last executing test programs: 3m56.17255245s ago: executing program 4 (id=2086): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYRESDEC=r1], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1e, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x35, &(0x7f0000000340)=0x2, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@getchain={0x54, 0x66, 0x109, 0x0, 0x0, {}, [{0x8}, {0x4}, {0x8}, {0x8}, {0x8}, {0x8}]}, 0x54}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400002cb008160020002dbd700011dbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x4040000) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000309000000000000004000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x40088c0}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3m55.076613842s ago: executing program 4 (id=2102): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x7a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200)=0xffffffffffffffff, 0x12) sendfile(r1, r0, 0x0, 0xbdc4) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x2b, 0x80801, 0x1) (async) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r3, 0x11e, 0x17, 0x0, 0x0) (async) setsockopt$inet6_mtu(r3, 0x11e, 0x17, 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=r4, @ANYRES8=r2, @ANYRES64, @ANYRESHEX=r4, @ANYRES16=r3, @ANYRES8=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x9b, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) (async) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x37, 0xd416a90e1556646a}, 0x20) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x37, 0xd416a90e1556646a}, 0x20) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r7, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r7, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r9}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r6, @ANYBLOB="65b40274657df018748b563ba2be25eef1b3612cc1a925867033761c480a99653a05e3bcf03024854e845c718e79740fdbebfed606d2b56ce315b2df1a8a7693de7f91865f811b27298ed534c48145a46364d1e47e0827641ce6fd2012556793191367233dbe51efffd5bb383303880ac8ca4cb1a784294dc271"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r6, @ANYBLOB="65b40274657df018748b563ba2be25eef1b3612cc1a925867033761c480a99653a05e3bcf03024854e845c718e79740fdbebfed606d2b56ce315b2df1a8a7693de7f91865f811b27298ed534c48145a46364d1e47e0827641ce6fd2012556793191367233dbe51efffd5bb383303880ac8ca4cb1a784294dc271"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 3m54.712786333s ago: executing program 4 (id=2107): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async, rerun: 64) r3 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) (async) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000dc0)=@deltfilter={0x1f50, 0x2d, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x2}, {0xfff2, 0xffff}, {0xd, 0xd}}, [@f_rsvp6={{0xa}, {0x3c, 0x2, [@TCA_RSVP_POLICE={0x38, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9dea}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffff800}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000001}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7f}]}]}}, @f_tcindex={{0xc}, {0x4}}, @f_tcindex={{0xc}, {0xdec, 0x2, [@TCA_TCINDEX_POLICE={0x428, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0xf}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0xfffffff9, 0x5, 0x7f80000, 0x9, 0x80000001, 0x6732, 0x80000000, 0x7, 0x0, 0x4, 0x9, 0x10000, 0xffff, 0x5, 0x8, 0x4, 0x8d3, 0x80000000, 0x25, 0x4, 0x10000, 0x6, 0x6, 0x1c1f, 0x10, 0xb, 0x8001, 0x414, 0x3, 0x0, 0x2, 0x3, 0x40, 0xfffffffb, 0x80, 0xd33, 0x1ff, 0x1, 0x0, 0xb6c, 0x5, 0x8f, 0x5, 0x7, 0x4, 0xb6f1, 0x3, 0x2, 0x1800000, 0x80000001, 0x99, 0x80, 0x4, 0x2, 0xd, 0xf21, 0xffff8001, 0xfffffffa, 0x1, 0x2, 0xe, 0x10, 0x101, 0x30af, 0xcf5e, 0x3ff, 0x140, 0x1, 0x8001, 0x0, 0x5, 0x1, 0x6, 0x2, 0x3a6, 0x8, 0x3, 0x1, 0xffffff14, 0x2, 0x9, 0x5, 0x0, 0x7fff, 0xf4, 0x3, 0x3, 0x7fffffff, 0x2, 0x3, 0x5, 0x400, 0x3, 0x10001, 0x101, 0x5, 0x2d, 0xb1, 0x483, 0x1, 0x322, 0x80000001, 0x8, 0x1, 0x3, 0x4, 0x1ef9, 0x3, 0x9, 0xeff, 0x6, 0xffff, 0x90bc, 0xff, 0x7, 0x9, 0x1, 0x0, 0x1, 0x10000, 0xb46, 0x9, 0x40, 0xffffff7f, 0x1, 0x400, 0x0, 0x6, 0xffff113d, 0x0, 0x1, 0xfffffffc, 0x7, 0x9, 0x6, 0xfffffe01, 0x9, 0x5, 0x8, 0x3ff, 0x1, 0xffffff01, 0xfffffffc, 0x9, 0x4593, 0xfffffff7, 0x2, 0x0, 0x3, 0x3, 0xfffffffc, 0x3, 0x7da, 0xda5, 0x3, 0x10001, 0x400, 0x1, 0x7, 0x9, 0x8, 0x9e, 0x0, 0x9, 0x3, 0x7, 0x9, 0x4, 0x4, 0xdb7, 0xf, 0x11a4, 0xa941, 0x3, 0x7, 0x5, 0x9, 0x10, 0x2, 0x2, 0xfffffff7, 0x1fe7, 0xb24, 0xd, 0x9, 0x10001, 0x904, 0x9, 0x2, 0x57a, 0xfffffff7, 0x2, 0x115, 0xfffffff9, 0xfff, 0xff, 0x294, 0x5, 0x40, 0x9, 0x1, 0x40, 0x4, 0x8000, 0x1, 0x3, 0xd, 0x9, 0x2, 0x0, 0x5, 0x9, 0x2, 0x4, 0x7, 0xe6, 0x2, 0x6, 0x4, 0x4, 0x5a4574c5, 0xfff00000, 0x6cf5219c, 0x7, 0x6, 0x5684d3f6, 0x5, 0x0, 0x3, 0x1, 0x0, 0x0, 0x2, 0x9, 0x0, 0x1, 0x80000000, 0x6, 0xcf0, 0x7, 0x0, 0x1, 0x2, 0xffffff26, 0x1, 0x1, 0x6, 0x8, 0x3, 0xfffffffc, 0x4, 0x1, 0x9, 0x4, 0x2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffc00}]}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xd, 0xffff}}, @TCA_TCINDEX_ACT={0x9a0, 0x7, [@m_xt={0x104, 0x16, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0xb8, 0x6, "b35779ea8ed866a04d6f232b10a9e40ebfe4dca9108c8c049729b3750b2d85ef8a4d0c08081c02e43dcdc50a9fc9e985f10ac40d6bc43d2d282b4715e373cc1c54b1919a226463ad0c0d271fcf059e31971acdaf88848dfbfab253e13877fa37e77d8ef8674d35252b2c99d28fa5580d2eb6ed513dda5c499dbebef25c55297663c326bf1a553ff38047c07b866f012a8d59a19ed7c003236d30c7a55b3c3e05d4ec134a84c0f48ed4da9bd326391f02c897e438"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x898, 0xe, 0x0, 0x0, {{0xb}, {0x834, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x5, 0x1, 0x8000, 0x5, 0x1, 0x2, 0xc, 0x400, 0x9, 0x0, 0x5, 0x5, 0xc29, 0xb, 0x9, 0xb, 0x4, 0xd, 0x10000, 0x1ff, 0x80000001, 0xfffffffe, 0xa, 0x80000001, 0x80000000, 0x4, 0x1, 0xf, 0xb, 0x2, 0xdcef, 0x7, 0x100, 0xffff, 0x7fff, 0x3, 0xd8, 0x1, 0x7, 0x67, 0x7, 0x8, 0x5, 0x8, 0x7, 0xc7b7, 0xccc, 0x7, 0x0, 0x7f, 0xe36c, 0xfb5bb6c, 0x800, 0x6, 0x3, 0x4, 0x2, 0x7fffffff, 0x5, 0xc, 0xffff8001, 0x6, 0x7f, 0x4, 0x5, 0x7, 0x0, 0x3, 0x0, 0xc, 0x6, 0xc, 0x9, 0x1, 0x0, 0xd, 0xf, 0x8000, 0x7, 0xbf05d78e, 0xce0, 0xf, 0xc899, 0x7fffffff, 0xfffffffc, 0x6, 0x2, 0xe70b, 0xffff, 0x2, 0x5, 0x1, 0x10000, 0x5, 0x4, 0x5, 0x69, 0xfffff44c, 0xfa7, 0x1c52, 0x52, 0x4, 0x40, 0x22dd, 0x9, 0xfffffff9, 0xffffffff, 0x3, 0x2, 0x80000001, 0x8, 0x7, 0x13d, 0x6, 0x7, 0x5, 0x7, 0x5, 0xc, 0x10001, 0x5, 0x5a79, 0x3, 0xfffffff5, 0x7, 0x5, 0x5, 0x0, 0x10000, 0x4, 0x9, 0xf, 0x8001, 0x6, 0x2, 0x40, 0x5f, 0x1, 0x7ff, 0x7ff, 0x5, 0xfffffff6, 0x7, 0x9, 0x2, 0x80, 0x3300, 0x8, 0xbe, 0x10000, 0xc, 0xff, 0x401, 0x0, 0x1, 0x1, 0x8000, 0x8000, 0x5, 0xe0, 0xffffffff, 0x7, 0xea20, 0x40, 0x1, 0x0, 0x833f, 0x0, 0x2d7abfdb, 0x10000, 0x1, 0x9, 0x3, 0x6, 0x4, 0x9, 0xd7a4, 0x0, 0x49, 0xffff8000, 0x4, 0x3, 0x9, 0x5, 0x1000, 0x9, 0x6, 0x80000000, 0x7, 0x10000, 0x1, 0x0, 0x7675, 0x5, 0x7, 0x40, 0x3, 0x4, 0xfffffff7, 0x8, 0xc35, 0x9, 0x4ec7e7c0, 0x1, 0x101, 0x8, 0x4, 0x5, 0x0, 0x800, 0x3, 0x95, 0x8, 0x1, 0x1, 0x10000, 0xffff, 0x2, 0x5, 0x7ff, 0x3, 0x5, 0x3, 0x1, 0x3, 0x6, 0x800, 0xa64, 0x6, 0xa5, 0x22, 0x1, 0x8, 0xe30, 0x7, 0x81, 0x5, 0x2, 0x3, 0x85, 0x0, 0xffffe709, 0x0, 0x1, 0x4, 0xffff, 0x9, 0x6, 0x8, 0x9, 0x3, 0x706, 0x3, 0x6]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0xffff, 0xc, 0x800, 0x6, 0xfffffff7, 0x80, 0x0, 0x700000, 0x2, 0x3, 0x5e8, 0x1, 0xac, 0x9, 0x2, 0x401, 0x5, 0x6, 0x1, 0x0, 0x7, 0x86, 0x9, 0x7fffffff, 0x9, 0x8, 0x3, 0x8, 0x8001, 0x200, 0x7c, 0xf, 0x2, 0xd, 0x800, 0x5a, 0x8, 0xd, 0x400, 0x0, 0x10001, 0xc, 0x80000001, 0x20, 0x5, 0x3, 0x40000, 0xfffffffd, 0x3, 0x3, 0x2, 0xff, 0xd, 0x6, 0x8, 0x7ff, 0x1c3, 0x2, 0xc, 0x7, 0x7fff, 0x8, 0x9, 0x1, 0x3, 0x0, 0x5, 0x3, 0x900000, 0xa, 0x9, 0x3, 0x1, 0x7fffffff, 0xb, 0x10000000, 0x7, 0x4, 0x9, 0x6, 0x0, 0x1, 0x83be, 0xc33, 0x7, 0xfffffff6, 0xf50b, 0x3, 0xd2, 0x3, 0x6, 0x50, 0x6, 0x67a, 0x7f, 0x1, 0x5, 0x1, 0x2, 0x3, 0xf388, 0x74, 0x9, 0x3, 0x9, 0x3ff, 0x7, 0x9, 0x9c2, 0xffffffff, 0x2, 0x10001, 0x4, 0xffff, 0x80, 0x9, 0x5, 0x80000001, 0x4400000, 0x0, 0x4e9d, 0x0, 0x8001, 0x0, 0xf1f, 0xdf2b, 0xfffffffe, 0x8, 0x0, 0x0, 0x2, 0x7, 0x3, 0x5, 0x43f, 0x3, 0x2, 0xbe5, 0x5, 0xfffff77f, 0xa54, 0xe4, 0x7, 0x2, 0x45f, 0x8001, 0x6, 0x800, 0x7, 0x5, 0x0, 0xac, 0x9, 0xfffffffe, 0xb2d, 0xffffff01, 0x27a7, 0x7b4, 0x8000, 0x81, 0x3, 0x7760, 0x100, 0x2, 0x5, 0x9, 0x0, 0x6, 0x9, 0x8001, 0x7f, 0x0, 0x800, 0x41, 0x3, 0x0, 0x5, 0x1, 0x3, 0x401, 0x8001, 0x1, 0x2, 0x8, 0x7fffffff, 0xffff, 0x200, 0x481c, 0x1, 0x80, 0x2, 0x4, 0x1, 0xa9, 0x8, 0x9, 0x5, 0x2, 0x5, 0x2, 0x2, 0xd, 0x3, 0x9, 0xc4, 0x734, 0x8, 0xfffffe01, 0x6, 0xda, 0x0, 0x200, 0x2, 0x69c, 0xffff, 0x3, 0x290, 0x1000, 0x7, 0x1000, 0xb, 0x9, 0x7, 0x3, 0x2, 0x4, 0xd331, 0x5, 0x8, 0x8, 0xea2, 0x5, 0x1, 0x800, 0x0, 0xc, 0x8, 0x1, 0x6, 0x5, 0x1, 0x0, 0x9, 0xd, 0x1, 0x9, 0x6d, 0x4, 0x1, 0x2, 0x2, 0x4, 0x10001, 0xffffff81, 0x6]}], [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE64={0xc}]]}, {0x3b, 0x6, "40946b58a41dd5bf971725e83da50ab3ae716d8150f61e74ea470be9acf5305a49ee05531c7869897869e1c7ebc769f6e120a4541ccacb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0xddc1044db7c6bc38}}}}]}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xffe6, 0x7}}, @TCA_TCINDEX_MASK={0x6, 0x2, 0xa5f5}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}]}}, @f_rsvp6={{0xa}, {0x4}}, @f_rsvp6={{0xa}, {0x1090, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @rand_addr=' \x01\x00'}, @TCA_RSVP_POLICE={0x1078, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9908}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x1, 0x80000000, 0x10, 0x10, {0x5, 0x1, 0xe96, 0x7, 0x8c1d, 0x8000}, {0x2, 0x2, 0x0, 0x4, 0x1, 0x3}, 0x8b76, 0x15a, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa9d10dd}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x101, 0x8, 0xa, 0x6, 0x6, 0x4, 0x5, 0x3, 0xd12, 0x2, 0x7, 0x3000000, 0x66400, 0x0, 0x7, 0x8, 0xd, 0x80, 0x2, 0x3206, 0x9, 0x4, 0x80, 0xe3da, 0xffffffff, 0x2, 0x3, 0x2e, 0x7, 0x6, 0x8b, 0x80, 0x4, 0x7000000, 0x0, 0xa0, 0x80000000, 0x5, 0x101, 0x4, 0xb, 0xc6, 0x23c, 0x0, 0x0, 0x2, 0xf, 0x7, 0x8, 0xfffffffa, 0x3a18, 0x3, 0x9, 0x7, 0x64, 0x2, 0x5, 0x6, 0x4, 0x5, 0xbc0a, 0x7ff, 0x7, 0x9, 0xc0000000, 0x0, 0x40, 0x3, 0x9, 0x9, 0x685, 0x4, 0x80000001, 0xfffffffb, 0x2, 0x7, 0x180, 0x80000000, 0x5, 0x2, 0x2, 0xffff0000, 0x5, 0x3, 0x2, 0x7, 0x1ff, 0x40, 0x3, 0x60000, 0x8, 0x5, 0x9, 0x80, 0xa, 0x4d, 0x0, 0x5, 0xa, 0xffffcdf2, 0x80, 0x1, 0x8, 0x7, 0x7, 0x8, 0x2, 0x1, 0x4, 0x0, 0x7fffffff, 0x3, 0x2, 0x4, 0x3, 0x2, 0x800, 0x3, 0xfffffffb, 0x101, 0x4, 0x8, 0x4, 0x7fffffff, 0x0, 0x400, 0xfaca, 0x2, 0x1, 0x7, 0x576, 0x2, 0x4, 0x9, 0x4, 0xf, 0x9, 0x3db6, 0x8, 0x5, 0xf72b, 0xb, 0x6, 0x0, 0x6, 0x1ff, 0xbea4, 0x0, 0x3, 0x2, 0x7fffffff, 0x401, 0x75, 0x500, 0x8, 0x5, 0x3, 0x9, 0x7fff, 0x2, 0x3, 0x0, 0x1ff, 0x2, 0x4, 0x3, 0x0, 0x1, 0x8001, 0x8, 0x4, 0xfffff466, 0x8, 0x1ff, 0x5, 0x98b, 0x4, 0x592, 0xe7, 0x5, 0x9, 0x9, 0x81, 0x9, 0xd, 0x1, 0x5, 0x5, 0xff1, 0x8001, 0x51, 0x9, 0x100, 0xff, 0x1, 0x101, 0x3, 0x401, 0x7, 0x8, 0x0, 0x3, 0x6, 0x40, 0x1, 0x7, 0x5, 0x3, 0x1, 0x9, 0x6b1, 0x4, 0xd4, 0xf, 0x9, 0x101, 0x10001, 0x0, 0x7, 0x3, 0x4, 0x78, 0x8, 0x1ff, 0x400, 0x0, 0xa1, 0x5, 0xe, 0x4, 0x0, 0x80000000, 0x1, 0x10000, 0x1, 0x8, 0xffff, 0x6, 0x3ff, 0x2, 0x3, 0x6cffaab1, 0x8, 0x8, 0x1, 0xff, 0x1, 0x10001, 0x6, 0x2fb, 0x0, 0x1bb5, 0x1, 0x4b7, 0xffff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x7b, 0x85e6, 0x8001, 0x7, 0x100, 