108][ T7743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.456554][ T7764] netlink: 392 bytes leftover after parsing attributes in process `syz.0.326'. [ 168.504801][ T7768] x_tables: duplicate entry at hook 1 [ 168.547753][ T7770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.326'. [ 168.625717][ T7743] bridge1: left promiscuous mode [ 168.635368][ T7743] bridge1: left allmulticast mode [ 168.652002][ T7743] vlan2: left promiscuous mode [ 168.657080][ T7743] bridge0: left promiscuous mode [ 168.739545][ T1057] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.789053][ T1057] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.846855][ T6221] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.904680][ T6221] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.989820][ T7768] netlink: 'syz.3.325': attribute type 1 has an invalid length. [ 169.020003][ T7780] __nla_validate_parse: 1 callbacks suppressed [ 169.020020][ T7780] netlink: 24 bytes leftover after parsing attributes in process `syz.4.329'. [ 169.119144][ T6218] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.142322][ T7786] netlink: 24 bytes leftover after parsing attributes in process `syz.0.330'. [ 169.158406][ T6218] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.195147][ T7780] netlink: 24 bytes leftover after parsing attributes in process `syz.4.329'. [ 169.209275][ T6218] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.272293][ T6218] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.489443][ T7783] syzkaller0: refused to change device tx_queue_len [ 169.508618][ T7792] atomic_op ffff888033443998 conn xmit_atomic 0000000000000000 [ 169.569821][ T7792] netlink: 'syz.0.331': attribute type 1 has an invalid length. [ 169.809139][ T7792] bond2: entered promiscuous mode [ 169.848391][ T7792] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.084106][ T7801] ipvlan2: entered allmulticast mode [ 170.101839][ T7801] bond2: entered allmulticast mode [ 170.150909][ T7803] ipvlan3: entered allmulticast mode [ 170.292127][ T7810] bond2: (slave bridge2): making interface the new active one [ 170.312091][ T7810] bridge2: entered promiscuous mode [ 170.326389][ T7810] bridge2: entered allmulticast mode [ 170.355851][ T7810] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 170.665197][ T7823] netlink: 52 bytes leftover after parsing attributes in process `syz.4.337'. [ 170.700310][ T7823] netlink: 'syz.4.337': attribute type 7 has an invalid length. [ 170.801242][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.335'. [ 170.935487][ T7835] netlink: 'syz.0.336': attribute type 49 has an invalid length. [ 171.039795][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057e9f800: rx timeout, send abort [ 171.124114][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.339'. [ 171.135945][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.339'. [ 171.207323][ T7835] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 171.236201][ T7835] ip6gretap0: entered promiscuous mode [ 171.261600][ T7835] ip6gretap0: entered allmulticast mode [ 171.543519][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057e9fc00: rx timeout, send abort [ 171.554964][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057e9f800: abort rx timeout. Force session deactivation [ 171.916501][ T7858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.342'. [ 171.964510][ T7858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.342'. [ 172.052684][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057e9fc00: abort rx timeout. Force session deactivation [ 172.357829][ T7874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.365168][ T7874] IPv6: NLM_F_CREATE should be set when creating new route [ 172.428689][ T7872] Cannot find del_set index 1 as target [ 173.664675][ T7905] lo speed is unknown, defaulting to 1000 [ 173.711741][ T7912] netlink: 40 bytes leftover after parsing attributes in process `syz.1.350'. [ 174.146423][ T7913] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 176.736768][ T7980] __nla_validate_parse: 2 callbacks suppressed [ 176.736788][ T7980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.362'. [ 177.245704][ T7989] lo speed is unknown, defaulting to 1000 [ 178.484815][ T8026] netlink: 'syz.2.369': attribute type 10 has an invalid length. [ 178.541373][ T8026] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 178.620670][ T8026] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:ac5d:4aff:fec7:612e error=-28 [ 178.744082][ T8027] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 178.780642][ T8027] syzkaller0: linktype set to 0 [ 179.100295][ T8040] netlink: 24 bytes leftover after parsing attributes in process `syz.4.373'. [ 179.746663][ T8053] netlink: 'syz.4.375': attribute type 12 has an invalid length. [ 179.815249][ T8053] netlink: 'syz.4.375': attribute type 29 has an invalid length. [ 179.892597][ T8053] netlink: 148 bytes leftover after parsing attributes in process `syz.4.375'. [ 180.219491][ T8026] infiniband syz1: set down [ 180.237438][ T8026] infiniband syz1: added bridge_slave_1 [ 180.298193][ T8026] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 180.313540][ T8026] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 180.331376][ T8026] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 180.376963][ T8026] RDS/IB: syz1: added [ 180.386216][ T8026] smc: adding ib device syz1 with port count 1 [ 180.398444][ T8026] smc: ib device syz1 port 1 has no pnetid [ 180.752997][ T8064] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 180.845076][ T8069] syz_tun: entered allmulticast mode [ 180.917441][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'. [ 181.039770][ T8069] netlink: 'syz.0.380': attribute type 9 has an invalid length. [ 181.075900][ T8069] netlink: 'syz.0.380': attribute type 6 has an invalid length. [ 181.161053][ T8068] syz_tun: left allmulticast mode [ 181.509816][ T8074] netlink: 68 bytes leftover after parsing attributes in process `syz.0.382'. [ 182.277987][ T8093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.385'. [ 182.537715][ T8110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.385'. [ 184.006067][ T8139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.393'. [ 184.205460][ T8145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.396'. [ 184.281256][ T8145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.396'. [ 184.449440][ T8153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.399'. [ 184.462540][ T8151] netlink: 68 bytes leftover after parsing attributes in process `syz.0.398'. [ 184.562439][ T8153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.399'. [ 184.763286][ T8160] syz_tun: entered allmulticast mode [ 184.814691][ T8158] syz_tun: left allmulticast mode [ 185.837287][ T8176] ipvlan2: entered promiscuous mode [ 185.950432][ T8176] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 186.030389][ T8176] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 186.165003][ T8176] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 186.756886][ T8222] netlink: 28 bytes leftover after parsing attributes in process `syz.4.408'. [ 186.778424][ T8218] netlink: 64 bytes leftover after parsing attributes in process `syz.1.407'. [ 187.697411][ T8249] __nla_validate_parse: 4 callbacks suppressed [ 187.697429][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.414'. [ 187.758481][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.414'. [ 188.023169][ T8255] netlink: 68 bytes leftover after parsing attributes in process `syz.2.415'. [ 188.494583][ T8267] lo speed is unknown, defaulting to 1000 [ 188.606341][ T8279] netlink: 9 bytes leftover after parsing attributes in process `syz.3.419'. [ 188.665796][ T8279] gretap0: entered promiscuous mode [ 188.779781][ T8279] netlink: 5 bytes leftover after parsing attributes in process `syz.3.419'. [ 188.829675][ T8279] 0ªî{X¹¦: renamed from gretap0 [ 188.958191][ T8279] 0ªî{X¹¦: left promiscuous mode [ 189.022376][ T8279] 0ªî{X¹¦: entered allmulticast mode [ 189.109459][ T8279] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 189.366370][ T8300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.421'. [ 189.627170][ T8311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.423'. [ 189.675211][ T8311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.423'. [ 190.014374][ T8316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.424'. [ 190.033268][ T8283] siw: device registration error -23 [ 190.281491][ T8324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.479267][ T8382] netlink: 'syz.2.433': attribute type 1 has an invalid length. [ 192.507992][ T8382] netlink: 224 bytes leftover after parsing attributes in process `syz.2.433'. [ 193.208591][ T8404] bond1: option primary_reselect: invalid value (6) [ 193.227052][ T8412] netlink: 'syz.4.436': attribute type 4 has an invalid length. [ 193.264678][ T8404] bond1 (unregistering): Released all slaves [ 193.277972][ T8416] netlink: 'syz.4.436': attribute type 4 has an invalid length. [ 193.309498][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'. [ 193.835746][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.438'. [ 193.901133][ T8424] hsr_slave_1 (unregistering): left promiscuous mode [ 193.909818][ T8431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.441'. [ 193.940130][ T8429] netlink: 20 bytes leftover after parsing attributes in process `syz.0.440'. [ 194.276436][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.431592][ T8448] netlink: 76 bytes leftover after parsing attributes in process `syz.0.445'. [ 194.652421][ T5624] udevd[5624]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 195.096296][ T8459] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.104842][ T8459] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.457861][ T8459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.474639][ T8459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.650778][ T8459] veth0_macvtap: left promiscuous mode [ 195.937002][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.453'. [ 196.001122][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'. [ 196.049849][ T8480] hsr_slave_1 (unregistering): left promiscuous mode [ 196.149166][ T258] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.197568][ T258] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.232800][ T258] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.277937][ T258] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.325324][ T8469] lo speed is unknown, defaulting to 1000 [ 196.340868][ T6221] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.370586][ T6221] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.385231][ T6221] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.396409][ T6221] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.608676][ T8497] netlink: 'syz.4.457': attribute type 1 has an invalid length. [ 196.904391][ T8497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.021053][ T8511] netlink: 240 bytes leftover after parsing attributes in process `syz.2.458'. [ 197.048549][ T8497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.457'. [ 197.111126][ T8511] netlink: 'syz.2.458': attribute type 9 has an invalid length. [ 197.129809][ T8501] bond1: (slave veth7): Enslaving as an active interface with a down link [ 197.195843][ T8511] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.458'. [ 197.360856][ T8505] pimreg1: left allmulticast mode [ 197.380144][ T8505] pimreg1: left promiscuous mode [ 197.423385][ T8505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.510486][ T8505] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.618883][ T8505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.630710][ T8523] x_tables: duplicate entry at hook 1 [ 197.852792][ T8505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.864534][ T8505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.888107][ T8505] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.906690][ T8505] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 198.006841][ T8534] netlink: 'syz.0.460': attribute type 1 has an invalid length. [ 198.011573][ T8508] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 198.034955][ T8508] bond1: (slave batadv2): making interface the new active one [ 198.045613][ T8508] batadv2: entered promiscuous mode [ 198.052836][ T8508] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 198.067919][ T6221] pimreg1: port 1(bridge_slave_0) entered blocking state [ 198.077648][ T6221] pimreg1: port 1(bridge_slave_0) entered forwarding state [ 198.092562][ T6221] pimreg1: port 2(bridge_slave_1) entered blocking state [ 198.100781][ T6221] pimreg1: port 2(bridge_slave_1) entered forwarding state [ 198.209732][ T8528] geneve3: entered promiscuous mode [ 198.295177][ T8537] netlink: 'syz.4.462': attribute type 1 has an invalid length. [ 198.378480][ T8538] __nla_validate_parse: 6 callbacks suppressed [ 198.378530][ T8538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.462'. [ 198.409421][ T6323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.629976][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.666631][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.727445][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.830254][ T8542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.463'. [ 199.123444][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.467'. [ 200.956567][ T8601] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 201.561643][ T8611] netlink: 'syz.3.476': attribute type 1 has an invalid length. [ 201.631294][ T8616] netlink: 28 bytes leftover after parsing attributes in process `syz.3.476'. [ 201.669983][ T8601] bond3 (unregistering): Released all slaves [ 202.467882][ T8640] netlink: 36 bytes leftover after parsing attributes in process `syz.1.482'. [ 204.032586][ T8678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.488'. [ 205.082144][ T8701] netlink: 52 bytes leftover after parsing attributes in process `syz.2.494'. [ 205.111842][ T8701] netlink: 'syz.2.494': attribute type 7 has an invalid length. [ 205.211458][ T8703] netlink: 240 bytes leftover after parsing attributes in process `syz.0.493'. [ 205.243485][ T8703] netlink: 'syz.0.493': attribute type 9 has an invalid length. [ 205.308589][ T8703] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.493'. [ 205.468446][ T8712] netlink: 68 bytes leftover after parsing attributes in process `syz.2.497'. [ 206.066982][ T8721] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 206.762315][ T8721] bond1 (unregistering): Released all slaves [ 207.256339][ T8773] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.503'. [ 207.290496][ T8773] openvswitch: netlink: Message has 512 unknown bytes. [ 207.325797][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.503'. [ 207.507788][ T8781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.505'. [ 207.558170][ T8781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.505'. [ 207.581137][ T8780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.504'. [ 208.483345][ T7396] udevd[7396]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 208.557998][ T5640] udevd[5640]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 208.703946][ T8817] only policy match revision 0 supported [ 208.703968][ T8817] unable to load match [ 208.828194][ T8819] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.176320][ T8828] batadv0: entered promiscuous mode [ 209.234800][ T8828] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 209.524657][ T8841] __nla_validate_parse: 2 callbacks suppressed [ 209.524676][ T8841] netlink: 36 bytes leftover after parsing attributes in process `syz.3.515'. [ 209.656960][ T8834] pimreg1: port 2(bridge_slave_1) entered disabled state [ 209.665642][ T8834] pimreg1: port 1(bridge_slave_0) entered disabled state [ 210.245892][ T8834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.308288][ T8834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.331686][ T8857] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 211.336069][ T8864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.520'. [ 211.546250][ T8871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.520'. [ 211.635548][ T8857] bond1 (unregistering): Released all slaves [ 212.248536][ T8890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.363454][ T8890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.582190][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.523'. [ 212.648390][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.524'. [ 212.698360][ T8895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.712020][ T8893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.523'. [ 212.743308][ T8893] netlink: 'syz.1.523': attribute type 1 has an invalid length. [ 213.185607][ T8913] netlink: 36 bytes leftover after parsing attributes in process `syz.4.528'. [ 213.217129][ T8904] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 213.467707][ T8924] tipc: Can't bind to reserved service type 0 [ 213.703527][ T8904] bond3 (unregistering): Released all slaves [ 214.241552][ T8911] bridge1: left allmulticast mode [ 214.247865][ T8911] bridge2: left allmulticast mode [ 214.367382][ T8924] bond2 (unregistering): Released all slaves [ 214.679507][ T6214] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.717213][ T6214] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.766865][ T6214] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.805716][ T6214] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.967634][ T8954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.533'. [ 214.985133][ T8952] netlink: 36 bytes leftover after parsing attributes in process `syz.1.534'. [ 215.093363][ T8958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.533'. [ 215.421134][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 215.665551][ T8969] lo speed is unknown, defaulting to 1000 [ 216.092834][ T8984] netlink: 24 bytes leftover after parsing attributes in process `syz.4.539'. [ 216.531815][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.543'. [ 216.555439][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'. [ 216.625951][ T8992] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.790610][ T8994] 8021q: adding VLAN 0 to HW filter on device bond2 [ 217.235649][ T9011] netlink: 'syz.2.545': attribute type 1 has an invalid length. [ 217.307367][ T9011] 8021q: adding VLAN 0 to HW filter on device bond3 [ 217.357640][ T9015] bond3: (slave gretap1): making interface the new active one [ 217.369440][ T9015] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 218.055959][ T9033] veth9: entered promiscuous mode [ 218.075257][ T9033] veth9: entered allmulticast mode [ 218.096365][ T9033] team0: Device veth9 is up. Set it down before adding it as a team port [ 219.187322][ T9064] netlink: 'syz.1.561': attribute type 2 has an invalid length. [ 219.233006][ T9064] netlink: 132 bytes leftover after parsing attributes in process `syz.1.561'. [ 220.410865][ T9096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.555'. [ 221.396474][ T9105] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 222.089824][ T9138] xt_hashlimit: size too large, truncated to 1048576 [ 222.858843][ T9156] netlink: 36 bytes leftover after parsing attributes in process `syz.4.565'. [ 223.218130][ T9155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.344654][ T9155] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.642499][ T9155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.116339][ T9155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.148743][ T9155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.166939][ T9155] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.183697][ T9155] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 224.204756][ T9163] tipc: Started in network mode [ 224.209810][ T9163] tipc: Node identity , cluster identity 4711 [ 224.216936][ T9163] tipc: Failed to obtain node identity [ 224.222474][ T9163] tipc: Enabling of bearer rejected, failed to enable media [ 224.257066][ T36] pimreg1: port 1(bridge_slave_0) entered blocking state [ 224.264297][ T36] pimreg1: port 1(bridge_slave_0) entered forwarding state [ 224.310949][ T36] pimreg1: port 2(bridge_slave_1) entered blocking state [ 224.318166][ T36] pimreg1: port 2(bridge_slave_1) entered forwarding state [ 224.634719][ T9188] bridge0: port 3(team0) entered disabled state [ 224.642031][ T9188] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.649746][ T9188] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.794585][ T9188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.812225][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.571'. [ 224.825254][ T9188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.533396][ T9188] ipvlan2: left allmulticast mode [ 225.540008][ T9188] ipvlan3: left allmulticast mode [ 225.545215][ T9188] bond2: left allmulticast mode [ 225.551443][ T9188] bridge2: left allmulticast mode [ 225.580231][ T36] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.590930][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.601839][ T9210] veth0: entered promiscuous mode [ 225.612421][ T9213] veth0: left promiscuous mode [ 225.627751][ T9215] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 225.742038][ T9218] bond0: (slave bond_slave_1): Releasing backup interface [ 225.799328][ T258] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.829510][ T258] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.872473][ T36] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.937999][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.982153][ T36] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.035856][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.488596][ T9263] pimreg: entered allmulticast mode [ 227.546383][ T9275] netlink: 84 bytes leftover after parsing attributes in process `syz.4.582'. [ 227.850435][ T9262] pimreg: left allmulticast mode [ 228.363449][ T9295] netlink: 104 bytes leftover after parsing attributes in process `syz.4.584'. [ 228.427667][ T9295] bond0: (slave bond_slave_1): Releasing backup interface [ 229.661173][ T9336] netlink: 240 bytes leftover after parsing attributes in process `syz.2.589'. [ 229.851467][ T9341] netlink: 16 bytes leftover after parsing attributes in process `syz.3.591'. [ 229.886707][ T30] audit: type=1804 audit(1785811193.451:3): pid=9330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.589" name="/newroot/106/memory.events" dev="tmpfs" ino=584 res=1 errno=0 [ 230.718016][ T9362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.594'. [ 231.352475][ T9361] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 231.408728][ T9361] bond1 (unregistering): Released all slaves [ 232.645224][ T9405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.600'. [ 232.690507][ T9405] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 232.731241][ T36] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:ac5d:4aff:fec7:612e error=-28 [ 232.762405][ T9405] ipt_ECN: cannot use operation on non-tcp rule [ 232.794949][ T9413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.599'. [ 232.822403][ T9410] sctp: [Deprecated]: syz.0.601 (pid 9410) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.822403][ T9410] Use struct sctp_sack_info instead [ 232.876024][ T5755] lo speed is unknown, defaulting to 1000 [ 233.493641][ T9410] lo speed is unknown, defaulting to 1000 [ 233.789264][ T9437] netlink: 68 bytes leftover after parsing attributes in process `syz.3.604'. [ 235.207628][ T9477] syz.3.608: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 235.251491][ T9477] CPU: 0 UID: 0 PID: 9477 Comm: syz.3.608 Not tainted syzkaller #0 PREEMPT(full) [ 235.251522][ T9477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.251546][ T9477] Call Trace: [ 235.251555][ T9477] [ 235.251564][ T9477] dump_stack_lvl+0xe8/0x150 [ 235.251616][ T9477] warn_alloc+0x24c/0x270 [ 235.251647][ T9477] ? stack_depot_save_flags+0x33/0x800 [ 235.251679][ T9477] ? __pfx_warn_alloc+0x10/0x10 [ 235.251709][ T9477] ? kasan_save_track+0x3e/0x80 [ 235.251736][ T9477] ? __kasan_kmalloc+0x93/0xb0 [ 235.251767][ T9477] ? xsk_setsockopt+0x52a/0x960 [ 235.251791][ T9477] ? do_sock_setsockopt+0x17c/0x1b0 [ 235.251827][ T9477] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 235.251849][ T9477] ? do_syscall_64+0x174/0x580 [ 235.251876][ T9477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.251906][ T9477] __vmalloc_node_range_noprof+0x12c/0x1730 [ 235.251960][ T9477] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 235.251990][ T9477] ? __kasan_kmalloc+0x93/0xb0 [ 235.252019][ T9477] ? __kmalloc_cache_noprof+0x32d/0x660 [ 235.252053][ T9477] ? __kmalloc_cache_noprof+0x150/0x660 [ 235.252083][ T9477] vmalloc_user_noprof+0xad/0xe0 [ 235.252109][ T9477] ? xskq_create+0xbf/0x170 [ 235.252136][ T9477] xskq_create+0xbf/0x170 [ 235.252165][ T9477] xsk_init_queue+0x8a/0xe0 [ 235.252193][ T9477] xsk_setsockopt+0x52a/0x960 [ 235.252216][ T9477] ? __fget_files+0x2a/0x420 [ 235.252246][ T9477] ? __pfx_xsk_setsockopt+0x10/0x10 [ 235.252270][ T9477] ? __pfx_aa_sk_perm+0x10/0x10 [ 235.252295][ T9477] ? aa_sock_opt_perm+0xff/0x1a0 [ 235.252320][ T9477] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 235.252342][ T9477] ? __pfx_xsk_setsockopt+0x10/0x10 [ 235.252368][ T9477] do_sock_setsockopt+0x17c/0x1b0 [ 235.252397][ T9477] __x64_sys_setsockopt+0x13d/0x1b0 [ 235.252424][ T9477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.252446][ T9477] do_syscall_64+0x174/0x580 [ 235.252472][ T9477] ? trace_irq_disable+0x3b/0x140 [ 235.252498][ T9477] ? clear_bhb_loop+0x40/0x90 [ 235.252523][ T9477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.252543][ T9477] RIP: 0033:0x7fb82199e019 [ 235.252567][ T9477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.252584][ T9477] RSP: 002b:00007fb82289b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 235.252605][ T9477] RAX: ffffffffffffffda RBX: 00007fb821c26090 RCX: 00007fb82199e019 [ 235.252620][ T9477] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 235.252633][ T9477] RBP: 00007fb821a3500c R08: 0000000000000004 R09: 0000000000000000 [ 235.252645][ T9477] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.252658][ T9477] R13: 00007fb821c26128 R14: 00007fb821c26090 R15: 00007ffcf45704a8 [ 235.252690][ T9477] [ 235.252852][ T9477] Mem-Info: [ 235.589140][ T9477] active_anon:5843 inactive_anon:0 isolated_anon:0 [ 235.589140][ T9477] active_file:0 inactive_file:43542 isolated_file:0 [ 235.589140][ T9477] unevictable:768 dirty:261 writeback:0 [ 235.589140][ T9477] slab_reclaimable:10329 slab_unreclaimable:115727 [ 235.589140][ T9477] mapped:30559 shmem:1319 pagetables:1298 [ 235.589140][ T9477] sec_pagetables:0 bounce:0 [ 235.589140][ T9477] kernel_misc_reclaimable:0 [ 235.589140][ T9477] free:1307905 free_pcp:10240 free_cma:0 [ 235.638288][ T9477] Node 0 active_anon:23372kB inactive_anon:0kB active_file:0kB inactive_file:173960kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122236kB dirty:1044kB writeback:0kB shmem:3740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13824kB pagetables:5064kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 235.642120][ T9490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.611'. [ 235.706430][ T9477] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 235.759771][ T9491] netlink: 14 bytes leftover after parsing attributes in process `syz.1.612'. [ 235.802845][ T9477] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 235.856036][ T9477] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 235.885359][ T9477] Node 0 DMA32 free:1268776kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25464kB inactive_anon:0kB active_file:0kB inactive_file:173968kB unevictable:1536kB writepending:1212kB zspages:0kB present:3129332kB managed:2548504kB mlocked:0kB bounce:0kB free_pcp:39652kB local_pcp:20160kB free_cma:0kB [ 235.924885][ T9477] lowmem_reserve[]: 0 0 0 0 0 [ 235.929689][ T9477] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 235.963967][ T9477] lowmem_reserve[]: 0 0 0 0 0 [ 235.968855][ T9477] Node 1 Normal