0x7, 0x80000000, 0xffffff68, 0x1, 0xab7, 0x4, 0xaf, 0x80, 0x5, 0x6, 0x9, 0x4, 0x80000001, 0xcaae, 0x5, 0x9, 0x4, 0x0, 0x5, 0x8, 0x800, 0xff, 0xfffffff9, 0xd79, 0x1c00000, 0x7, 0x6, 0x8, 0x3ff, 0x4, 0xfffffbb0, 0x9045, 0x400, 0x3, 0x0, 0xf, 0x5, 0x40, 0x5, 0xfc11, 0x3, 0xd9, 0x3, 0x3, 0x7, 0x4c3, 0x0, 0x3, 0x2, 0x8, 0x1, 0x6, 0x13, 0x2, 0x9, 0x1, 0x7, 0x8, 0x80000001, 0x8, 0x8000, 0x6, 0x3ff, 0x81, 0x0, 0x0, 0x40a, 0x9, 0x80000001, 0x1, 0x5, 0x6, 0x1, 0x4, 0x0, 0x3, 0x4, 0x8000, 0x7, 0x0, 0x3, 0x6, 0x401, 0xbf, 0x1, 0xff, 0xa, 0x1, 0x3, 0x2, 0xfffffff7, 0xf7, 0xe30e, 0xd4ce, 0x94fb, 0x34fe, 0xaa, 0x5, 0x9, 0xfffffff7, 0x10001, 0x100, 0x2, 0x9, 0x3c2, 0x2, 0xf, 0x6, 0xfffffff7, 0x9, 0xf, 0x101, 0x0, 0x9, 0x54d, 0x400, 0xa, 0x4, 0x7, 0x80000001, 0x3, 0x1000, 0x200, 0x1, 0xfffffff7, 0x6, 0xb, 0x5ee6, 0x6, 0x6, 0x8, 0x4, 0x3, 0x2, 0x0, 0xa7, 0xe04, 0x2, 0x1, 0xfffffffd, 0x4, 0x3, 0xe, 0x70, 0x3, 0x8, 0x5, 0x7, 0x1, 0x1, 0x3ea6ba9d, 0x5, 0x7fff, 0x605d, 0x0, 0x6cf2, 0x4, 0x4, 0xfffffff9, 0x8, 0x5, 0x7f, 0x9, 0x401, 0x9, 0x7, 0x5, 0x6, 0xfffffffa, 0x80, 0x801, 0x9, 0xf, 0x0, 0x9ba, 0x9234, 0x6, 0x4, 0x8000, 0x6, 0xffffffff, 0x9, 0x8, 0x6, 0x20000000, 0xe6, 0xfff, 0xa23, 0x0, 0x10000, 0x4d48, 0x9, 0x6, 0xffffffff, 0x75, 0x33f, 0x2, 0x99, 0x1, 0x400, 0x101, 0x4, 0xffff, 0xf, 0x7, 0xdab2, 0x10000, 0x6, 0x0, 0x1, 0x9, 0xa, 0x7, 0x3, 0x1, 0x8, 0xffff, 0x2, 0x7, 0x401, 0x6, 0x0, 0x6, 0xfffffff4, 0x2, 0x0, 0x8, 0x5d21, 0x2, 0x2, 0xfe, 0x6, 0x0, 0x7fffffff, 0x3, 0x5, 0x0, 0x3, 0x336, 0x80000000, 0x27c0000, 0x3, 0x75f, 0xf, 0x9, 0x6, 0xcd, 0x9, 0x40, 0x401]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7a4e098c, 0x40, 0x17, 0x3, 0x200, 0x101, 0x9, 0x4, 0x0, 0x6, 0xa, 0x401, 0x400, 0x9, 0xe, 0x80000001, 0xbd, 0x3, 0x6, 0xd, 0x9b3, 0x6, 0x10001, 0x5, 0x2, 0x1000, 0xe, 0xfffffff4, 0x4, 0x4, 0x4, 0xe, 0xc1, 0x0, 0x1, 0xf, 0xb29, 0x2, 0x6, 0x80000001, 0x6, 0x40000000, 0x2, 0x4, 0x98, 0x4c, 0x3, 0x1ff, 0x40, 0x3, 0x100, 0x6, 0x0, 0x2, 0x2, 0x3256ea98, 0x401, 0xd0c3, 0xfe0f, 0xe71f, 0x8, 0x9, 0x1, 0x7f, 0x8, 0x4, 0x5, 0x7, 0x0, 0x8, 0x10, 0x474a, 0xffff, 0x0, 0x4, 0x5, 0x96, 0x3, 0x3, 0x9, 0x5, 0x6, 0x5, 0x5, 0x5, 0x7fffffff, 0x3, 0x9, 0x9, 0x5, 0x3, 0x0, 0x1, 0x0, 0x3, 0x8, 0x4, 0xdc9, 0x690, 0x200, 0x5, 0x80, 0x8, 0xffff7fff, 0x7, 0x8, 0x78, 0x5, 0x5, 0x5, 0x52b3, 0x4, 0x90, 0x1, 0xd28, 0x7fff, 0x47, 0x6, 0x6, 0xc3, 0x5, 0x4, 0x85, 0x0, 0x47, 0x8, 0x0, 0x29c8, 0x3ff, 0x8000, 0xffffffff, 0x442, 0x6, 0x6, 0x8, 0x7fffffff, 0x9, 0x7, 0x9, 0x3, 0xffffffe3, 0x7, 0xf6, 0x201a, 0x6, 0x9, 0x9, 0xb746, 0x6, 0x10, 0x10000, 0x400, 0xc3, 0x5, 0x2, 0x200, 0x7, 0x3, 0x9, 0x6, 0x5ab22aee, 0x5, 0x4, 0x7fff, 0x6, 0x9, 0x5, 0x8, 0x5, 0x6, 0x4, 0x8, 0x0, 0xfffffffa, 0x8218fe, 0x6, 0x6, 0xff0, 0x0, 0xc, 0xc0000000, 0x7, 0x1, 0x704404e6, 0x8, 0x4, 0xc, 0xadd, 0x7, 0x3ff, 0x7fff, 0x8, 0xd6fe, 0x2, 0x5, 0x8, 0x0, 0xfff, 0xcc000000, 0x2755af47, 0x49, 0x4, 0x3, 0x8, 0x4, 0x4e9b, 0x7, 0x10, 0x6, 0xffffffff, 0x1, 0x10, 0x200, 0x19bd, 0x9, 0x9a4, 0x5, 0x3, 0x50, 0x7, 0x4, 0x8, 0x4, 0xfffffffd, 0x4, 0x3, 0x7, 0x7fffffff, 0x80000000, 0x4, 0x4, 0x7e6, 0x5, 0xffffffff, 0x6, 0xcc, 0x5, 0x8, 0x1011, 0x4, 0x0, 0x101, 0x3, 0x4518, 0x80000001, 0x75f9, 0x5, 0x3, 0x1, 0x101, 0x3, 0xfffffff6, 0xfffffffb, 0x4, 0x10001, 0x40]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x9, 0x1, 0x8, 0x3, 0xfff, 0x4, 0x8001, 0x1, 0x50f5, 0x3, 0x95, 0xfd, 0x408b, 0x25, 0x10001, 0x3, 0x6, 0x8, 0x609, 0x0, 0x800, 0x5, 0x1, 0x0, 0x7, 0x734, 0x5, 0x0, 0x8, 0x6, 0x2e, 0x9, 0xee, 0x2, 0xd37f, 0xfffffffa, 0x1, 0x1, 0xfffffffe, 0x0, 0x7fff, 0x0, 0xc78e, 0xf9f5, 0x2, 0x40, 0xf, 0x0, 0x101, 0x8, 0x1, 0x28a9, 0x2, 0xec, 0x2, 0x7fff, 0x9, 0x6, 0x2, 0xb27, 0x0, 0x9, 0x7fff, 0x8, 0x1, 0x6, 0x4, 0x4, 0xffff, 0x2, 0x7ff, 0x6, 0x9, 0x2, 0x7, 0x0, 0x4, 0x7, 0x200, 0x6bf1, 0xf, 0x3, 0x9, 0x1ff, 0xbd7, 0x0, 0x4, 0x5, 0x2, 0x8, 0x6, 0x5, 0x40, 0x10001, 0xfb9, 0x80000000, 0x1ff, 0x80, 0x8, 0x1, 0x104343c9, 0x3, 0xb5f, 0x1ff, 0x8, 0xd, 0xffff, 0x8, 0x0, 0x401, 0x5, 0xa0000000, 0xffff, 0x6, 0xffff, 0x4, 0x10, 0x5, 0x1, 0x4, 0x0, 0x0, 0x10, 0x1, 0x200, 0x7fffffff, 0x90ad, 0x9, 0x844a, 0x3, 0x5, 0x145, 0x7, 0x300, 0x5, 0x81, 0x5ffd, 0x2, 0xffff649a, 0xffff, 0x3, 0x5, 0x1, 0x9, 0x4, 0x3, 0xcd3, 0x6, 0x9e, 0x2, 0x7, 0x7, 0x50, 0xffffffff, 0x2, 0xffffffff, 0x3, 0xfffffffa, 0x7f, 0x10001, 0x8, 0xa7a, 0x5, 0x0, 0x4, 0xf, 0xe1, 0x0, 0x5, 0x0, 0x6, 0xb0, 0x7, 0xa472, 0x80000000, 0x2, 0x1, 0xffffffaf, 0x9, 0x1, 0x7, 0x340, 0x0, 0xa5, 0x3, 0x9, 0xb, 0x88, 0xc89, 0xf3f4000, 0x7, 0x4, 0x1, 0x80000000, 0x4, 0xffffffff, 0x4, 0x75b9, 0x5, 0x1e0, 0xe28, 0x8, 0x1, 0x1ff, 0x8, 0x58, 0x76d8456b, 0x8, 0x9, 0x3, 0x8000, 0x4, 0x10001, 0x7, 0x3ff, 0x1, 0x1, 0x5ba, 0x5, 0x1, 0x3, 0x6, 0x3, 0x1, 0x3, 0x8000, 0xfff, 0x7, 0xfffffff7, 0x2, 0x8000, 0x4, 0x0, 0x200, 0x0, 0x72d8647c, 0x5, 0x8, 0x10001, 0x10001, 0x0, 0x8, 0x5ce6, 0x1, 0x9, 0x84b, 0x273d, 0x4, 0x9, 0x6, 0x10, 0x7fff, 0xfffffff9, 0x9, 0x7]}]}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0x27d}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0x3}]}}]}, 0x1f50}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r5, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1818000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 3m54.273373213s ago: executing program 4 (id=2115): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56171, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0xb, 0x19bf2d2c34844d12}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4084) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000340)={{r0, &(0x7f0000000100)='nl80211\x00', 0x101000, &(0x7f0000000140)={@_ha_fsid={[0x6, 0x101]}, {0xff81, 0x7, 0x1, 0x97}}, 0x2e20, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x4}, 0x1, &(0x7f0000000300)=[{0x3, 0x8, &(0x7f0000000200)='V\x00', &(0x7f0000000240)="6811f7f0ab661e2cabefbe323acc73c91d5708d572d8bed9f1a27e0960b227b482fbb0f81e6b192a0beca7abe8289d36793c76975d66766ccfde919e68bcce4bcd8f31f27b75d927fca182f78e0ac05288722d63e39f81671e12f8655b8918e5d20db7e564fdd1aa7857b1636844027d1e31b599008dc2c48c632e032929b4cdc9565883ba9d0555817b34d7710e216a8f95011f2698d667568f27e7fcc317d75d63149d7ef445e3d8e5b57b95589f43a2a07512540c66b23b35950d82", 0xbd, 0x30}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000017000000000000000010000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r6, r5, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xff, 0x0, 0x1}}, 0x40) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000003c0)={@private2, 0x63, r5}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001b40)={'wlan1\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x14, 0x15, 0x1, 0x70bd29, 0x0, {0x2}}, 0x14}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x801, 0x0, 0x9}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000004a40)={0x0, 0x0, &(0x7f0000004a00)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd2f, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x80004}, 0x40044) 3m54.127686875s ago: executing program 4 (id=2120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x220, 0x2c, 0x8, 0x70bd2b, 0x25dfdbff, {0xd}, [@generic="3f75025c111ca8f985", @nested={0x1f5, 0x155, 0x0, 0x1, [@typed={0x34, 0x5, 0x0, 0x0, @binary="ac1c6a907360fa031e9d19dbb802ce48fe38e70fde96f57a97f3d9b7b8e1a37d68993b221a5129d29f0e338934f5781b"}, @generic="650be8f48bf0c78c51f4daece719e5df98932c80d10de06dd6ada18db851999a995d60180c3a710276cf9d8b0522c811cf7fb52c968850ae6f76087928637d295ae32ecc00bd02314b66d519a73cd429172d4a00fd850184014dd01d58a870991de62c2283e1b6583b1bdab760a19c30b292ae962166cd41bdfb345722a5d794ac188f3e101a368d62d2623e1ee191944461103c56561ea7b99f2540812380026b9d46c23ee19ae1e51035ec7e15c70f90ff631ef1476713", @generic="2ddfbfc2a2f63e32dfae20fc56f6cf7e549a46067050945d6afa220099a4f7a428b72c59c07a468811bc67ecd7bb80b212b79b4aacef6b3390063da5b7c5a56138806bba1766355955d91e42e6c61a009732564737514a49ea962c1d5e02af85cd15ee9e25da469e638278d135a301156100bdc6ffffa5360b22c550023f85286f9cc8575e3efcd2aa7d03606f7a993520c63219bb30d6115f57d72a7d0f100e70bab916c39017c3448b7329f6dba0dfcf04c90d71f44fd0e3a6f78c9a9ce880dc93562b5b6444aa696af055a482950409c158e118bc3978875d654d34f655652fe43079200724051bfef5cad836abfeb5", @generic, @nested={0x4, 0x6d}, @nested={0x4, 0xe0}, @typed={0x5, 0x92, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x59}]}, @typed={0x8, 0x1e, 0x0, 0x0, @u32=0x4}]}, 0x220}, 0x1, 0x0, 0x0, 0x8090}, 0x801) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r2, &(0x7f0000000240), &(0x7f0000000080)=@tcp}, 0x20) ioctl$SIOCX25SFACILITIES(r1, 0x8917, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x14}}, 0x88}}, 0x0) 3m53.906810947s ago: executing program 4 (id=2125): socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0xff05, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x7188bf7f7bbd04be, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000003d3ff83df9440024000000240000000a000000100000000000000b02000000000000000000000300000000010000000200000009000000005f63613e2e5f19c200425cab27"], &(0x7f0000000340)=""/135, 0x46, 0x87, 0x0, 0xf72, 0x10000, @value=r1}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) 3m38.82885289s ago: executing program 32 (id=2125): socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0xff05, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x7188bf7f7bbd04be, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000003d3ff83df9440024000000240000000a000000100000000000000b02000000000000000000000300000000010000000200000009000000005f63613e2e5f19c200425cab27"], &(0x7f0000000340)=""/135, 0x46, 0x87, 0x0, 0xf72, 0x10000, @value=r1}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) 3.572331718s ago: executing program 2 (id=4488): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000040)={r2}, &(0x7f0000001080)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040c4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) accept(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240013001a00010027bd7000fdffffff021020040000fe010032000008000100ac14141e"], 0x24}}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000005000d0a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b09000200"], 0x64}, 0x1, 0x0, 0x0, 0x4008870}, 0x24000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0037006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.965423477s ago: executing program 2 (id=4494): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="2cc68e0900000000000000000000000000000000d9b970ae5b13538fd5755eaa7edacda5c98b368d9d9b952cc86a022be126d86c00b2711c8bdeed261445ed9eef4900452b5e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_mreq(r3, 0x29, 0x46, 0x0, &(0x7f0000000040)) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r4}, 0xc) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x6f6) writev(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r5) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0xa, r10}, 0x10) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x1, r9, 0x0, r7}, 0x10) 2.854970715s ago: executing program 0 (id=4495): socket$can_raw(0x1d, 0x3, 0x1) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x8, &(0x7f00000001c0), &(0x7f0000006680)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) socket$tipc(0x1e, 0x2, 0x0) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r4, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f00000007c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xa, 'vlan1\x00'}) sendmsg$tipc(r5, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24004000}, 