free:3944804kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 236.008011][ T9487] netlink: 32 bytes leftover after parsing attributes in process `syz.3.608'. [ 236.091113][ T9500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.613'. [ 236.148064][ T9477] lowmem_reserve[]: 0 0 0 0 0 [ 236.180314][ T9477] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 236.197619][ T9477] Node 0 DMA32: 931*4kB (UME) 630*8kB (UM) 266*16kB (UME) 481*32kB (UME) 192*64kB (UM) 39*128kB (UM) 30*256kB (UM) 23*512kB (UME) 5*1024kB (ME) 4*2048kB (UM) 282*4096kB (UM) = 1233532kB [ 236.248078][ T9477] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 236.371106][ T9477] Node 1 Normal: 1*4kB (U) 4*8kB (UM) 6*16kB (UM) 5*32kB (UM) 7*64kB (UM) 5*128kB (UM) 6*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3944804kB [ 236.448470][ T9477] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 236.498834][ T9477] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 236.574956][ T9477] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 236.628690][ T9480] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 236.636466][ T9477] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 236.684211][ T9477] 46036 total pagecache pages [ 236.695621][ T9477] 0 pages in swap cache [ 236.716019][ T9477] Free swap = 124996kB [ 236.730647][ T9477] Total swap = 124996kB [ 236.737584][ T9477] 2097051 pages RAM [ 236.747547][ T9477] 0 pages HighMem/MovableOnly [ 236.766031][ T9477] 428245 pages reserved [ 236.783032][ T9477] 0 pages cma reserved [ 236.932908][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'. [ 237.086601][ T9521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.617'. [ 237.197336][ T9525] netlink: 68 bytes leftover after parsing attributes in process `syz.3.618'. [ 237.291087][ T9521] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.683006][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'. [ 237.809756][ T9546] xt_l2tp: invalid flags combination: 8 [ 237.925331][ T9548] gre0: entered promiscuous mode [ 237.957473][ T9548] gre0: entered allmulticast mode [ 238.833976][ T9579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.623'. [ 239.147787][ T9585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.624'. [ 239.551462][ T9602] netlink: 140 bytes leftover after parsing attributes in process `syz.1.626'. [ 239.655357][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.626'. [ 239.689057][ T9602] netlink: 'syz.1.626': attribute type 30 has an invalid length. [ 239.808227][ T9607] netlink: 68 bytes leftover after parsing attributes in process `syz.0.627'. [ 239.846347][ T258] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.883105][ T258] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.916534][ T258] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.965952][ T258] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.214172][ T9621] syzkaller0: entered promiscuous mode [ 240.243469][ T9621] syzkaller0: entered allmulticast mode [ 240.349743][ T9630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.631'. [ 240.685132][ T9630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.867159][ T9629] smc: removing ib device syz1 [ 241.222934][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'. [ 241.290056][ T9629] smbdirect: ib_dev[syz1] removed [ 241.381271][ T9657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.636'. [ 241.534765][ T9663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.637'. [ 241.587487][ T9655] bridge3: entered promiscuous mode [ 241.595398][ T9655] bridge3: entered allmulticast mode [ 241.606631][ T9655] team0: Port device bridge3 added [ 241.633359][ T9660] bridge0: port 1(team0) entered blocking state [ 241.660788][ T9660] bridge0: port 1(team0) entered disabled state [ 241.693165][ T9660] team0: entered allmulticast mode [ 241.722927][ T9660] bridge1: entered allmulticast mode [ 241.763655][ T9660] bridge2: entered allmulticast mode [ 241.875109][ T9660] team0: entered promiscuous mode [ 241.948808][ T9669] macvlan0: entered promiscuous mode [ 243.394182][ T9692] __nla_validate_parse: 1 callbacks suppressed [ 243.394275][ T9692] netlink: 68 bytes leftover after parsing attributes in process `syz.0.643'. [ 243.739425][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.645'. [ 244.379094][ T9700] 8021q: adding VLAN 0 to HW filter on device bond2 [ 244.652683][ T9730] netlink: 24 bytes leftover after parsing attributes in process `syz.3.647'. [ 244.870129][ T9741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.649'. [ 245.560001][ T9745] syzkaller0: entered promiscuous mode [ 245.578774][ T9745] syzkaller0: entered allmulticast mode [ 246.526568][ T9786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.659'. [ 248.469646][ T9786] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 248.925748][ T9810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.662'. [ 249.287327][ T644] IPVS: starting estimator thread 0... [ 249.375799][ T4938] block nbd1: Receive control failed (result -22) [ 249.389275][ T9830] IPVS: using max 25 ests per chain, 60000 per kthread [ 249.411541][ T9829] nbd1: detected capacity change from 0 to 32 [ 249.434930][ T1184] block nbd1: Dead connection, failed to find a fallback [ 249.444367][ T1184] block nbd1: shutting down sockets [ 249.451527][ T1184] blk_print_req_error: 69 callbacks suppressed [ 249.451545][ T1184] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 249.468496][ T1184] buffer_io_error: 138 callbacks suppressed [ 249.468512][ T1184] Buffer I/O error on dev nbd1, logical block 0, async page read [ 249.484474][ T1184] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 249.494371][ T1184] Buffer I/O error on dev nbd1, logical block 0, async page read [ 249.502910][ T1184] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 249.513001][ T1184] Buffer I/O error on dev nbd1, logical block 0, async page read [ 249.522099][ T1184] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 249.534996][ T1184] Buffer I/O error on dev nbd1, logical block 0, async page read [ 249.543733][ T1184] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 249.553825][ T1184] Buffer I/O error on dev nbd1, logical block 0, async page read [ 249.562109][ T1184] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 249.573015][ T1184] Buffer I/O error on dev nbd1, logical block 0, async page read [ 249.581376][ T1184] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 249.591585][ T1184] Buffer I/O error on dev nbd1, logical block 0, async page read [ 249.599844][ T1184] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 249.609894][ T1184] Buffer I/O error on dev nbd1, logical block 0, async page read [ 249.620158][ T5624] ldm_validate_partition_table(): Disk read failed. [ 249.627052][ T1184] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 249.637788][ T1184] Buffer I/O error on dev nbd1, logical block 0, async page read [ 249.646213][ T1184] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 249.657572][ T1184] Buffer I/O error on dev nbd1, logical block 0, async page read [ 249.671094][ T5624] Dev nbd1: unable to read RDB block 0 [ 249.704533][ T5624] nbd1: unable to read partition table [ 249.763124][ T5624] ldm_validate_partition_table(): Disk read failed. [ 249.809885][ T5624] Dev nbd1: unable to read RDB block 0 [ 249.855598][ T5624] nbd1: unable to read partition table [ 249.995708][ T9844] netlink: 'syz.4.675': attribute type 1 has an invalid length. [ 250.041196][ T9844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.675'. [ 250.104817][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.675'. [ 250.142371][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.675'. [ 250.224223][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.675'. [ 250.235713][ T1057] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.257133][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.675'. [ 250.267554][ T1057] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.304848][ T9848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.315030][ T1057] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.360569][ T1057] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.380323][ T9850] xt_CT: You must specify a L4 protocol and not use inversions on it [ 250.442384][ T9848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.623302][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.681'. [ 250.986362][ T9871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.796725][ T9888] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 252.115807][ T9898] ipvlan0: Caught tx_queue_len zero misconfig [ 254.766120][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 254.790015][ T9959] netlink: 44 bytes leftover after parsing attributes in process `syz.0.709'. [ 255.538892][ T9970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.713'. [ 255.576769][ T9945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.706'. [ 255.690633][ T9952] netlink: 44 bytes leftover after parsing attributes in process `syz.3.706'. [ 256.202923][ T9952] bond3: entered promiscuous mode [ 256.244727][ T9952] bond3: entered allmulticast mode [ 256.264721][ T9952] 8021q: adding VLAN 0 to HW filter on device bond3 [ 256.799474][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.719'. [ 256.840671][ T9989] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 256.988685][ T9992] ipt_ECN: cannot use operation on non-tcp rule [ 257.421919][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'. [ 257.516754][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.721'. [ 257.954979][T10007] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.347096][T10033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.732'. [ 259.395174][T10026] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 259.953949][T10026] bond5 (unregistering): Released all slaves [ 260.346592][T10033] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 260.904452][T10058] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 261.504421][T10066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.741'. [ 261.895378][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'. [ 262.229193][T10066] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.993145][T10097] netlink: 44 bytes leftover after parsing attributes in process `syz.0.746'. [ 263.259590][T10090] netlink: 'syz.0.746': attribute type 2 has an invalid length. [ 263.754401][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'. [ 263.916472][T10104] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 264.351882][T10104] bond3 (unregistering): Released all slaves [ 265.108117][T10125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.758'. [ 265.347527][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.759'. [ 265.671120][T10125] 8021q: adding VLAN 0 to HW filter on device bond3 [ 265.728019][T10138] netlink: 16 bytes leftover after parsing attributes in process `syz.2.760'. [ 265.816774][T10138] batman_adv: batadv0: Removing interface: dummy0 [ 266.845331][T10159] netlink: 36 bytes leftover after parsing attributes in process `syz.3.766'. [ 267.324091][T10169] netlink: 244 bytes leftover after parsing attributes in process `syz.0.768'. [ 268.741606][T10158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.755475][T10158] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.770895][T10158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.981769][T10158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.995957][T10158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.013501][T10195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.773'. [ 269.025066][T10158] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 269.074741][T10158] veth1_vlan: left promiscuous mode [ 269.094860][T10158] veth0_vlan: left promiscuous mode [ 269.124476][T10158] veth0_vlan: entered promiscuous mode [ 269.174413][T10158] veth1_vlan: entered promiscuous mode [ 269.247237][T10158] veth1_macvtap: left promiscuous mode [ 269.261009][T10158] veth0_macvtap: entered promiscuous mode [ 269.286193][T10158] veth1_macvtap: entered promiscuous mode [ 269.344199][T10158] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 269.386408][T10158] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 269.423922][T10158] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 269.440745][T10158] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 269.451780][T10158] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 269.495661][T10163] bridge3: entered promiscuous mode [ 269.502263][T10163] bridge3: entered allmulticast mode [ 269.524593][T10163] team0: Port device bridge3 added [ 269.539139][ T6211] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.548805][ T6211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.585994][ T6211] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.594154][ T6211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.908116][T10206] netlink: 'syz.2.775': attribute type 10 has an invalid length. [ 270.046670][T10208] netlink: 'syz.3.777': attribute type 4 has an invalid length. [ 270.059616][T10208] netlink: 152 bytes leftover after parsing attributes in process `syz.3.777'. [ 270.121023][T10195] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.296436][T10208] .`: renamed from bond0 (while UP) [ 270.756834][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'. [ 270.868775][T10219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.780'. [ 271.020950][T10223] netlink: 24 bytes leftover after parsing attributes in process `syz.2.780'. [ 271.368601][T10227] ±ÿ: renamed from lo [ 272.475408][T10243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.788'. [ 272.781179][T10243] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.504904][T10264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.795'. [ 273.686870][T10265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.795'. [ 274.178701][T10276] netlink: 'syz.4.799': attribute type 1 has an invalid length. [ 274.253089][T10276] netlink: 28 bytes leftover after parsing attributes in process `syz.4.799'. [ 274.400354][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'. [ 274.462615][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'. [ 274.491650][T10282] netlink: 40 bytes leftover after parsing attributes in process `syz.0.801'. [ 274.509633][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'. [ 274.522088][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'. [ 274.559966][T10282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.801'. [ 275.622011][T10302] ipvlan0: Caught tx_queue_len zero misconfig [ 276.236208][T10313] 8021q: adding VLAN 0 to HW filter on device bond6 [ 277.501460][T10362] __nla_validate_parse: 3 callbacks suppressed [ 277.501505][T10362] netlink: 68 bytes leftover after parsing attributes in process `syz.0.818'. [ 277.540373][T10358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.819'. [ 277.886477][T10372] No such timeout policy "syz0" [ 278.333028][T10392] netlink: 'syz.1.823': attribute type 46 has an invalid length. [ 278.612864][T10396] netdevsim netdevsim4 netdevsim0: refused to change device tx_queue_len [ 279.640984][T10419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.832'. [ 279.904331][T10419] 8021q: adding VLAN 0 to HW filter on device bond7 [ 280.059642][T10436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.836'. [ 280.502923][T10440] netlink: 68 bytes leftover after parsing attributes in process `syz.4.838'. [ 282.176533][T10491] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 282.183561][T10491] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 282.245210][T10491] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 282.545132][T10502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.850'. [ 283.050581][T10508] netlink: 24 bytes leftover after parsing attributes in process `syz.3.851'. [ 283.077418][T10510] lo speed is unknown, defaulting to 1000 [ 283.292128][T10525] netlink: 68 bytes leftover after parsing attributes in process `syz.4.855'. [ 283.347043][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'. [ 284.222955][T10562] netlink: 28 bytes leftover after parsing attributes in process `syz.3.859'. [ 284.317465][T10565] netlink: 24 bytes leftover after parsing attributes in process `syz.0.860'. [ 284.394790][T10568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.859'. [ 284.497394][T10570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.860'. [ 285.367554][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 285.461195][T10589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.867'. [ 286.217048][T10605] 8021q: adding VLAN 0 to HW filter on device bond8 [ 286.452105][T10618] netlink: 'syz.3.876': attribute type 1 has an invalid length. [ 286.564178][ T6208] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.573008][ T6208] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.629198][ T6208] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.727197][ T6208] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.325754][T10645] netlink: 'syz.2.885': attribute type 10 has an invalid length. [ 288.644592][T10683] __nla_validate_parse: 12 callbacks suppressed [ 288.644613][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.891'. [ 288.665741][T10682] netlink: 16 bytes leftover after parsing attributes in process `syz.4.892'. [ 289.887300][T10716] netlink: 'syz.1.902': attribute type 4 has an invalid length. [ 289.895013][T10716] netlink: 17 bytes leftover after parsing attributes in process `syz.1.902'. [ 290.823202][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.906'. [ 291.052870][T10747] netlink: 'syz.1.908': attribute type 10 has an invalid length. [ 291.144619][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 291.181590][T10747] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 291.208448][T10747] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 291.250167][T10747] team0: Port device netdevsim1 added [ 291.363014][T10754] netlink: 24 bytes leftover after parsing attributes in process `syz.4.909'. [ 292.619321][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.922'. [ 292.665427][T10787] netlink: 16 bytes leftover after parsing attributes in process `syz.2.923'. [ 292.901829][T10791] lo speed is unknown, defaulting to 1000 [ 293.072164][T10796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.925'. [ 293.701479][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.931'. [ 294.207712][T10826] netlink: 16 bytes leftover after parsing attributes in process `syz.1.937'. [ 294.426810][T10832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.939'. [ 294.736694][T10842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.940'. [ 294.747127][T10842] netlink: 11 bytes leftover after parsing attributes in process `syz.4.940'. [ 295.137885][T10849] netlink: 104 bytes leftover after parsing attributes in process `syz.4.943'. [ 295.552079][T10857] netlink: 40 bytes leftover after parsing attributes in process `syz.0.947'. [ 295.666015][T10857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.947'. [ 296.730546][T10876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.956'. [ 297.433262][T10895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.962'. [ 297.488622][T10899] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 298.104230][T10915] netlink: 'syz.2.967': attribute type 2 has an invalid length. [ 298.711826][T10930] netlink: 'syz.1.973': attribute type 3 has an invalid length. [ 299.016544][T10927] 8021q: adding VLAN 0 to HW filter on device bond5 [ 299.554917][T10952] netlink: 'syz.0.978': attribute type 1 has an invalid length. [ 299.620285][T10952] __nla_validate_parse: 2 callbacks suppressed [ 299.620306][T10952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.978'. [ 299.710302][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.978'. [ 299.759382][T10952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.978'. [ 299.878434][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.978'. [ 299.914493][T10952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.978'. [ 299.954228][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.985496][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.014659][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.089763][ T6208] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.489908][T10968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.984'. [ 300.535849][T10971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.986'. [ 300.551181][T10973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.985'. [ 300.765589][T10968] 8021q: adding VLAN 0 to HW filter on device bond4 [ 300.792726][T10971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.986'. [ 300.806796][T10973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.985'. [ 301.482570][T10988] 8021q: adding VLAN 0 to HW filter on device bond4 [ 301.515721][T11001] netlink: 'syz.0.994': attribute type 1 has an invalid length. [ 302.588788][T11018] 8021q: adding VLAN 0 to HW filter on device bond9 [ 302.821492][T11035] 8021q: adding VLAN 0 to HW filter on device bond5 [ 304.152544][T11063] 8021q: adding VLAN 0 to HW filter on device bond10 [ 304.594444][T11085] xt_policy: too many policy elements [ 304.713068][T11088] __nla_validate_parse: 11 callbacks suppressed [ 304.713089][T11088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1012'. [ 305.577608][T11107] lo speed is unknown, defaulting to 1000 [ 306.991667][T11138] netlink: 'syz.3.1023': attribute type 4 has an invalid length. [ 307.188111][T11143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1025'. [ 307.540090][T11149] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1027'. [ 308.221907][T11169] netlink: 'syz.1.1034': attribute type 3 has an invalid length. [ 308.242622][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'. [ 313.182174][T11320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1072'. [ 313.314855][T11320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.547989][T11357] lo speed is unknown, defaulting to 1000 [ 314.663504][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1087'. [ 315.067095][T11367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1089'. [ 315.289891][T11367] 8021q: adding VLAN 0 to HW filter on device bond6 [ 315.353292][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 316.094960][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1099'. [ 316.275915][T11398] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1101'. [ 316.285002][T11398] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1101'. [ 317.537703][T11430] netlink: 'syz.4.1115': attribute type 1 has an invalid length. [ 317.737788][T11434] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1115'. [ 317.825511][T11430] 8021q: adding VLAN 0 to HW filter on device bond7 [ 317.924806][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1115'. [ 317.971338][T11430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1115'. [ 318.940758][T11474] __nla_validate_parse: 2 callbacks suppressed [ 318.940780][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1131'. [ 319.007936][T11476] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 319.117148][T11478] netlink: 'syz.2.1133': attribute type 1 has an invalid length. [ 319.267061][T11480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1133'. [ 319.383651][T11478] 8021q: adding VLAN 0 to HW filter on device bond11 [ 319.429434][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1133'. [ 319.438369][T11478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1133'. [ 319.527061][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1133'. [ 319.541268][ T57] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.562242][ T6211] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.612793][T11478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1133'. [ 319.627447][ T6211] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.693291][ T6211] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.868044][T11496] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1138'. [ 320.077449][T11497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1138'. [ 321.173872][T11528] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1149'. [ 321.811800][T11543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1156'. [ 322.861064][T11559] netlink: 'syz.4.1163': attribute type 2 has an invalid length. [ 323.813380][T11589] 8021q: adding VLAN 0 to HW filter on device bond8 [ 324.140016][T11598] __nla_validate_parse: 8 callbacks suppressed [ 324.140038][T11598] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1177'. [ 324.566023][T11601] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1177'. [ 324.845550][T11610] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1180'. [ 325.205901][T11615] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1184'. [ 325.363395][T11619] netlink: 774 bytes leftover after parsing attributes in process `syz.0.1186'. [ 325.412737][T11619] netlink: 'syz.0.1186': attribute type 1 has an invalid length. [ 326.249107][T11641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1195'. [ 327.201143][T11671] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1207'. [ 327.648916][T11684] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1211'. [ 327.752255][T11684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1211'. [ 327.872918][T11688] lo speed is unknown, defaulting to 1000 [ 329.292017][T11706] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1219'. [ 329.499194][T11724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1226'. [ 329.538538][T11716] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 329.572481][T11716] bond9 (unregistering): Released all slaves [ 329.744061][T11728] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1229'. [ 329.803038][T11733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1226'. [ 330.185983][T11747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1229'. [ 330.291690][T11742] lo speed is unknown, defaulting to 1000 [ 331.011663][T11754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1234'. [ 332.541847][T11776] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 332.890041][T11776] bond6 (unregistering): Released all slaves [ 333.075350][T11780] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 333.110045][T11780] bond4 (unregistering): Released all slaves [ 333.252143][T11773] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1242'. [ 333.708381][T11796] lo speed is unknown, defaulting to 1000 [ 334.012317][T11809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1251'. [ 334.204234][T11812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1251'. [ 334.592851][T11824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1257'. [ 335.578548][T11843] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 336.289351][T11843] bond9 (unregistering): Released all slaves [ 336.644611][T11876] lo speed is unknown, defaulting to 1000 [ 337.142721][T11893] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1272'. [ 337.951044][T11918] tap0: tun_chr_ioctl cmd 2147767507 [ 338.029661][T11922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1282'. [ 338.190434][T11926] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1284'. [ 338.335140][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1283'. [ 338.375304][T11935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1282'. [ 338.388058][T11933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1285'. [ 338.515783][T11926] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1284'. [ 338.810478][T11933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1285'. [ 339.281561][T11953] lo speed is unknown, defaulting to 1000 [ 340.820811][T11989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1299'. [ 340.956469][T11985] batman_adv: batadv0: Adding interface: vlan3 [ 340.978278][T11985] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.044042][T11993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1299'. [ 341.095557][T11985] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 341.954161][T12010] netlink: 