0x800) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000600)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x38, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x4, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0xff, @rand_addr=' \x01\x00', @empty, [], "ccd151d71f80b0c9"}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x400}, &(0x7f0000001100)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x400}, &(0x7f0000001100)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0xffffffffffffff8e}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0xffffffffffffff8e}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="24040000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fddbdf25020000000800010057b00cde7a39d6568af495be454ae6ed4366b56b6c233b73c4f222d5bb5fe4ad420219d5f667cb72ddcd862f1e87cfa0d34e10b9ae639124162c598b6b022b60216657e018d914db18e42171b6e7144a9b23d1b9ae1d0597d65dab92717e4a2790abe1482e0d5101df2b20a99d1de05cf009fe5700b293758dbcee7b4dbaee91bbf58b67ba0484c2b342ffdab4c97d99493c5e89f3d5b043de005cb3abec15165a6e646a3cd260d29ab2b27a072a2ba4c9c1666c69b6fa", @ANYRES32, @ANYRES32, @ANYBLOB="1c02028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000040000100240001006d625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff01000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100008040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32, @ANYRESHEX=r0], 0x424}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdb7}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) (async) sendmsg$nl_generic(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000200)=""/267, 0x10b}, 0x100) ioctl$sock_bt_bnep_BNEPCONNDEL(r8, 0x400442c9, &(0x7f0000000040)={0x5}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 2.575106428s ago: executing program 0 (id=4499): r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}]}}}]}, 0x3c}}, 0x0) writev(r1, &(0x7f0000001100)=[{&(0x7f0000001140)="4647b4f310d036b398bd576db787e7b4202ee128ae26c942fc41e537802686e8c349eb6c1ed386de2085218c1cc9fb2decdb2a5f89154999df0aeebf9b9c41add84afb98", 0x44}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'bridge_slave_0\x00'}}, 0x1e) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9c4}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x5, 0x4, 0x3}, 0xfffffffd, 0x83, 0xfffffffd}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x1, 0x1, 0x40, 0x2, 0xffffffff, 0x0, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x90}}, 0x4000080) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r4, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r9, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x80, 0x0}, 0x4800) 2.464663431s ago: executing program 2 (id=4500): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x170, 0x24, 0xd0f, 0x200001, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xff, 0x4, 0x400, 0x0, 0x81, 0x101, 0x7, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xe, 0x6, 0xca11, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x1103, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x120) (async) sendto$netrom(r1, 0x0, 0xfffffffffffffead, 0x0, &(0x7f0000000240)={{0x6, @rose}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r8, @ANYRES16=r8, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r10 = socket(0x400000000010, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) (async) ioctl$INCFS_IOC_PERMIT_FILL(r9, 0x40046721, &(0x7f0000000000)={r11}) 2.366509583s ago: executing program 5 (id=4501): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc) (async) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="210329bd7000a7dbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000400)=""/4083, 0xff3}], 0x2}, 0x8}], 0x4, 0x180, 0x0) (async) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xcb}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8800) (async) getsockname$packet(r6, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x2d) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4000080) (async) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r4, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2.225316936s ago: executing program 3 (id=4503): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffb, {0x0, 0x0, 0x0, r2, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r2, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$caif_seqpacket(0x25, 0x5, 0x3) recvmmsg(r4, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x1, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000100001000000000000000000000000000000000900020073797a310000000008000440000000000900010073797a300000000008000340000000010800084000000000140000001100010000002000000000000000000a000000000000000000000000007d6bb2fc7f6f21f6dba4fba693"], 0x6c}}, 0x0) 2.185450584s ago: executing program 2 (id=4504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e21, 0xdaa, @remote, 0xc}}}, 0x3a) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_generic(r6, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000000) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0xf2812000) r7 = socket(0x8, 0x800, 0x7) ioctl$sock_SIOCGIFINDEX(r7, 0x61d0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f00000002c0)=ANY=[@ANYRES64=r3, @ANYRES8=0x0, @ANYRES8=r2], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) write(r7, &(0x7f0000000240)="92de058caf93", 0x6) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000240)={r1, &(0x7f0000000100)='@$+&\'-]\x00', 0x8281, &(0x7f0000000140)={@align=0x6, {0x4, 0x8, 0x1, 0x6}}, 0xc9f, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x2}) mmap(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x3000004, 0x12, r9, 0x4b92c000) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000340)="448b7cff000000000000108a15df09", 0xf}], 0x2) 2.126548492s ago: executing program 0 (id=4505): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0}, 0x40c0) r2 = socket(0x27, 0x5, 0xfffffffe) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x891b, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x4) socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x4, {0x60, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x29c}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r4 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000100)=0x6422, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[], 0x18}}, 0x4020) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x89}, {0xb6e7, 0xf3c, 0x2, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x2000000000000, 0x4000000000001}, 0x0, 0x0, 0x3, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x33}, 0xa, @in6=@mcast1, 0xfffffffe, 0x1, 0x2, 0x0, 0x0, 0x0, 0x800}}, 0xe8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x20}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x64, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}]}}]}]}]}}]}, 0x64}}, 0x0) 1.994738732s ago: executing program 5 (id=4506): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a8020000180140003000000000000000000000000000100000004000200040001"], 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) r4 = socket$inet(0xa, 0x801, 0x84) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x10054}, 0x0) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='net_prio.prioidx\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x1, 0x20, 0x6, 0x9}, &(0x7f00000000c0)=0x18) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x18, r7, 0x200, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x40880) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYRES64=r2], &(0x7f0000000240)='syzkaller\x00', 0x24, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0xa0001f98, 0xfe71, 0x1f00, &(0x7f0000000440)="85f17444c5a569f1e21b08c0f264", 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYRES32=r7], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0}, 0x90) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r9, &(0x7f0000000500)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xbf, 0x0}}], 0x73d, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 1.911486502s ago: executing program 0 (id=4507): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='pimreg\x00', 0x10) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x4000) 1.886169964s ago: executing program 1 (id=4508): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (async) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10008890}, 0x20000000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, r5, 0x111, 0x70bd27, 0x25dfdc03, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x400000000000000, 0x0, 0x40010}, 0x48090) 1.805449351s ago: executing program 3 (id=4509): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES8=0x0, @ANYBLOB="050427bd7000fedbdf2501000000080001006a92d04845baf89d42914f3025c0ddefcff76e5c9cf2c60d43ae4b305cde5bdbe43b66d56752d4711f0386133089cf0a049cec3496d57db78d2049db00056bb382d42167aca57e98fbaed0ddd09ac6907bf3a84019b51acf1f0d6e769ed54a31df2c75c3312acce795a210843ed4b27e8b2661752beda7d1ba4d854282f198cffb9ed4469631744c11510e2df480cf272fd804030bb0ee2a9f5d025f5c5cd14c56e59b4b5821708696222906e367561f5dbd43cb7320b8903351fb0fbbc9b48950ea21a5ed", @ANYRES32=r1, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006cef770aaa898bfffddb23aed73c6f6164"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44885) 1.804052005s ago: executing program 5 (id=4510): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4(r2, 0x0, 0x0, 0x800) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r1, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r5, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r6}]}, 0x3c}, 0x1, 0x620b}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r7, &(0x7f0000000180)="a40141ad", 0x4, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x20000, @mcast2, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f00000000c0)) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)}, 0x40002000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) accept4(r2, 0x0, 0x0, 0x800) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r1, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r5, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r6}]}, 0x3c}, 0x1, 0x620b}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendto$inet6(r7, &(0x7f0000000180)="a40141ad", 0x4, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x20000, @mcast2, 0x4}, 0x1c) (async) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f00000000c0)) (async) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)}, 0x40002000) (async) 1.650149489s ago: executing program 3 (id=4511): socket$netlink(0x10, 0x3, 0x1c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}, @CTA_ZONE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000600)="ad56b6c5820fae9d6dcd3292ea54c7be857600004c90c200d63d8da40fa5e94dab", 0x21) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000000)={0x0, 0x80, 0xdf}) 1.550024336s ago: executing program 5 (id=4512): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x3, 'virt_wifi0\x00', {0x2}, 0x2}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r3, 0xa16ab000) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r3, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x10, 0x0, 0x0, 0xfc, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc}}]}, 0x3c}}, 0x0) close(r1) 1.497328388s ago: executing program 1 (id=4513): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r0 = socket(0xa, 0x5, 0x0) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/189, 