'syz.1.1306': attribute type 3 has an invalid length. [ 341.962102][T12010] netlink: 'syz.1.1306': attribute type 3 has an invalid length. [ 342.226881][T12010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1306'. [ 342.267181][T12017] Bluetooth: MGMT ver 1.23 [ 343.074319][T12025] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1313'. [ 344.657490][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1325'. [ 345.168601][T12077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1336'. [ 345.233763][T12076] tipc: Started in network mode [ 345.256831][T12076] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 345.281921][T12076] tipc: Enabled bearer , priority 10 [ 346.267110][ T6993] tipc: Node number set to 8432298 [ 346.526365][T12116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1353'. [ 346.570942][T12116] 8021q: adding VLAN 0 to HW filter on device bond6 [ 347.837748][T12145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1364'. [ 347.857756][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1364'. [ 347.866699][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1364'. [ 347.885573][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1364'. [ 347.895303][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1364'. [ 348.171377][T12151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1366'. [ 348.439588][T12158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1366'. [ 349.864782][T12183] netlink: 'syz.0.1375': attribute type 5 has an invalid length. [ 349.900883][T12183] netlink: 'syz.0.1375': attribute type 9 has an invalid length. [ 349.945845][T12183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1375'. [ 350.295810][T12196] xt_hashlimit: size too large, truncated to 1048576 [ 350.648578][T12206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1384'. [ 351.660564][T12227] __nla_validate_parse: 2 callbacks suppressed [ 351.660586][T12227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1388'. [ 352.539548][T12245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1397'. [ 352.892759][T12245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1397'. [ 352.971383][T12261] netlink: zone id is out of range [ 352.990318][T12261] netlink: zone id is out of range [ 353.018287][T12260] netlink: 'syz.2.1403': attribute type 2 has an invalid length. [ 353.329347][T12264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1405'. [ 353.457486][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1407'. [ 354.157663][T12286] netlink: 'syz.3.1411': attribute type 1 has an invalid length. [ 354.193349][T12286] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1411'. [ 354.254961][T12286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1411'. [ 354.263898][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1411'. [ 354.339924][T12286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1411'. [ 354.348845][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1411'. [ 354.971330][T12295] 8021q: adding VLAN 0 to HW filter on device bond12 [ 355.465708][T12317] Dropped outbound packet type=700 [ 356.178237][T12341] netlink: 'syz.2.1431': attribute type 1 has an invalid length. [ 357.249556][T12363] __nla_validate_parse: 7 callbacks suppressed [ 357.249576][T12363] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1439'. [ 357.501756][T12368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1439'. [ 357.622998][T12372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1444'. [ 357.985428][T12380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1447'. [ 358.219958][T12380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1447'. [ 358.562853][T12394] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1455'. [ 358.661700][T12399] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1455'. [ 359.499153][T12422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1465'. [ 359.605394][T12422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1465'. [ 359.834134][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1466'. [ 360.850624][T12446] tipc: Started in network mode [ 360.855586][T12446] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 360.908957][T12446] tipc: Enabled bearer , priority 0 [ 361.298957][T12452] lo speed is unknown, defaulting to 1000 [ 361.907669][ T7752] tipc: Node number set to 43690 [ 362.354120][T12478] "syz.4.1484" (12478) uses obsolete ecb(arc4) skcipher [ 362.558279][T12493] __nla_validate_parse: 1 callbacks suppressed [ 362.558322][T12493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1489'. [ 362.875805][T12502] netlink: 'syz.4.1493': attribute type 14 has an invalid length. [ 362.918127][T12502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1493'. [ 362.933754][T12502] netlink: 'syz.4.1493': attribute type 14 has an invalid length. [ 362.941624][T12502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1493'. [ 363.722017][T12514] team0: Device ipvlan2 failed to register rx_handler [ 364.670416][T12543] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1508'. [ 364.724653][T12543] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1508'. [ 365.755009][T12573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1520'. [ 365.839974][T12573] 8021q: adding VLAN 0 to HW filter on device bond4 [ 366.212083][T12591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1525'. [ 366.371847][T12597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1525'. [ 366.855113][T12609] tls_set_device_offload: netdev not found [ 367.318579][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1536'. [ 367.620490][T12636] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1540'. [ 367.700874][T12636] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1540'. [ 367.890668][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1543'. [ 368.272838][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1548'. [ 368.518254][T12660] netlink: 'syz.0.1552': attribute type 3 has an invalid length. [ 368.572082][T12660] netlink: 'syz.0.1552': attribute type 3 has an invalid length. [ 368.934283][T12671] bridge0: port 3(veth0) entered blocking state [ 368.981741][T12671] bridge0: port 3(veth0) entered disabled state [ 368.992241][T12671] veth0: entered allmulticast mode [ 369.006082][T12671] veth0: entered promiscuous mode [ 369.013810][T12671] bridge0: port 3(veth0) entered blocking state [ 369.021382][T12671] bridge0: port 3(veth0) entered forwarding state [ 369.262730][T12682] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1562'. [ 369.360911][T12686] netlink: 'syz.3.1564': attribute type 12 has an invalid length. [ 369.369248][T12686] netlink: 'syz.3.1564': attribute type 29 has an invalid length. [ 369.388665][T12686] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1564'. [ 369.398095][T12686] netlink: 'syz.3.1564': attribute type 1 has an invalid length. [ 369.414922][T12686] netlink: 'syz.3.1564': attribute type 2 has an invalid length. [ 369.422716][T12686] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1564'. [ 369.686043][T12692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1551'. [ 370.448098][T12716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1551'. [ 370.692264][T12721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1577'. [ 370.974902][T12731] lo speed is unknown, defaulting to 1000 [ 371.612057][T12739] 8021q: adding VLAN 0 to HW filter on device bond5 [ 372.734967][T12772] __nla_validate_parse: 4 callbacks suppressed [ 372.735006][T12772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1594'. [ 372.936640][T12772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1594'. [ 373.316550][T12795] netlink: 'syz.3.1600': attribute type 8 has an invalid length. [ 373.338651][T12795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1600'. [ 374.687310][T12820] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.030835][T12820] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.093256][T12834] batman_adv: batadv0: Adding interface: ip6gretap1 [ 375.099903][T12834] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.138113][T12834] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 375.257883][T12820] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.448313][T12820] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.263454][ T258] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.282744][ T1057] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.321958][ T1057] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.330232][ T1057] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.904166][T12867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1629'. [ 377.607035][T12876] lo speed is unknown, defaulting to 1000 [ 377.821549][T12893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1631'. [ 379.246052][T12925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1645'. [ 379.503449][T12936] netlink: 'syz.4.1649': attribute type 22 has an invalid length. [ 379.511415][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1649'. [ 379.611425][T12939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1647'. [ 379.647354][T12932] lo speed is unknown, defaulting to 1000 [ 379.669835][T12936] netlink: 'syz.4.1649': attribute type 22 has an invalid length. [ 379.677738][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1649'. [ 380.161921][T12952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1654'. [ 380.690233][T12963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1656'. [ 380.907420][T12968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1656'. [ 381.719477][T12985] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1661'. [ 382.586260][T13002] lo speed is unknown, defaulting to 1000 [ 383.025115][T13018] bond13: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 383.054501][T13018] bond13 (unregistering): Released all slaves [ 383.484599][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1671'. [ 383.626641][T13034] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1672'. [ 383.854241][T13038] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1672'. [ 385.241329][T13066] lo speed is unknown, defaulting to 1000 [ 385.327957][T13069] lo speed is unknown, defaulting to 1000 [ 385.682461][T13079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1684'. [ 385.866190][T13081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1685'. [ 387.454058][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1695'. [ 387.463000][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1695'. [ 387.539104][T13116] netlink: 'syz.3.1695': attribute type 6 has an invalid length. [ 387.548551][T13116] netlink: 'syz.3.1695': attribute type 5 has an invalid length. [ 387.820460][T13127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1697'. [ 389.399566][T13161] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1706'. [ 389.567253][T13161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1706'. [ 390.136971][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1712'. [ 390.316347][T13185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1714'. [ 391.088593][T13203] netlink: 'syz.0.1720': attribute type 4 has an invalid length. [ 391.147213][T13206] netlink: 'syz.0.1720': attribute type 4 has an invalid length. [ 391.164023][T13205] netlink: 'syz.2.1722': attribute type 8 has an invalid length. [ 391.195382][T13205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1722'. [ 391.227932][T13209] netlink: 'syz.2.1722': attribute type 8 has an invalid length. [ 391.235724][T13209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1722'. [ 391.254806][T13205] bond0: entered promiscuous mode [ 391.284208][T13205] bond_slave_0: entered promiscuous mode [ 391.324685][T13205] bridge0: entered promiscuous mode [ 391.357691][T13205] gretap0: entered promiscuous mode [ 391.382815][T13205] bond0: left promiscuous mode [ 391.394963][T13205] bond_slave_0: left promiscuous mode [ 391.400553][T13205] bridge0: left promiscuous mode [ 391.441910][T13205] gretap0: left promiscuous mode [ 391.527335][T13209] bond0: entered promiscuous mode [ 391.542030][T13209] bond_slave_0: entered promiscuous mode [ 391.547956][T13209] bridge0: entered promiscuous mode [ 391.562575][T13209] gretap0: entered promiscuous mode [ 391.572276][T13209] bond0: left promiscuous mode [ 391.585570][T13209] bond_slave_0: left promiscuous mode [ 391.591523][T13209] bridge0: left promiscuous mode [ 391.626949][T13209] gretap0: left promiscuous mode [ 392.054120][T13229] sctp: [Deprecated]: syz.3.1729 (pid 13229) Use of int in max_burst socket option deprecated. [ 392.054120][T13229] Use struct sctp_assoc_value instead [ 392.833761][T13252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1737'. [ 392.856391][T13250] lo speed is unknown, defaulting to 1000 [ 392.876373][T13252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.911420][T13252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.454535][T13272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1742'. [ 393.862087][T13270] erspan0: left allmulticast mode [ 393.869791][T13270] erspan0: left promiscuous mode [ 393.875033][T13270] bridge1: port 1(erspan0) entered disabled state [ 393.894538][T13270] tipc: Resetting bearer [ 393.904654][T13270] bridge_slave_0: left allmulticast mode [ 393.911730][T13270] bridge_slave_0: left promiscuous mode [ 393.917549][T13270] pimreg1: port 1(bridge_slave_0) entered disabled state [ 394.026314][T13270] pimreg1: port 2(bridge_slave_1) entered disabled state [ 394.161688][T13270] bond0: (slave bond_slave_0): Releasing backup interface [ 394.332251][T13279] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1743'. [ 394.341645][T13270] team0: Port device team_slave_0 removed [ 394.383071][T13270] team0: Port device team_slave_1 removed [ 394.392061][T13270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.402249][T13270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.418345][T13270] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 394.610159][T13284] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1743'. [ 394.699483][T13286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1744'. [ 