0xbd, 0x100, &(0x7f00000000c0)=@in6={0x21, 0x2, 0x2, 0xfffffffffffffe17, {0xa, 0x4e23, 0x10001, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x7f}}, 0x24) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1700000000000000008400000100000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x20}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) bind$phonet(r3, &(0x7f0000000000)={0x23, 0x20}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, 0x0, &(0x7f0000001780)=""/4096}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x64, 0x6, 0x628, 0x468, 0x398, 0x2c8, 0x1d0, 0x2c8, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @local, [], [0x0, 0x0, 0x0, 0xff000000], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@empty, 0xe, 0x1b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) 1.382909572s ago: executing program 3 (id=4514): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x6a, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r6, &(0x7f0000000a40)=[{&(0x7f00000007c0)='e', 0x1}], 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448df, &(0x7f00000002c0)) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r8, 0x303, 0x8070bd29, 0x25dfdbff, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x44) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r9}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4(r3, &(0x7f0000000040)=@ax25={{0x3, @null}, [@remote, @rose, @null, @null, @rose, @default, @bcast, @null]}, &(0x7f0000000100)=0x80, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mkdirat$cgroup(r11, &(0x7f00000002c0)='syz1\x00', 0x1ff) 1.336545672s ago: executing program 1 (id=4515): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0xffe0}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004894}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x24}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x5, [@enum={0xc, 0x8, 0x0, 0x6, 0x4, [{0x8, 0x7fffffff}, {0x2, 0x400}, {0x0, 0x9}, {0x2, 0xf}, {0x8, 0x1}, {0x3, 0x3}, {0x5, 0x7}, {0x6, 0x38}]}, @restrict={0x6, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x5f, 0x2e]}}, &(0x7f00000002c0)=""/251, 0x75, 0xfb, 0x0, 0x243}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', r4, r5, 0x4, 0x2}, 0x50) 1.021568707s ago: executing program 5 (id=4516): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="b457c2c655b890f43bc553b78480eaabe823a0155489056065ae833278f08be5fdf01aec67c3b9bdb0bd", 0x2a}, {&(0x7f0000000100)="9491826e882d91a7ce4ab614919451e11fb63e52", 0x14}, {&(0x7f0000000140)="052c4644744761dcd60aefb0c7637d40348d9ebe2f1516c091fa9ca7dc6ae936ee469b694e7808b4dac11acccd43fc1a8a04c75d293b2a3124e8975b2b71570257d9c6d5e4200f5feb04d1d79c8f2dadce646ef69b7006f67063f0da127aa1980c01f60418654e85c0aae0cf5f4de61b0a72a11633e95050882fce96a1b54f50a9cd2a130ddb58d2c39be2262e68f3b7b142140b5f0c014e415bd7a889a8ba3253be68e0194165cfc4088a56", 0xac}], 0x3}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (rerun: 32) connect$802154_dgram(r2, 0x0, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1}, 0xdf5c}], 0x1, 0x10020, 0x0) (rerun: 64) 946.144101ms ago: executing program 3 (id=4517): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000340), 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="8e8e6556", @ANYRES32=0x0, @ANYRES16=r1], 0x3c}}, 0x0) 847.812879ms ago: executing program 3 (id=4518): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="000000c4c4e8ab5b7d86663c5abd36bd6adf006dd872ae027c23e973f9fd20a25d782326e7e0b91b0cecd35779be7f9b06b653b96f37f5979bc6712a88d7929b5bfe3381fe457e1c4e53ebb45d43ee0d0cbace0527ba4ecbc0bf769f399418ab0000000000000b72d6cc6c70a2b50b9fdd6380fe8fe03e2467646bce284d89de5d9592d624523baa16b6df75e21ce464f9cad81e9bd2c1b2d5aae6b5fcee7ed7186f57032d3bd8b10ba311cbca6f664fc3", @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c00070000000000000000000800090000000000080006006f766600080008000000000008000b0073697000"], 0x54}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f00000000c0)=0x154, 0x4) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a0000000000000600"], 0x30}}, 0x4090) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) 664.726493ms ago: executing program 1 (id=4519): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x4800, 0x5, 0x0, 0xfffffffe}, 0x10) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x2, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0xf59c, @mcast1, 0x1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0xb}, 0x7fff}}, @sadb_key={0x2, 0x8, 0x10, 0x0, '4-'}]}, 0x80}, 0x1, 0x7}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000063119d000000000007000000200000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@generic='^(']}, 0x18}}, 0x40000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0xd02, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x96}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}]}, 0x34}}, 0x14) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r4, 0xf1aad47e89fb43b5, 0x0, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x34040840}, 0x4000) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002580)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffc00, 0x8, 0x8, 0x2, 0x6, {0x1, 0x1, 0xf, 0x70, 0x5d5, 0x2}, {0x20, 0x0, 0x1, 0x5, 0x6}, 0x2, 0x5, 0x40}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) 567.105435ms ago: executing program 0 (id=4520): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb0100180000000000000c00006d330642000300000002000000000b02000000006100"], &(0x7f0000000a40)=""/107, 0x27, 0x6b, 0x1, 0x6}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x1, 0x43, 0x40, 0x42}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x8, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xf1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x4}]}, 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r8}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x29, 0xe, 0x9, 0x6, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x8, 0x6, 0x200}}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f00000006c0)={'ip_vti0\x00', 0x0, 0x8000, 0x8000, 0x6, 0x1, {{0x23, 0x4, 0x2, 0x0, 0x8c, 0x68, 0x0, 0x9e, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@lsrr={0x83, 0x7, 0xcb, [@multicast1]}, @generic={0x88, 0xc, "9704edb5cde1afce87f7"}, @timestamp_addr={0x44, 0x14, 0x4a, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x34}, 0xfffffff7}]}, @cipso={0x86, 0x2a, 0x3, [{0x1, 0x3, '['}, {0x6, 0x8, "d39d290a825d"}, {0x7, 0x8, "e639d32c0e1d"}, {0x2, 0xa, "82bb8d7257ceeecf"}, {0x7, 0x7, "8731dd46bf"}]}, @cipso={0x86, 0xc, 0x2, [{0x5, 0x6, "fae6b3b6"}]}, @end, @timestamp={0x44, 0x18, 0x70, 0x0, 0x0, [0x13, 0x0, 0x4, 0x4, 0x8001]}]}}}}}) r15 = socket(0x400000000010, 0x3, 0x0) r16 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r17, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7331c94b}]}}]}, 0x38}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000007c0)={@remote, 0x0}, &(0x7f0000000800)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000b40)={0x588, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x900000}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffbd}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r3}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8, 0x1, r9}, {0x228, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5, 0xfc, 0x1, 0x7f}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x588}, 0x1, 0x0, 0x0, 0x20008804}, 0x40040) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000100), 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r0, &(0x7f0000000180), 0x0}, 0x20) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000010000000000000000000000071100a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 387.236665ms ago: executing program 1 (id=4521): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x49, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 280.108957ms ago: executing program 2 (id=4522): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000010240)={&(0x7f0000000180), 0xc, &(0x7f0000010200)={&(0x7f00000001c0)={0x10, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x453, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) r2 = socket(0x2, 0x2, 0x1) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001500)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x44}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000010480)={0xffffffffffffffff, 0xe0, &(0x7f0000010380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x6d, &(0x7f0000010280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000102c0), &(0x7f0000010300), 0x8, 0xd3, 0x8, 0x8, &(0x7f0000010340)}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000010580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000010540)={&(0x7f00000104c0)=@ipv6_delroute={0x50, 0x19, 0x4, 0x70bd2a, 0x25dfdbfc, {0xa, 0x14, 0x10, 0x73, 0xfe, 0x4, 0xfd, 0x7}, [@RTA_MULTIPATH={0xc, 0x9, {0x5, 0x0, 0x9, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x2, 0x5, r4}}, @RTA_GATEWAY={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @RTA_MARK={0x8, 0x10, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4040010) 145.074143ms ago: executing program 0 (id=4523): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x7ca8e000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000010}, 0x40000) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) writev(r1, &(0x7f0000000080)=[{0x0}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r8], 0x20}}, 0x8080) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r6, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r8], 0x34}}, 0x4008000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x7ca8e000) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket(0x10, 0x80003, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000010}, 0x40000) (async) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) (async) writev(r1, &(0x7f0000000080)=[{0x0}], 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r8], 0x20}}, 0x8080) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r6, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r8], 0x34}}, 0x4008000) (async) 73.385137ms ago: executing program 2 (id=4524): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x10000, 0x2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0x401}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xddd}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x80}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1000}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x200}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r1) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, r3, 0x800, 0x1, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@cgroup=r1, 0x9, 0x1, 0x0, &(0x7f0000000880)=[0x0], 0x1, 0x0, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0]}, 0x40) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3) shutdown(r4, 0x1) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r5, &(0x7f00000002c0)="882e154b0f", 0x5, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f00000002c0)="9d0e28006a00e054af4b9c3367aabf9b409bc83a74d99e9b7fb71cfdf601b23faa699f11f10607cbc56c3affbfada72e1032491e7599cb976959a00c38c6a548dec8d80ba704187309b6f1828b91af463c8438ec4073167afaaff8cca537d86da50fdbd819df12f10529148af9c60e657fd5436464ebad64edb1337f26eda7615dd9ffc8591f0f43dd18f051b1c0683fba975e9ae46d9a51063ba48b09f1f87646f87f676d79af4d9f9f910a01bc88bd17ff53a5ab92d8ad37fdfd7a934a8cbbe2fc9932a79f8c3cad7f3be0a719", 0xce}], 0x1, &(0x7f00000003c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x70, 0x0, 0x7, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0xc, 0x75, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x9, 0x0}, 0x1}]}, @lsrr={0x83, 0xf, 0xed, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @lsrr={0x83, 0x1b, 0x29, [@private=0xa010102, @loopback, @broadcast, @rand_addr=0x64010100, @loopback, @dev={0xac, 0x14, 0x14, 0xa}]}, @timestamp_addr={0x44, 0x24, 0xe, 0x1, 0x2, [{@empty}, {@multicast2, 0xffff}, {@empty, 0x6c6a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}]}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@generic={0x7, 0xf, "35370fdb1d38e9449531efff7f"}, @cipso={0x86, 0x14, 0x0, [{0x0, 0x6, "a4a3e620"}, {0x0, 0x6, "df599867"}, {0x5, 0x2}]}, @generic={0x7, 0x9, "ceebe831c0abfa"}, @ra={0x94, 0x4}, @rr={0x7, 0x23, 0xa9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @loopback, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x11}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x108}}], 0x1, 0x8010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000400695e000000000100000000000000000000000000000000a61caea1a872f0dcbc85d8cde8d40a44d73312a189"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r7, 0x1, 0x1f, 0x0, &(0x7f0000001040)) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r9, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 599.514µs ago: executing program 1 (id=4525): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x150, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x120, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xffffffff, 0x7, 0x1, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x9}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x845}, 0x24008804) 0s ago: executing program 5 (id=4526): r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000890}, 0x8004) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x6c}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20048004}, 0xae4bc0fa659f0316) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4180}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r4, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x80000) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_mreqsrc(r7, 0x0, 0x26, &(0x7f0000000480)={@loopback, @remote, @local}, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r10, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r4, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xf2}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x48080}, 0xc000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r11, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24000804) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r12, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x20}, @val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x1, 0x3}}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2040080}, 0x4000804) r14 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r14, 0x118, 0x1, &(0x7f0000000880)=0x3c2, 0x4) sendmsg$NL80211_CMD_STOP_AP(r12, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r1, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x11) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r11, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20000800) r15 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), r10) sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r15, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '{!:!&\\w'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048810}, 0x4000811) r16 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c40), r12) sendmsg$TIPC_CMD_GET_MAX_PORTS(r12, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r16, 0x4, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40044) close(r14) kernel console output (not intermixed with test programs): nvalid length. [ 315.930696][T16572] 8021q: adding VLAN 0 to HW filter on device bond8 [ 315.985879][T16574] bond8: (slave veth5): Enslaving as an active interface with a down link [ 316.016353][T16570] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 316.024742][T16570] bond8: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 316.065958][T16430] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.077254][T16430] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 316.087715][T16430] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 316.119068][T16583] Bluetooth: MGMT ver 1.23 [ 316.192823][T16430] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.202982][T16430] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 316.213575][T16430] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 316.286465][T16430] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.299250][T16430] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 316.323196][T16430] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 316.357298][T16592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2898'. [ 316.386523][T16592] netlink: 'syz.0.2898': attribute type 7 has an invalid length. [ 316.446211][T16592] erspan0: entered promiscuous mode [ 316.462417][T16592] gretap0: entered promiscuous mode [ 316.492173][T16592] debugfs: 'hsr0' already exists in 'hsr' [ 316.511126][T16592] Cannot create hsr debugfs directory [ 316.519847][T16592] hsr0: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 316.530502][T16592] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 316.631948][T16430] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.647465][T16430] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 316.668852][T16430] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 316.794659][T16617] netlink: 'syz.1.2905': attribute type 83 has an invalid length. [ 316.818504][ T5839] Bluetooth: hci3: command tx timeout [ 316.864945][T16619] tipc: Enabled bearer , priority 0 [ 316.891206][T16619] syzkaller0: entered promiscuous mode [ 316.915485][T16619] syzkaller0: entered allmulticast mode [ 317.000221][T16619] tipc: Resetting bearer [ 317.039260][T16618] tipc: Resetting bearer [ 317.045171][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 317.045970][ C0] lec:lec_tx_timeout: lec0 [ 317.054116][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 317.094543][T16618] tipc: Disabling bearer [ 317.311077][T16430] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 317.322772][T16430] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 317.338089][T16430] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 317.397160][T16430] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 317.409489][T16642] tipc: Enabling of bearer rejected, media not registered [ 317.419713][T16643] tipc: Enabling of bearer rejected, media not registered [ 317.655664][T16430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.691674][T16430] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.727732][T12407] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.734943][T12407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.769207][T12407] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.776440][T12407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.836468][T16672] netlink: 'syz.0.2923': attribute type 4 has an invalid length. [ 318.286408][T16695] pim6reg: entered allmulticast mode [ 318.315431][T16430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.386325][T16698] syzkaller0: entered promiscuous mode [ 318.401417][T16698] syzkaller0: entered allmulticast mode [ 318.594219][T16430] veth0_vlan: entered promiscuous mode [ 318.663597][T16430] veth1_vlan: entered promiscuous mode [ 318.746044][T16430] veth0_macvtap: entered promiscuous mode [ 318.760400][T16430] veth1_macvtap: entered promiscuous mode [ 318.835502][T16430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.885249][T16430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.893756][ T5839] Bluetooth: hci3: command tx timeout [ 318.962836][ T1135] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.002636][ T1135] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.096739][ T1135] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.114060][ T1135] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.203874][T16733] __nla_validate_parse: 6 callbacks suppressed [ 319.203895][T16733] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2939'. [ 319.275937][T16733] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 319.409521][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.423235][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.497476][ T634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.507348][ T634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.673905][T16751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.742621][T16753] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2840'. [ 319.842451][T16760] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 320.080485][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 320.090298][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 320.099974][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 320.109835][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 320.118410][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 320.249633][T16767] ip6_vti0 speed is unknown, defaulting to 1000 [ 320.542320][T16784] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2954'. [ 320.769191][T16804] IPv6: NLM_F_CREATE should be specified when creating new route [ 320.959868][T16815] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2960'. [ 320.974094][ T5839] Bluetooth: hci3: command tx timeout [ 321.015953][T16817] syz.0.2961 uses old SIOCAX25GETINFO [ 321.303756][T16832] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2966'. [ 321.349266][T16767] chnl_net:caif_netlink_parms(): no params data found [ 321.367814][T16837] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2967'. [ 321.397293][T16837] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2967'. [ 321.562809][T16767] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.578665][T16767] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.586703][T16767] bridge_slave_0: entered allmulticast mode [ 321.589216][T16852] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2971'. [ 321.601977][T16767] bridge_slave_0: entered promiscuous mode [ 321.609834][T16767] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.618825][T16767] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.629669][T16767] bridge_slave_1: entered allmulticast mode [ 321.640227][T16767] bridge_slave_1: entered promiscuous mode [ 321.716689][T16859] netlink: 816 bytes leftover after parsing attributes in process `syz.0.2972'. [ 321.750483][T16861] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2973'. [ 321.762688][T16767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.805990][T16767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.859861][T16868] Cannot find del_set index 3 as target [ 321.888415][T16767] team0: Port device team_slave_0 added [ 321.898561][T16767] team0: Port device team_slave_1 added [ 321.977714][T16767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.993761][T16767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.060265][T16767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.063295][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 322.078893][ C0] lec:lec_tx_timeout: lec0 [ 322.083789][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 