395.422442][T13293] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1746'. [ 395.704853][T13308] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 395.759850][T13312] sctp: [Deprecated]: syz.0.1751 (pid 13312) Use of int in max_burst socket option deprecated. [ 395.759850][T13312] Use struct sctp_assoc_value instead [ 395.782743][T13306] lo speed is unknown, defaulting to 1000 [ 396.485777][T13323] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1756'. [ 396.672730][T13325] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1756'. [ 397.104937][T13327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1757'. [ 399.212858][T13354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1766'. [ 399.613033][T13356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1767'. [ 399.675238][T13356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1767'. [ 400.036149][T13363] syzkaller1: entered promiscuous mode [ 400.046410][T13363] syzkaller1: entered allmulticast mode [ 400.095014][ T57] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 400.537186][T13371] lo speed is unknown, defaulting to 1000 [ 400.793392][T13362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.671858][T13392] syzkaller0: entered promiscuous mode [ 401.678169][T13392] syzkaller0: entered allmulticast mode [ 401.685829][T13394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1776'. [ 401.694816][T13394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1776'. [ 401.729163][T13394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1776'. [ 405.680998][T13398] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 406.743319][T13447] netlink: 'syz.3.1789': attribute type 1 has an invalid length. [ 406.802272][T13447] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1789'. [ 406.820036][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1789'. [ 406.828948][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1789'. [ 406.872333][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1789'. [ 406.920766][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1789'. [ 406.962835][T13450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1790'. [ 407.107263][T13450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1790'. [ 407.282809][T13459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1794'. [ 407.469213][T13457] lo speed is unknown, defaulting to 1000 [ 408.713490][T13491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1805'. [ 408.872816][T13495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1805'. [ 413.712993][T13560] lo speed is unknown, defaulting to 1000 [ 414.067178][T13572] __nla_validate_parse: 2 callbacks suppressed [ 414.067199][T13572] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1822'. [ 416.284699][T13628] netlink: 'syz.2.1828': attribute type 4 has an invalid length. [ 417.015658][T13645] bond14: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 417.176623][T13645] bond14 (unregistering): Released all slaves [ 417.666492][T13656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1835'. [ 418.534549][T13685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1845'. [ 419.374382][T13689] tipc: Failed to remove unknown binding: 66,0,0/8432298:2125261199/2125261200 [ 419.389820][T13689] tipc: Failed to remove unknown binding: 66,0,0/8432298:2125261199/2125261200 [ 419.433525][T13681] veth0: left allmulticast mode [ 419.439265][T13681] veth0: left promiscuous mode [ 419.445390][T13681] bridge0: port 3(veth0) entered disabled state [ 419.465773][T13681] bridge_slave_0: left allmulticast mode [ 419.472301][T13681] bridge_slave_0: left promiscuous mode [ 419.478103][T13681] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.521583][T13681] bridge_slave_1: left allmulticast mode [ 419.530836][T13681] bridge_slave_1: left promiscuous mode [ 419.552779][T13681] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.588195][T13681] .`: (slave bond_slave_0): Releasing backup interface [ 419.648822][T13681] .`: (slave bond_slave_1): Releasing backup interface [ 419.670789][T13681] team0: Port device team_slave_0 removed [ 419.689319][T13681] team0: Port device team_slave_1 removed [ 419.695987][T13681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.713671][T13681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.724084][T13681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.734104][T13681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.744621][T13681] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 419.788915][T13683] team0: Port device xfrm0 added [ 419.796606][T13687] tipc: Started in network mode [ 419.806962][T13687] tipc: Node identity 7e6cdd2f8721, cluster identity 4711 [ 419.817794][T13687] tipc: Enabled bearer , priority 0 [ 419.989900][ T57] tipc: Resetting bearer [ 420.524594][T13701] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 421.057507][T13701] bond7 (unregistering): Released all slaves [ 421.128747][ T6993] tipc: Node number set to 4182629679 [ 421.684188][T13731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1858'. [ 422.090496][T13739] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1859'. [ 422.223066][T13739] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1859'. [ 422.360775][T13745] netlink: 'syz.4.1862': attribute type 83 has an invalid length. [ 422.778391][T13758] netlink: 'syz.2.1867': attribute type 1 has an invalid length. [ 422.861225][T13758] 8021q: adding VLAN 0 to HW filter on device bond14 [ 422.883215][T13763] bond14: (slave geneve2): making interface the new active one [ 422.948779][T13763] bond14: (slave geneve2): Enslaving as an active interface with an up link [ 422.963394][ T6219] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.972624][ T6219] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.038966][ T6219] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.099332][ T6219] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.258696][T13770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1869'. [ 423.359593][T13768] 0: reclassify loop, rule prio 0, protocol 03 [ 423.498065][T13775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1872'. [ 423.580344][T13778] netlink: 'syz.1.1873': attribute type 10 has an invalid length. [ 423.639484][T13779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1872'. [ 423.814415][T13778] team0 (unregistering): left allmulticast mode [ 423.820748][T13778] bridge1: left allmulticast mode [ 423.825808][T13778] bridge2: left allmulticast mode [ 423.842901][T13778] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 423.850202][T13778] team0 (unregistering): left promiscuous mode [ 423.971968][T13778] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 424.628527][T13778] bridge0: port 1(team0) entered disabled state [ 424.745773][T13778] team0 (unregistering): Port device bridge1 removed [ 424.769920][T13778] team0 (unregistering): Port device bridge2 removed [ 424.817497][T13778] team0 (unregistering): Port device bridge3 removed [ 424.865934][T13778] team0 (unregistering): Port device netdevsim1 removed [ 424.979837][T13784] lo speed is unknown, defaulting to 1000 [ 425.260011][T13811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1878'. [ 425.618247][T13822] xt_cgroup: invalid path, errno=-2 [ 425.803768][T13829] netlink: 'syz.4.1884': attribute type 1 has an invalid length. [ 425.811648][T13829] netlink: 756 bytes leftover after parsing attributes in process `syz.4.1884'. [ 426.038210][T13832] tipc: Started in network mode [ 426.044670][T13832] tipc: Node identity , cluster identity 4711 [ 426.052376][T13832] tipc: Failed to obtain node identity [ 426.058661][T13832] tipc: Enabling of bearer rejected, failed to enable media [ 426.404437][T13844] pimreg1: port 1(macvlan2) entered blocking state [ 426.442146][T13844] pimreg1: port 1(macvlan2) entered disabled state [ 426.448864][T13844] macvlan2: entered allmulticast mode [ 426.509178][T13844] gretap0: entered allmulticast mode [ 426.532343][T13844] macvlan2: entered promiscuous mode [ 426.544599][T13844] pimreg1: port 1(macvlan2) entered blocking state [ 426.551270][T13844] pimreg1: port 1(macvlan2) entered forwarding state [ 426.587847][ T6323] pimreg1: port 1(macvlan2) entered disabled state [ 426.634801][T13849] syzkaller0: entered promiscuous mode [ 426.641238][T13849] syzkaller0: entered allmulticast mode [ 427.469009][T13874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1900'. [ 427.516321][T13874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1900'. [ 427.537527][T13876] syzkaller0: entered promiscuous mode [ 427.543050][T13876] syzkaller0: entered allmulticast mode [ 427.624852][T13878] syzkaller0: entered promiscuous mode [ 427.636512][T13878] syzkaller0: entered allmulticast mode [ 429.179557][T13837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 429.670970][T13896] netlink: 'syz.1.1908': attribute type 4 has an invalid length. [ 429.743897][T13899] netlink: 'syz.1.1908': attribute type 4 has an invalid length. [ 429.907930][T13903] syzkaller0: entered promiscuous mode [ 429.922752][T13903] syzkaller0: entered allmulticast mode [ 430.686525][T13921] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20000 [ 430.725393][T13908] syzkaller0: entered promiscuous mode [ 430.731913][T13908] syzkaller0: entered allmulticast mode [ 430.883079][T13924] netlink: 'syz.0.1914': attribute type 1 has an invalid length. [ 430.980315][T13924] 8021q: adding VLAN 0 to HW filter on device bond7 [ 431.050433][T13924] bond7: (slave gretap1): making interface the new active one [ 431.226429][T13924] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 431.295735][T13924] syz.0.1914 (13924) used greatest stack depth: 17664 bytes left [ 431.434279][T13939] syzkaller0: entered promiscuous mode [ 431.439807][T13939] syzkaller0: entered allmulticast mode [ 431.826222][T13953] netlink: 'syz.2.1926': attribute type 1 has an invalid length. [ 431.943769][T13953] 8021q: adding VLAN 0 to HW filter on device bond15 [ 432.016179][T13953] bond15: (slave veth25): Enslaving as an active interface with a down link [ 432.056397][T13953] netlink: 'syz.2.1926': attribute type 10 has an invalid length. [ 432.064290][T13953] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1926'. [ 432.266395][T13942] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1919'. [ 432.387559][T13966] syzkaller0: entered promiscuous mode [ 432.414298][T13966] syzkaller0: entered allmulticast mode [ 432.476329][T13970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1929'. [ 432.801669][T13982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1933'. [ 433.180138][T13972] syzkaller0: entered promiscuous mode [ 433.185754][T13972] syzkaller0: entered allmulticast mode [ 433.583255][T13994] syzkaller0: entered promiscuous mode [ 433.619485][T13994] syzkaller0: entered allmulticast mode [ 433.814733][T14004] syzkaller0: entered promiscuous mode [ 433.820283][T14004] syzkaller0: entered allmulticast mode [ 437.051246][T14043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1947'. [ 437.744086][T14062] bond16: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 437.781735][T14062] bond16 (unregistering): Released all slaves [ 437.886564][T14069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1953'. [ 438.047197][T14072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1953'. [ 438.162862][T14075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1954'. [ 438.265933][T14079] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1956'. [ 438.366765][T14083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1954'. [ 438.596113][T14089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1959'. [ 438.757436][T14092] syzkaller0: entered promiscuous mode [ 438.807595][T14092] syzkaller0: entered allmulticast mode [ 438.900806][T14103] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 439.123186][T14103] bond8 (unregistering): Released all slaves [ 440.000167][T14126] syzkaller0: entered promiscuous mode [ 440.005799][T14126] syzkaller0: entered allmulticast mode [ 440.285513][T14135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1972'. [ 440.652797][T14146] bond16: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 440.915601][T14151] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1975'. [ 441.022188][T14146] bond16 (unregistering): Released all slaves [ 441.078334][T14156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1975'. [ 441.833003][T14171] netlink: 'syz.2.1979': attribute type 1 has an invalid length. [ 441.932555][T14174] syzkaller0: entered promiscuous mode [ 441.938077][T14174] syzkaller0: entered allmulticast mode [ 442.542546][T14180] syzkaller0: entered promiscuous mode [ 442.555345][T14180] syzkaller0: entered allmulticast mode [ 442.700016][T14185] syzkaller0: entered promiscuous mode [ 442.714151][T14185] syzkaller0: entered allmulticast mode [ 443.012555][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1988'. [ 443.030824][T14195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1988'. [ 443.040567][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1988'. [ 443.053067][T14188] syzkaller0: entered promiscuous mode [ 443.053091][T14188] syzkaller0: entered allmulticast mode [ 443.070258][T14195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1988'. [ 443.234651][T14204] syzkaller0: entered promiscuous mode [ 443.240189][T14204] syzkaller0: entered allmulticast mode [ 443.373658][T14207] syzkaller0: entered promiscuous mode [ 443.411896][T14207] syzkaller0: entered allmulticast mode [ 443.429070][T14207] tipc: Enabled bearer , priority 0 [ 443.439357][T14206] tipc: Resetting bearer [ 443.672352][T14206] tipc: Disabling bearer [ 443.718640][T14217] syzkaller0: entered promiscuous mode [ 443.731229][T14217] syzkaller0: entered allmulticast mode [ 444.056031][T14218] syzkaller0: entered promiscuous mode [ 444.107561][T14218] syzkaller0: entered allmulticast mode [ 444.118814][T14227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1997'. [ 444.141507][T14225] netlink: 'syz.2.1996': attribute type 1 has an invalid