322.107146][T16877] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 322.132949][T16767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.174210][T16767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.178491][ T5839] Bluetooth: hci2: command tx timeout [ 322.223465][T16767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.321451][T16767] hsr_slave_0: entered promiscuous mode [ 322.329022][T16767] hsr_slave_1: entered promiscuous mode [ 322.336856][T16767] debugfs: 'hsr0' already exists in 'hsr' [ 322.342621][T16767] Cannot create hsr debugfs directory [ 322.464735][T16894] netlink: 'syz.2.2982': attribute type 2 has an invalid length. [ 322.472542][T16894] netlink: 'syz.2.2982': attribute type 2 has an invalid length. [ 322.688141][T16767] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.700986][T16906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.710185][T16767] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.731028][T16904] netlink: 'syz.5.2984': attribute type 13 has an invalid length. [ 322.813215][T16904] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.834180][T16767] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.844258][T16767] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.934284][T16767] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.953607][T16767] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.038389][T16767] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.074137][T16767] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.263954][T16927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.407264][T16767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 323.445612][T16767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 323.475721][T16767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 323.488707][T16767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 323.675818][T16767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.730256][T16767] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.759819][ T634] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.767038][ T634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.812049][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.819245][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.075871][T16964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.254238][ T5839] Bluetooth: hci2: command tx timeout [ 324.283579][T16971] __nla_validate_parse: 6 callbacks suppressed [ 324.283615][T16971] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3002'. [ 324.315443][T16974] ¾x9ÿ: renamed from bridge_slave_0 [ 324.374197][T16767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.431442][T16977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3003'. [ 324.459013][T16980] netlink: 'syz.0.3005': attribute type 12 has an invalid length. [ 324.536208][T16986] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 324.562346][T16988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3008'. [ 324.566787][T16980] bond9: option primary_reselect: invalid value (255) [ 324.581569][T16988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3008'. [ 324.592618][T16980] bond9 (unregistering): Released all slaves [ 324.635341][T16767] veth0_vlan: entered promiscuous mode [ 324.650086][T16767] veth1_vlan: entered promiscuous mode [ 324.667342][T16986] netlink: 'syz.2.3007': attribute type 4 has an invalid length. [ 324.693083][T16767] veth0_macvtap: entered promiscuous mode [ 324.711394][T16767] veth1_macvtap: entered promiscuous mode [ 324.731623][T16991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3009'. [ 324.756027][T16991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3009'. [ 324.802633][T16767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.841521][T16767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.862572][T12407] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.885461][T12407] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.902398][T12407] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.920180][T12407] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.955226][T17000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3012'. [ 325.149274][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.185358][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.221729][ T6063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.241317][ T6063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.272622][T17012] macsec1: entered promiscuous mode [ 325.342440][T17016] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3017'. [ 325.356164][T17016] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3017'. [ 325.447561][T17019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 325.609345][T17032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3020'. [ 326.077333][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 326.087442][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 326.100218][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 326.111056][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 326.119048][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 326.177961][T17055] ip6_vti0 speed is unknown, defaulting to 1000 [ 326.338488][ T5839] Bluetooth: hci2: command tx timeout [ 326.929078][T17088] ip6_vti0 speed is unknown, defaulting to 1000 [ 326.954833][T17055] chnl_net:caif_netlink_parms(): no params data found [ 327.085689][T17055] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.093636][T17055] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.101026][T17055] bridge_slave_0: entered allmulticast mode [ 327.109614][T17055] bridge_slave_0: entered promiscuous mode [ 327.119167][T17055] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.127060][T17055] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.134759][T17055] bridge_slave_1: entered allmulticast mode [ 327.142880][T17055] bridge_slave_1: entered promiscuous mode [ 327.192756][T17055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.206958][T17055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.248456][T17055] team0: Port device team_slave_0 added [ 327.257280][T17055] team0: Port device team_slave_1 added [ 327.314267][T17055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.321329][T17055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.348379][T17055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.365603][T17055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.372569][T17055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.410155][T17055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.493712][T17055] hsr_slave_0: entered promiscuous mode [ 327.500385][T17055] hsr_slave_1: entered promiscuous mode [ 327.520809][T17055] debugfs: 'hsr0' already exists in 'hsr' [ 327.527106][T17055] Cannot create hsr debugfs directory [ 327.771865][T17055] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.821820][T17055] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.910635][T17055] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.970653][T17055] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.013138][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5930 ms [ 328.021190][ C0] lec:lec_tx_timeout: lec0 [ 328.026332][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 328.090338][T17055] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 328.102187][T17055] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 328.111975][T17055] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 328.121968][T17055] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 328.173417][ T5839] Bluetooth: hci4: command tx timeout [ 328.198450][T17055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.220135][T17055] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.232233][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.239478][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.255603][ T634] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.262754][ T634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.414256][ T5839] Bluetooth: hci2: command tx timeout [ 328.447252][T17055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.489771][T17055] veth0_vlan: entered promiscuous mode [ 328.502848][T17055] veth1_vlan: entered promiscuous mode [ 328.534996][T17055] veth0_macvtap: entered promiscuous mode [ 328.545388][T17055] veth1_macvtap: entered promiscuous mode [ 328.565548][T17055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.580635][T17055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.595652][ T634] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.605930][ T634] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.621194][ T634] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.630573][ T634] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.695663][ T6063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.712797][ T6063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.740361][ T634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.749782][ T634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.254174][ T5839] Bluetooth: hci4: command tx timeout [ 332.334211][ T5839] Bluetooth: hci4: command tx timeout [ 333.033454][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 333.041460][ C0] lec:lec_tx_timeout: lec0 [ 333.046347][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 334.422658][ T5839] Bluetooth: hci4: command tx timeout [ 336.982661][ T25] block nbd1: Connection timed out, retrying (0/2 alive) [ 336.990824][ T25] block nbd1: Connection timed out, retrying (0/2 alive) [ 336.998978][ T25] block nbd1: Connection timed out, retrying (0/2 alive) [ 337.007097][ T1856] block nbd1: Dead connection, failed to find a fallback [ 337.016185][ T1856] block nbd1: shutting down sockets [ 337.022103][ T1856] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 337.034453][ T25] block nbd1: Connection timed out, retrying (0/2 alive) [ 337.041685][ T1856] Buffer I/O error on dev nbd1, logical block 1, async page read [ 337.050080][ T1856] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 337.061507][ T1856] Buffer I/O error on dev nbd1, logical block 0, async page read [ 337.069436][ T1856] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 337.079044][ T1856] Buffer I/O error on dev nbd1, logical block 3, async page read [ 337.086904][ T1856] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 337.096497][ T1856] Buffer I/O error on dev nbd1, logical block 2, async page read [ 337.105595][T16022] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 337.115734][T16022] Buffer I/O error on dev nbd1, logical block 0, async page read [ 337.124324][T16022] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 337.134008][T16022] Buffer I/O error on dev nbd1, logical block 1, async page read [ 337.141816][T16022] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 337.151357][T16022] Buffer I/O error on dev nbd1, logical block 2, async page read [ 337.159438][T16022] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 337.170566][T16022] Buffer I/O error on dev nbd1, logical block 3, async page read [ 337.178579][T16022] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 337.188163][T16022] Buffer I/O error on dev nbd1, logical block 0, async page read [ 337.196054][T16022] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 337.205629][T16022] Buffer I/O error on dev nbd1, logical