length. [ 444.233690][T14225] 8021q: adding VLAN 0 to HW filter on device bond16 [ 444.275143][T14232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1997'. [ 447.220493][T14254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1999'. [ 447.422673][T14259] syzkaller0: entered promiscuous mode [ 447.454144][T14259] syzkaller0: entered allmulticast mode [ 447.591975][T14269] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 447.593265][ T6211] IPVS: starting estimator thread 0... [ 447.650753][T14265] syzkaller0: entered promiscuous mode [ 447.656288][T14265] syzkaller0: entered allmulticast mode [ 447.739372][T14274] IPVS: using max 27 ests per chain, 64800 per kthread [ 448.078342][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2006'. [ 448.098349][T14283] syzkaller0: entered promiscuous mode [ 448.107044][T14283] syzkaller0: entered allmulticast mode [ 448.264986][T14285] syzkaller0: entered promiscuous mode [ 448.271643][T14285] syzkaller0: entered allmulticast mode [ 448.384074][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'. [ 448.451911][T14296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2011'. [ 448.564867][T14303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2011'. [ 448.889532][T14315] syzkaller0: entered promiscuous mode [ 448.895169][T14315] syzkaller0: entered allmulticast mode [ 448.913103][T14307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2014'. [ 448.927829][T14315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2013'. [ 449.493665][T14289] syzkaller0: entered promiscuous mode [ 449.617069][T14289] syzkaller0: entered allmulticast mode [ 453.829812][T14375] syzkaller0: entered promiscuous mode [ 453.842487][T14375] syzkaller0: entered allmulticast mode [ 453.911839][T14381] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 453.924682][T14379] syzkaller0: entered promiscuous mode [ 453.930207][T14379] syzkaller0: entered allmulticast mode [ 453.977093][T14381] syzkaller0: entered promiscuous mode [ 453.984387][T14381] syzkaller0: entered allmulticast mode [ 454.514324][T14397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2029'. [ 454.736283][T14404] sctp: [Deprecated]: syz.2.2032 (pid 14404) Use of int in max_burst socket option. [ 454.736283][T14404] Use struct sctp_assoc_value instead [ 455.189898][T14415] syzkaller0: entered promiscuous mode [ 455.202645][T14415] syzkaller0: entered allmulticast mode [ 455.324180][T14418] syzkaller0: entered promiscuous mode [ 455.329724][T14418] syzkaller0: entered allmulticast mode [ 456.252343][T14422] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 456.274541][T14422] bond8 (unregistering): Released all slaves [ 456.377328][T14423] lo speed is unknown, defaulting to 1000 [ 456.736944][T14444] tipc: Enabled bearer , priority 0 [ 456.771202][T14444] syzkaller0: entered promiscuous mode [ 456.776712][T14444] syzkaller0: entered allmulticast mode [ 457.047277][T14444] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 457.232793][T14452] tipc: Resetting bearer [ 457.359996][T14443] tipc: Resetting bearer [ 457.422452][T14443] tipc: Disabling bearer [ 457.620926][T14456] nbd: socks must be embedded in a SOCK_ITEM attr [ 457.666146][T14456] block nbd2: shutting down sockets [ 457.727113][T14466] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2049'. [ 457.746248][T14469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2048'. [ 457.787034][T14470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2050'. [ 457.963301][T14473] syzkaller0: entered promiscuous mode [ 457.968829][T14473] syzkaller0: entered allmulticast mode [ 458.140934][T14483] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2053'. [ 458.611243][T14492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2053'. [ 458.928359][T14476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 459.348201][T14499] syzkaller0: entered promiscuous mode [ 459.369581][T14499] syzkaller0: entered allmulticast mode [ 459.443155][T14499] TC_ACT_REPEAT abuse ? [ 459.770451][T14505] syzkaller0: entered promiscuous mode [ 459.775978][T14505] syzkaller0: entered allmulticast mode [ 460.482968][T14512] bond17: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 460.680514][T14512] bond17 (unregistering): Released all slaves [ 461.197999][T14523] lo speed is unknown, defaulting to 1000 [ 461.434707][T14535] syzkaller0: entered promiscuous mode [ 461.440337][T14535] syzkaller0: entered allmulticast mode [ 461.480590][T14535] tipc: Started in network mode [ 461.485523][T14535] tipc: Node identity 86b62044b991, cluster identity 4711 [ 461.529458][T14535] tipc: Enabled bearer , priority 0 [ 461.765237][T14542] syzkaller0: entered promiscuous mode [ 461.770787][T14542] syzkaller0: entered allmulticast mode [ 461.789667][T14537] tipc: Resetting bearer [ 461.902483][T14534] tipc: Resetting bearer [ 461.928849][T14546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2066'. [ 462.073192][T14534] tipc: Disabling bearer [ 463.483203][T14550] syzkaller0: entered promiscuous mode [ 463.490546][T14550] syzkaller0: entered allmulticast mode [ 463.523972][T14563] tipc: Enabling of bearer rejected, failed to enable media [ 463.542175][T14563] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2068'. [ 463.788467][T14482] Set syz1 is full, maxelem 65536 reached [ 463.884184][T14569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2069'. [ 467.120149][T14608] GUP no longer grows the stack in syz.3.2074 (14608): 200000003000-20000000a000 (200000001000) [ 467.131026][T14608] CPU: 1 UID: 0 PID: 14608 Comm: syz.3.2074 Not tainted syzkaller #0 PREEMPT(full) [ 467.131055][T14608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 467.131082][T14608] Call Trace: [ 467.131091][T14608] [ 467.131101][T14608] dump_stack_lvl+0xe8/0x150 [ 467.131144][T14608] __get_user_pages+0x238c/0x2720 [ 467.131175][T14608] ? __gup_longterm_locked+0xc3b/0x15c0 [ 467.131233][T14608] __gup_longterm_locked+0xd52/0x15c0 [ 467.131264][T14608] ? lock_acquire+0x106/0x350 [ 467.131315][T14608] gup_fast_fallback+0x1d8c/0x20e0 [ 467.131376][T14608] ? __pfx_gup_fast_fallback+0x10/0x10 [ 467.131403][T14608] ? futex_unqueue+0x22/0x240 [ 467.131436][T14608] ? is_valid_gup_args+0x11f/0x200 [ 467.131472][T14608] ? get_user_pages_fast+0x4d/0xb0 [ 467.131500][T14608] __iov_iter_get_pages_alloc+0x378/0xa40 [ 467.131544][T14608] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 467.131574][T14608] iov_iter_get_pages2+0x5e/0xa0 [ 467.131614][T14608] __se_sys_vmsplice+0x7b5/0x1660 [ 467.131671][T14608] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 467.131707][T14608] ? __pfx_futex_wait+0x10/0x10 [ 467.131766][T14608] ? 0xffffffffff600000 [ 467.131825][T14608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.131851][T14608] do_syscall_64+0x174/0x580 [ 467.131882][T14608] ? trace_irq_disable+0x3b/0x140 [ 467.131913][T14608] ? clear_bhb_loop+0x40/0x90 [ 467.131942][T14608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.131965][T14608] RIP: 0033:0x7fb82199e019 [ 467.131985][T14608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.132005][T14608] RSP: 002b:00007fb8228bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 467.132030][T14608] RAX: ffffffffffffffda RBX: 00007fb821c25fa0 RCX: 00007fb82199e019 [ 467.132046][T14608] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 467.132062][T14608] RBP: 00007fb821a3500c R08: 0000000000000000 R09: 0000000000000000 [ 467.132076][T14608] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 467.132090][T14608] R13: 00007fb821c26038 R14: 00007fb821c25fa0 R15: 00007ffcf45704a8 [ 467.132127][T14608] [ 467.747818][T14617] vlan3: entered promiscuous mode [ 467.768989][T14617] bond0: entered promiscuous mode [ 467.796670][T14617] bond_slave_1: entered promiscuous mode [ 467.938340][T14615] tipc: Resetting bearer [ 467.951794][T14615] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 467.984679][T14631] tipc: Enabled bearer , priority 0 [ 467.992234][T14631] syzkaller0: entered promiscuous mode [ 467.997720][T14631] syzkaller0: entered allmulticast mode [ 468.093505][T14631] tipc: Resetting bearer [ 468.107877][T14630] tipc: Resetting bearer [ 468.123665][T14630] tipc: Disabling bearer [ 468.282074][T14636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2082'. [ 468.814200][T14645] netlink: 'syz.2.2086': attribute type 1 has an invalid length. [ 468.831930][T14645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2086'. [ 468.849034][T14645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2086'. [ 468.857924][T14645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2086'. [ 468.960284][T14645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2086'. [ 468.969232][T14645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2086'. [ 469.229775][T14643] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 469.360338][T14643] bond8 (unregistering): Released all slaves [ 469.851037][T14675] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2091'. [ 469.998229][T14664] syzkaller0: entered promiscuous mode [ 470.003759][T14664] syzkaller0: entered allmulticast mode [ 470.342830][T14683] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2093'. [ 473.430941][T14687] tipc: Resetting bearer [ 473.466144][T14687] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 473.642734][T14688] syzkaller0: entered promiscuous mode [ 473.649096][T14688] syzkaller0: entered allmulticast mode [ 473.658469][T14706] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2098'. [ 477.312089][T14757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2108'. [ 477.537479][T14744] lo speed is unknown, defaulting to 1000 [ 477.654020][T14766] netlink: 'syz.0.2109': attribute type 1 has an invalid length. [ 477.671295][T14766] netlink: 756 bytes leftover after parsing attributes in process `syz.0.2109'. [ 477.787723][T14761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2108'. [ 479.604363][T14794] netlink: 'syz.2.2113': attribute type 9 has an invalid length. [ 479.612150][T14794] netlink: 'syz.2.2113': attribute type 6 has an invalid length. [ 479.619899][T14794] netlink: 'syz.2.2113': attribute type 7 has an invalid length. [ 479.627722][T14794] netlink: 'syz.2.2113': attribute type 8 has an invalid length. [ 482.400703][T14820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2120'. [ 482.512133][T14818] netlink: 'syz.2.2119': attribute type 5 has an invalid length. [ 482.518526][T14827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2121'. [ 482.613118][T14827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2121'. [ 483.206862][T14838] gre0: left allmulticast mode [ 483.293204][T14840] syzkaller0: entered promiscuous mode [ 483.300834][T14840] syzkaller0: entered allmulticast mode [ 483.616708][T14842] syzkaller0: entered promiscuous mode [ 483.622248][T14842] syzkaller0: entered allmulticast mode [ 483.638027][T14842] tipc: Enabled bearer , priority 0 [ 483.658667][T14842] tipc: Resetting bearer [ 483.673119][T14841] tipc: Resetting bearer [ 483.731677][T14841] tipc: Disabling bearer [ 483.929829][T14851] syzkaller0: entered promiscuous mode [ 483.936069][T14851] syzkaller0: entered allmulticast mode [ 484.019525][T14851] tipc: Started in network mode [ 484.024494][T14851] tipc: Node identity d6171e097822, cluster identity 4711 [ 484.031905][T14851] tipc: Enabled bearer , priority 0 [ 484.045393][T14851] tipc: Resetting bearer [ 484.058396][T14850] tipc: Resetting bearer [ 484.181629][T14850] tipc: Disabling bearer [ 484.657270][T14864] syzkaller0: entered promiscuous mode [ 484.664060][T14864] syzkaller0: entered allmulticast mode [ 484.676224][T14864] tipc: Enabled bearer , priority 0 [ 484.699455][T14864] tipc: Resetting bearer [ 484.805195][T14863] tipc: Resetting bearer [ 484.832871][T14863] tipc: Disabling bearer [ 485.012359][T14866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2134'. [ 485.139898][T14868] syzkaller0: entered promiscuous mode [ 485.145427][T14868] syzkaller0: entered allmulticast mode [ 485.160897][T14868] tipc: Enabled bearer , priority 0 [ 485.205310][T14868] tipc: Resetting bearer [ 485.346437][T14867] tipc: Resetting bearer [ 485.418366][T14881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2134'. [ 485.462055][T14867] tipc: Disabling bearer [ 485.470332][T14880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2138'. [ 485.557115][T14873] lo speed is unknown, defaulting to 1000 [ 485.581889][T14885] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2140'. [ 485.600166][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2140'. [ 486.992141][T14905] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 487.142767][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2147'. [ 487.185331][T14901] tipc: Resetting bearer [ 487.190934][T14901] tipc: Resetting bearer [ 487.196510][T14901] batadv0: entered promiscuous mode [ 487.212686][T14901] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 487.228433][T14907] bridge_slave_1: left allmulticast mode [ 487.234100][T14907] bridge_slave_1: left promiscuous mode [ 487.239912][T14907] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.352490][T14907] bridge_slave_0: left allmulticast mode [ 487.371791][T14907] bridge_slave_0: left promiscuous mode [ 487.399422][T14907] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.697998][T14907] bond0: (slave bridge0): Releasing backup interface [ 487.831169][T14922] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2152'. [ 487.995836][T14922] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2152'. [ 488.129008][T14928] lo speed is unknown, defaulting to 1000 [ 488.277633][T14935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2153'. [ 488.566742][T14935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2153'. [ 488.768833][T14949] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 489.229647][T14952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2159'. [ 489.692369][T14954] bond9: (slave macvlan1): Enslaving as an active interface with an up link [ 489.770741][T14952] bond9 (unregistering): (slave macvlan1): Releasing backup interface [ 489.789891][T14952] bond9 (unregistering): Released all slaves [ 489.861424][T14961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.298652][T14965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.647492][T14978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2165'. [ 490.891068][T14985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2165'. [ 490.913629][T14990] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2165'. [ 491.207687][T15000] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2168'. [ 491.314281][T14995] bridge0: entered allmulticast mode [ 491.567370][T15002] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2168'. [ 491.777152][T15005] lo speed is unknown, defaulting to 1000 [ 491.894101][T15008] syzkaller0: entered promiscuous mode [ 491.922056][T15008] syzkaller0: entered allmulticast mode [ 492.043515][T15017] lo speed is unknown, defaulting to 1000 [ 493.719517][T15037] tipc: Resetting bearer [ 493.749140][T15037] team0: Port device xfrm0 removed [ 493.755555][T15037] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 493.990899][T15040] lo speed is unknown, defaulting to 1000 [ 501.150187][ C1] sched: DL replenish lagged too much [ 598.858798][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 598.865804][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15030/1:b..l [ 598.874325][ C0] rcu: (detected by 0, t=10506 jiffies, g=72981, q=1863 ncpus=2) [ 598.882162][ C0] task:syz.1.2175 state:R running task stack:25864 pid:15030 tgid:15029 ppid:5622 task_flags:0x400140 flags:0x00080000 [ 598.896575][ C0] Call Trace: [ 598.899923][ C0] [ 598.902985][ C0] __schedule+0x17d9/0x56c0 [ 598.907642][ C0] ? irqentry_exit+0x218/0x8f0 [ 598.912450][ C0] ? __pfx___schedule+0x10/0x10 [ 598.917345][ C0] ? finish_fault+0xf7a/0x1220 [ 598.922134][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 598.927542][ C0] preempt_schedule_common+0x82/0xd0 [ 598.932874][ C0] preempt_schedule_thunk+0x16/0x40 [ 598.938126][ C0] _raw_spin_unlock+0x3f/0x50 [ 598.942921][ C0] finish_fault+0xf7a/0x1220 [ 598.947733][ C0] ? shmem_fault+0x270/0x390 [ 598.952370][ C0] ? do_pte_missing+0x140c/0x34b0 [ 598.957421][ C0] do_pte_missing+0x223d/0x34b0 [ 598.962309][ C0] ? handle_mm_fault+0xec/0x3080 [ 598.967284][ C0] handle_mm_fault+0x1b36/0x3080 [ 598.972278][ C0] ? handle_mm_fault+0xec/0x3080 [ 598.977251][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 598.982562][ C0] ? follow_page_pte+0x6ce/0xe70 [ 598.987583][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 598.992916][ C0] __get_user_pages+0x1678/0x2720 [ 598.998014][ C0] populate_vma_page_range+0x2be/0x3c0 [ 599.003513][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 599.009530][ C0] ? down_read+0x2be/0x330 [ 599.013994][ C0] __mm_populate+0x25f/0x390 [ 599.018633][ C0] ? __pfx___mm_populate+0x10/0x10 [ 599.023791][ C0] vm_mmap_pgoff+0x353/0x4e0 [ 599.028441][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 599.033597][ C0] ? rcu_is_watching+0x15/0xb0 [ 599.038393][ C0] ? ksys_mmap_pgoff+0xf3/0x760 [ 599.043298][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 599.048206][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.054317][ C0] do_syscall_64+0x174/0x580 [ 599.058958][ C0] ? clear_bhb_loop+0x40/0x90 [ 599.063668][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.069588][ C0] RIP: 0033:0x7fac97d9e019 [ 599.074032][ C0] RSP: 002b:00007fac98bfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 599.082474][ C0] RAX: ffffffffffffffda RBX: 00007fac98025fa0 RCX: 00007fac97d9e019 [ 599.090470][ C0] RDX: b635773f07ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 599.098471][ C0] RBP: 00007fac97e3500c R08: ffffffffffffffff R09: 00000000215eb000 [ 599.106472][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 599.114489][ C0] R13: 00007fac98026038 R14: 00007fac98025fa0 R15: 00007ffcba243008 [ 599.122502][ C0] [ 599.125557][ C0] rcu: rcu_preempt kthread starved for 2603 jiffies! g72981 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 599.136687][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 599.146676][ C0] rcu: RCU grace-period kthread stack dump: [ 599.152762][ C0] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 599.166484][ C0] Call Trace: [ 599.169787][ C0] [ 599.172765][ C0] __schedule+0x17d9/0x56c0 [ 599.177305][ C0] ? __lock_acquire+0x683/0x2cf0 [ 599.182323][ C0] ? __pfx___schedule+0x10/0x10 [ 599.187216][ C0] ? schedule+0x90/0x2b0 [ 599.191498][ C0] schedule+0x164/0x2b0 [ 599.195695][ C0] schedule_timeout+0x152/0x2c0 [ 599.200589][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 599.206088][ C0] ? __pfx_process_timeout+0x10/0x10 [ 599.211424][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 599.217268][ C0] ? prepare_to_swait_event+0x322/0x350 [ 599.222847][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 599.227749][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 599.233937][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 599.239259][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 599.244505][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 599.250354][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 599.254995][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 599.260236][ C0] ? __kthread_parkme+0x71/0x1f0 [ 599.265218][ C0] ? __kthread_parkme+0x196/0x1f0 [ 599.270291][ C0] kthread+0x388/0x470 [ 599.274756][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 599.280000][ C0] ? __pfx_kthread+0x10/0x10 [ 599.284642][ C0] ret_from_fork+0x514/0xb70 [ 599.289278][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 599.294436][ C0] ? __switch_to+0xc89/0x1420 [ 599.299153][ C0] ? __pfx_kthread+0x10/0x10 [ 599.303812][ C0] ret_from_fork_asm+0x1a/0x30 [ 599.308631][ C0] [ 599.311679][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 599.318046][ C0] CPU: 0 UID: 0 PID: 644 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 599.327443][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 599.337529][ C0] Workqueue: krds_cp_wq#2/0 rds_connect_worker [ 599.343723][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 599.349039][ C0] Code: ff ff ff e8 61 5f 2f 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 4b 4a ca 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 78 15 b8 [ 599.368666][ C0] RSP: 0018:ffffc90000006d80 EFLAGS: 00000282 [ 599.374754][ C0] RAX: a0eba68a69e61f00 RBX: 0000000000000000 RCX: 0000000080000100 [ 599.382749][ C0] RDX: 00000000a42637f2 RSI: ffffffff8e4b625f RDI: ffffffff8c4bdd80 [ 599.390744][ C0] RBP: ffffffff8177927f R08: ffffffff8177927f R09: 0000000000000000 [ 599.398759][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000002 [ 599.406750][ C0] R13: ffffffff8eb59c60 R14: 0000000000000000 R15: 0000000000000246 [ 599.414834][ C0] FS: 0000000000000000(0000) GS:ffff888124f4f000(0000) knlGS:0000000000000000 [ 599.423788][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 599.430421][ C0] CR2: 00007fb822879ff8 CR3: 000000000e946000 CR4: 00000000003526f0 [ 599.438423][ C0] Call Trace: [ 599.441726][ C0] [ 599.444591][ C0] ? net_rx_action+0x61d/0xf50 [ 599.449393][ C0] ? unwind_next_frame+0x8f/0x2550 [ 599.454544][ C0] unwind_next_frame+0xac/0x2550 [ 599.459509][ C0] ? unwind_next_frame+0x8f/0x2550 [ 599.464655][ C0] ? __napi_poll+0xaa/0x330 [ 599.469217][ C0] ? unwind_next_frame+0x8f/0x2550 [ 599.474363][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 599.481007][ C0] arch_stack_walk+0x11b/0x150 [ 599.485843][ C0] ? net_rx_action+0x61d/0xf50 [ 599.490655][ C0] stack_trace_save+0xa9/0x100 [ 599.495458][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 599.500874][ C0] ? stack_depot_save_flags+0x33/0x800 [ 599.506383][ C0] kasan_save_track+0x3e/0x80 [ 599.511124][ C0] ? kasan_save_track+0x3e/0x80 [ 599.516023][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 599.521105][ C0] ? kmem_cache_alloc_node_noprof+0x355/0x610 [ 599.527218][ C0] ? __alloc_skb+0x276/0x7a0 [ 599.531847][ C0] ? synproxy_send_client_synack+0x175/0xde0 [ 599.538005][ C0] ? nft_synproxy_eval_v4+0x362/0x4e0 [ 599.543425][ C0] ? nft_synproxy_do_eval+0x335/0x550 [ 599.548835][ C0] ? nft_do_chain+0x48d/0x1b10 [ 599.553639][ C0] ? nft_do_chain_inet+0x360/0x4b0 [ 599.558801][ C0] ? nf_hook_slow+0xc5/0x220 [ 599.563437][ C0] ? NF_HOOK+0x21f/0x3c0 [ 599.567745][ C0] ? NF_HOOK+0x336/0x3c0 [ 599.572035][ C0] ? process_backlog+0xa34/0x1860 [ 599.577113][ C0] ? __napi_poll+0xaa/0x330 [ 599.581662][ C0] ? net_rx_action+0x61d/0xf50 [ 599.586587][ C0] __kasan_slab_alloc+0x6c/0x80 [ 599.591484][ C0] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 599.597595][ C0] kmem_cache_alloc_node_noprof+0x355/0x610 [ 599.603521][ C0] ? local_lock_release+0x9c/0x160 [ 599.608660][ C0] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 599.614769][ C0] ? __alloc_skb+0x276/0x7a0 [ 599.619401][ C0] ? __alloc_skb+0x276/0x7a0 [ 599.624031][ C0] __alloc_skb+0x276/0x7a0 [ 599.628495][ C0] synproxy_send_client_synack+0x175/0xde0 [ 599.634353][ C0] ? lock_acquire+0x106/0x350 [ 599.639080][ C0] ? synproxy_pernet+0x45/0x270 [ 599.643984][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 599.650355][ C0] ? nft_socket_init+0x50/0x3c0 [ 599.655255][ C0] ? synproxy_pernet+0x45/0x270 [ 599.660156][ C0] nft_synproxy_eval_v4+0x362/0x4e0 [ 599.665487][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 599.671248][ C0] ? nf_ip_checksum+0x13c/0x510 [ 599.676148][ C0] nft_synproxy_do_eval+0x335/0x550 [ 599.681388][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 599.687148][ C0] ? nft_do_chain+0x28c/0x1b10 [ 599.691957][ C0] nft_do_chain+0x48d/0x1b10 [ 599.696606][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 599.701674][ C0] ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10 [ 599.707650][ C0] nft_do_chain_inet+0x360/0x4b0 [ 599.712643][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 599.718173][ C0] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 599.723608][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 599.729125][ C0] nf_hook_slow+0xc5/0x220 [ 599.733595][ C0] NF_HOOK+0x21f/0x3c0 [ 599.737709][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 599.743746][ C0] ? NF_HOOK+0x9e/0x3c0 [ 599.747933][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 599.752547][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 599.758568][ C0] ? ip_local_deliver+0x113/0x190 [ 599.763641][ C0] NF_HOOK+0x336/0x3c0 [ 599.767767][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 599.773018][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 599.778178][ C0] ? NF_HOOK+0x9e/0x3c0 [ 599.782382][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 599.787029][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 599.792187][ C0] ? ip_rcv_core+0x88d/0xd50 [ 599.796829][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 599.801380][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 599.805939][ C0] process_backlog+0xa34/0x1860 [ 599.810833][ C0] ? process_backlog+0x3c3/0x1860 [ 599.815898][ C0] ? __lock_acquire+0x683/0x2cf0 [ 599.820888][ C0] __napi_poll+0xaa/0x330 [ 599.825255][ C0] net_rx_action+0x61d/0xf50 [ 599.829890][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 599.835032][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 599.840132][ C0] ? net_tx_action+0xbff/0xc30 [ 599.844948][ C0] handle_softirqs+0x225/0x840 [ 599.849757][ C0] ? __irq_exit_rcu+0xca/0x220 [ 599.854568][ C0] __irq_exit_rcu+0xca/0x220 [ 599.859202][ C0] irq_exit_rcu+0x9/0x30 [ 599.863487][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 599.869166][ C0] [ 599.872130][ C0] [ 599.875081][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 599.881084][ C0] RIP: 0010:qlist_free_all+0x6f/0x100 [ 599.886482][ C0] Code: 49 8b 44 04 08 89 c2 83 e2 01 48 ff ca 48 09 c2 48 21 ca 0f b6 42 33 c1 e0 18 3d 00 00 00 f5 49 0f 45 d5 4c 8b 62 08 49 8b 2f <49> 63 84 24 b8 00 00 00 49 29 c7 4c 89 e7 4c 89 fe e8 5b e4 ff ff [ 599.906112][ C0] RSP: 0018:ffffc900041176c0 EFLAGS: 00000246 [ 599.912213][ C0] RAX: 00000000f5000000 RBX: ffffc900041176f8 RCX: ffffea000133cac0 [ 599.920217][ C0] RDX: ffffea000133ca00 RSI: ffffffff8e23117e RDI: ffff88804cf2b400 [ 599.928220][ C0] RBP: ffff88804e2afdc0 R08: ffffffff9057a637 R09: 1ffffffff20af4c6 [ 599.936233][ C0] R10: dffffc0000000000 R11: fffffbfff20af4c7 R12: ffff88801f6b7b40 [ 599.944232][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88804cf2b400 [ 599.952248][ C0] kasan_quarantine_reduce+0x148/0x160 [ 599.957749][ C0] __kasan_slab_alloc+0x22/0x80 [ 599.962650][ C0] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 599.968149][ C0] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 599.973832][ C0] ? sk_prot_alloc+0x57/0x210 [ 599.978552][ C0] ? sk_prot_alloc+0x57/0x210 [ 599.983276][ C0] sk_prot_alloc+0x57/0x210 [ 599.987809][ C0] ? sk_alloc+0x27/0x390 [ 599.992088][ C0] sk_alloc+0x3a/0x390 [ 599.996201][ C0] inet_create+0x7a9/0xff0 [ 600.000663][ C0] ? inet_create+0x9d/0xff0 [ 600.005381][ C0] __sock_create+0x4b3/0x9d0 [ 600.010013][ C0] rds_tcp_conn_path_connect+0x2d8/0x920 [ 600.015690][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 600.021884][ C0] ? irqentry_exit+0x218/0x8f0 [ 600.026686][ C0] ? trace_irq_disable+0x3b/0x140 [ 600.031751][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 600.037509][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 600.043281][ C0] rds_connect_worker+0x1d8/0x290 [ 600.048349][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 600.054101][ C0] process_scheduled_works+0xa8e/0x14e0 [ 600.059718][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 600.065744][ C0] ? assign_work+0x3cf/0x5d0 [ 600.070379][ C0] worker_thread+0xa47/0xfb0 [ 600.075014][ C0] ? __kthread_parkme+0x71/0x1f0 [ 600.080002][ C0] kthread+0x388/0x470 [ 600.084106][ C0] ? __pfx_worker_thread+0x10/0x10 [ 600.089241][ C0] ? __pfx_kthread+0x10/0x10 [ 600.093870][ C0] ret_from_fork+0x514/0xb70 [ 600.098512][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 600.103666][ C0] ? __switch_to+0xc89/0x1420 [ 600.108470][ C0] ? __pfx_kthread+0x10/0x10 [ 600.113110][ C0] ret_from_fork_asm+0x1a/0x30 [ 600.117925][ C0]