block 1, async page read [ 337.214415][T16022] ldm_validate_partition_table(): Disk read failed. [ 337.221663][T16022] Dev nbd1: unable to read RDB block 0 [ 337.228006][T16022] nbd1: unable to read partition table [ 337.239777][T16022] ldm_validate_partition_table(): Disk read failed. [ 337.246989][T16022] Dev nbd1: unable to read RDB block 0 [ 337.252898][T16022] nbd1: unable to read partition table [ 337.624942][ T1102] bridge_slave_1: left allmulticast mode [ 337.630617][ T1102] bridge_slave_1: left promiscuous mode [ 337.637470][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.647790][ T1102] bridge_slave_0: left allmulticast mode [ 337.655234][ T1102] bridge_slave_0: left promiscuous mode [ 337.660978][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.768808][ T634] smc: removing ib device syz2 [ 337.780298][ T1102] tipc: Disabling bearer [ 337.870083][ T1102] bond2 (unregistering): (slave gretap1): Releasing active interface [ 337.920173][ T1102] bond9 (unregistering): (slave gretap2): Releasing active interface [ 338.046962][ T1102] bridge0 (unregistering): left allmulticast mode [ 338.053919][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 338.053948][ C0] lec:lec_tx_timeout: lec0 [ 338.066667][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 338.643859][ T1102] bond7 (unregistering): (slave bridge5): Releasing backup interface [ 338.652001][ T1102] bridge5 (unregistering): left promiscuous mode [ 338.659825][ T1102] bridge5 (unregistering): left allmulticast mode [ 338.759358][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.770297][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.794091][ T1102] bond0 (unregistering): Released all slaves [ 338.809445][ T1102] bond1 (unregistering): (slave lo): Releasing backup interface [ 338.834595][ T1102] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 338.915804][ T1102] bond1 (unregistering): Released all slaves [ 338.945477][ T1102] bond2 (unregistering): Released all slaves [ 339.012264][ T1102] bond3 (unregistering): Released all slaves [ 339.059208][ T1102] bond4 (unregistering): Released all slaves [ 339.088745][ T1102] bond5 (unregistering): Released all slaves [ 339.122805][ T1102] bond6 (unregistering): Released all slaves [ 339.205786][ T1102] bond7 (unregistering): Released all slaves [ 339.251039][ T1102] bond8 (unregistering): Released all slaves [ 339.344008][ T1102] bond9 (unregistering): Released all slaves [ 339.396008][ T1102] bond10 (unregistering): Released all slaves [ 339.429606][ T5912] ip6_vti0 speed is unknown, defaulting to 1000 [ 339.436413][ T5912] syz2: Port: 1 Link DOWN [ 339.526971][ T1102] : left promiscuous mode [ 339.602829][ T1102] tipc: Disabling bearer [ 339.614810][ T1102] tipc: Left network mode [ 339.962616][ T1102] hsr_slave_0: left promiscuous mode [ 339.969828][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.129344][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 340.157396][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 340.529123][ T1102] IPVS: stop unused estimator thread 0... [ 343.853160][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 343.861226][ C0] lec:lec_tx_timeout: lec0 [ 343.866544][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 348.893363][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 348.901411][ C0] lec:lec_tx_timeout: lec0 [ 348.906646][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 349.507878][T17122] netlink: 'syz.3.3041': attribute type 1 has an invalid length. [ 349.721637][T17136] __nla_validate_parse: 3 callbacks suppressed [ 349.721660][T17136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3043'. [ 349.739890][T17122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3041'. [ 349.820747][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 349.821325][T17122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3041'. [ 349.839763][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 349.848714][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 349.856866][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 349.866735][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 349.917956][T17134] veth3: entered promiscuous mode [ 350.345487][T17148] syzkaller0: entered promiscuous mode [ 350.351598][T17148] syzkaller0: entered allmulticast mode [ 350.571823][T17175] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3053'. [ 350.613811][T17175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3053'. [ 351.179182][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3054'. [ 351.943647][ T5833] Bluetooth: hci1: command tx timeout [ 352.106422][T17139] chnl_net:caif_netlink_parms(): no params data found [ 352.231084][T17201] xt_l2tp: missing protocol rule (udp|l2tpip) [ 352.433409][T17196] batman_adv: batadv0: Adding interface: dummy0 [ 352.461324][T17196] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.614273][T17196] batman_adv: batadv0: Interface activated: dummy0 [ 352.696874][T17209] batadv0: mtu less than device minimum [ 352.716199][T17209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 352.728824][T17209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 352.740662][T17209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 352.752496][T17209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 352.764356][T17209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 352.776169][T17209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 352.787998][T17209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 352.799818][T17209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 352.811643][T17209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 352.857974][T17224] x_tables: duplicate underflow at hook 2 [ 352.915756][T17139] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.923005][T17139] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.930831][T17139] bridge_slave_0: entered allmulticast mode [ 352.955410][T17139] bridge_slave_0: entered promiscuous mode [ 352.981425][T17139] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.007195][T17139] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.031560][T17139] bridge_slave_1: entered allmulticast mode [ 353.050029][T17139] bridge_slave_1: entered promiscuous mode [ 353.193562][T17139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.223988][T17139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.253886][T17234] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3069'. [ 353.303848][T17238] netlink: 'syz.2.3071': attribute type 1 has an invalid length. [ 353.377590][T17139] team0: Port device team_slave_0 added [ 353.387093][T17139] team0: Port device team_slave_1 added [ 353.445418][T17241] netlink: 'syz.1.3073': attribute type 5 has an invalid length. [ 353.458489][T17139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.467595][T17241] netlink: 'syz.1.3073': attribute type 2 has an invalid length. [ 353.495074][T17139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.523051][T17139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.576422][T17241] vþ: entered promiscuous mode [ 353.584904][T17139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.602204][T17139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.685506][T17139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.726467][T17251] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3070'. [ 353.820002][T17139] hsr_slave_0: entered promiscuous mode [ 353.837610][T17139] hsr_slave_1: entered promiscuous mode [ 353.855111][T17139] debugfs: 'hsr0' already exists in 'hsr' [ 353.882522][T17139] Cannot create hsr debugfs directory [ 353.913139][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 353.921230][ C0] lec:lec_tx_timeout: lec0 [ 353.926380][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 354.015670][ T5833] Bluetooth: hci1: command tx timeout [ 354.091172][T17268] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3080'. [ 354.121288][T17268] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3080'. [ 354.132658][T17268] netlink: 'syz.3.3080': attribute type 5 has an invalid length. [ 354.145262][T17268] netlink: 'syz.3.3080': attribute type 6 has an invalid length. [ 354.390009][T17139] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 45885 - 0 [ 354.557823][T17139] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 45885 - 0 [ 354.647601][T17139] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 45885 - 0 [ 354.767448][T17302] __nla_validate_parse: 2 callbacks suppressed [ 354.767469][T17302] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3084'. [ 354.816144][T17310] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3087'. [ 354.825439][T17302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3084'. [ 354.852671][T17312] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3087'. [ 354.852874][T17302] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3084'. [ 354.879389][T17302] netlink: 'syz.2.3084': attribute type 3 has an invalid length. [ 354.899757][T17302] netlink: 'syz.2.3084': attribute type 2 has an invalid length. [ 354.909120][T17302] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3084'. [ 354.920355][T17139] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 45885 - 0 [ 355.030465][T17320] netlink: 'syz.5.3090': attribute type 1 has an invalid length. [ 355.087817][T17321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3089'. [ 355.292706][T17139] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 355.332544][T17139] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 355.366975][T17331] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3094'. [ 355.396962][T17139] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 355.420614][T17334] netlink: 'syz.5.3096': attribute type 11 has an invalid length. [ 355.433910][T17139] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 355.442696][T17334] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3096'. [ 355.577593][T17345] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3097'. [ 355.675870][T17139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.711504][T17139] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.755456][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.762679][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.803948][ T634] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.811155][ T634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.857590][T17355] : renamed from bond0 (while UP) [ 356.099212][ T5833] Bluetooth: hci1: command tx timeout [ 356.118452][T17372] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 356.319525][T17388] netlink: 'syz.5.3106': attribute type 1 has an invalid length. [ 356.527336][T17139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.650587][T17139] veth0_vlan: entered promiscuous mode [ 356.680324][T17139] veth1_vlan: entered promiscuous mode [ 356.766647][T17139] veth0_macvtap: entered promiscuous mode [ 356.782021][T17139] veth1_macvtap: entered promiscuous mode [ 356.808426][T17139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.841090][T17139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.884613][T12407] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.897348][T12407] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.910209][T12407] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.920334][T12407] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.072829][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.110977][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.160103][T17419] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 357.181803][T17424] netlink: 'syz.3.3119': attribute type 21 has an invalid length. [ 357.192025][T17418] netlink: 'syz.1.3118': attribute type 10 has an invalid length. [ 357.210038][T17424] netlink: 'syz.3.3119': attribute type 6 has an invalid length. [ 357.245993][T12407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.269007][T12407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.310619][T17418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.362899][T17418] : (slave batadv0): Enslaving as an active interface with an up link [ 357.555760][T17434] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.563225][T17434] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.701093][T17447] tipc: Enabling of bearer rejected, failed to enable media [ 357.727862][T17445] lo: Caught tx_queue_len zero misconfig [ 358.156236][T17482] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 358.173894][ T5833] Bluetooth: hci1: command tx timeout [ 358.224932][T17482] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 358.748740][T17516] sctp: [Deprecated]: syz.3.3147 (pid 17516) Use of int in maxseg socket option. [ 358.748740][T17516] Use struct sctp_assoc_value instead [ 358.943147][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 358.951202][ C0] lec:lec_tx_timeout: lec0 [ 358.956901][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 359.253538][ T1213] IPVS: starting estimator thread 0... [ 359.343927][T17546] IPVS: using max 25 ests per chain, 60000 per kthread [ 359.507399][T17565] netlink: 'syz.0.3163': attribute type 10 has an invalid length. [ 359.540718][T17559] bond1: option xmit_hash_policy: invalid value (64) [ 359.592407][T17559] bond1 (unregistering): Released all slaves [ 359.839563][T17586] __nla_validate_parse: 20 callbacks suppressed [ 359.839584][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3167'. [ 359.939365][T17592] syzkaller1: entered promiscuous mode [ 359.946425][T17592] syzkaller1: entered allmulticast mode [ 360.075375][T17597] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3172'. [ 360.096106][T17597] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3172'. [ 360.126297][T17597] : entered promiscuous mode [ 360.146718][T17601] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3174'. [ 360.494076][T17616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3177'. [ 360.524510][T17622] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 360.538938][T17627] netlink: 'syz.2.3183': attribute type 1 has an invalid length. [ 360.565213][T17616] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 360.572199][T17627] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3183'. [ 360.595469][T17616] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 360.634184][T17616] team0: Failed to send options change via netlink (err -105) [ 360.641676][T17616] team0: Port device batadv1 added [ 360.690203][T17632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3184'. [ 360.714981][T17634] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.3185'. [ 360.777993][T17632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3184'. [ 360.802185][T17636] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 360.909187][T17640] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3188'. [ 360.950353][T17640] net_ratelimit: 14 callbacks suppressed [ 360.950394][T17640] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 361.285315][T17658] netlink: 'syz.2.3194': attribute type 8 has an invalid length. [ 361.523561][T17669] pim6reg1: entered promiscuous mode [ 361.528937][T17669] pim6reg1: entered allmulticast mode [ 361.646894][T17678] netlink: 'syz.2.3202': attribute type 2 has an invalid length. [ 361.798859][T17692] netlink: 'syz.1.3203': attribute type 12 has an invalid length. [ 361.848242][T17689] tipc: Started in network mode [ 361.865423][T17689] tipc: Node identity 1eb4843276b9, cluster identity 4711 [ 361.887395][T17689] tipc: Enabled bearer , priority 0 [ 361.934483][ T5833] Bluetooth: hci1: command tx timeout [ 362.028796][T17698] IPv6: sit1: Disabled Multicast RS [ 362.057184][T12413] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.070426][T12413] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.103850][T12413] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.130380][T17683] tipc: Disabling bearer [ 362.315531][T17715] openvswitch: netlink: Flow key attr not present in new flow. [ 362.399299][T12413] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.463361][T17705] nbd2: detected capacity change from 0 to 127 [ 362.481735][ T5833] block nbd2: Receive control failed (result -32) [ 362.502759][T17142] block nbd2: Dead connection, failed to find a fallback [ 362.513965][T17142] block nbd2: shutting down sockets [ 362.519863][T17142] blk_print_req_error: 138 callbacks suppressed [ 362.519966][T17142] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.536868][T17142] buffer_io_error: 138 callbacks suppressed [ 362.536883][T17142] Buffer I/O error on dev nbd2, logical block 0, async page read [ 362.552497][T17142] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.565304][T17142] Buffer I/O error on dev nbd2, logical block 1, async page read [ 362.602954][T17142] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.635394][T17142] Buffer I/O error on dev nbd2, logical block 2, async page read [ 362.669914][T17142] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.706165][T17142] Buffer I/O error on dev nbd2, logical block 3, async page read [ 362.749512][T17142] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.789364][T17142] Buffer I/O error on dev nbd2, logical block 0, async page read [ 362.826726][T17142] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.845691][T17725] netlink: 'syz.1.3213': attribute type 1 has an invalid length. [ 362.858505][T17142] Buffer I/O error on dev nbd2, logical block 1, async page read [ 362.889348][T17142] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.911585][T17142] Buffer I/O error on dev nbd2, logical block 2, async page read [ 362.932014][T17142] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.953570][T17142] Buffer I/O error on dev nbd2, logical block 3, async page read [ 362.961582][T17142] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.975221][T17142] Buffer I/O error on dev nbd2, logical block 0, async page read [ 362.991115][T17142] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 363.000840][T17142] Buffer I/O error on dev nbd2, logical block 1, async page read [ 363.009990][T17142] ldm_validate_partition_table(): Disk read failed. [ 363.017525][T17142] Dev nbd2: unable to read RDB block 0 [ 363.027547][T17142] nbd2: unable to read partition table [ 363.088725][T17142] ldm_validate_partition_table(): Disk read failed. [ 363.104716][T17142] Dev nbd2: unable to read RDB block 0 [ 363.114664][T17142] nbd2: unable to read partition table [ 363.154145][T17741] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 363.168645][T17741] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 363.411783][T17750] ip6gretap0: entered promiscuous mode [ 363.963153][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 363.971257][ C0] lec:lec_tx_timeout: lec0 [ 363.976205][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 364.059426][T17788] netlink: 'syz.5.3236': attribute type 3 has an invalid length. [ 364.102921][T17788] SET target dimension over the limit! [ 364.121193][T17792] netlink: 'syz.3.3235': attribute type 1 has an invalid length. [ 364.235854][T17790] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.245126][T17790] bond1: (slave bond2): making interface the new active one [ 364.253745][T17790] bond1: (slave bond2): Enslaving as an active interface with an up link [ 364.308963][T17792] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 364.354444][T17790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.010174][T17855] __nla_validate_parse: 20 callbacks suppressed [ 365.010235][T17855] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3251'. [ 365.257770][T17864] openvswitch: netlink: IP tunnel dst address not specified [ 365.485521][T17882] xt_cgroup: path and classid specified [ 365.661698][T17887] xt_l2tp: v2 tid > 0xffff: 1114244 [ 365.803408][T17894] x_tables: duplicate entry at hook 2 [ 365.872283][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3266'. [ 365.895661][T17899] bridge0: port 3(ipvlan2) entered blocking state [ 365.902358][T17899] bridge0: port 3(ipvlan2) entered disabled state [ 365.910517][T17899] ipvlan2: entered allmulticast mode [ 365.916348][T17899] bridge0: entered allmulticast mode [ 365.925193][T17899] ipvlan2: left allmulticast mode [ 365.930370][T17899] bridge0: left allmulticast mode [ 366.095627][T17909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3268'. [ 366.110178][T17909] x_tables: duplicate underflow at hook 2 [ 366.299403][T17920] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3272'. [ 366.527470][T17933] netlink: 'syz.3.3277': attribute type 11 has an invalid length. [ 366.768225][T17952] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3282'. [ 366.852760][T17960] netlink: 'syz.3.3284': attribute type 1 has an invalid length. [ 366.999924][T17971] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 367.012693][T17971] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 367.024194][T17971] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 367.042066][T17960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3284'. [ 367.215330][T17980] erspan0: entered allmulticast mode [ 367.234797][T17979] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3288'. [ 367.244346][T17979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3288'. [ 367.333536][T17982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3290'. [ 367.362842][T17985] sock: sock_set_timeout: `syz.5.3291' (pid 17985) tries to set negative timeout [ 367.420467][T17982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3290'. [ 367.802632][T17998] team0 (unregistering): Port device bridge0 removed [ 368.983155][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 368.991363][ C0] lec:lec_tx_timeout: lec0 [ 368.996368][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 369.726312][T17956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 370.099006][T18017] __nla_validate_parse: 3 callbacks suppressed [ 370.099027][T18017] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3299'. [ 370.995599][T18066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3316'. [ 371.008321][T18066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3316'. [ 371.167036][T18071] tap0: tun_chr_ioctl cmd 2148553947 [ 371.186775][T18071] netlink: 14408 bytes leftover after parsing attributes in process `syz.0.3317'. [ 371.719902][T18098] wg0: entered allmulticast mode [ 371.729495][T18099] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3326'. [ 371.832944][T18105] netlink: 13 bytes leftover after parsing attributes in process `syz.5.3327'. [ 372.019365][T18112] openvswitch: netlink: Message has 8 unknown bytes. [ 372.105462][T18116] IPv6: addrconf: prefix option has invalid lifetime [ 372.326521][T18126] Can't find ip_set type has`:ip, [ 372.344095][T18127] Can't find ip_set type has`:ip, [ 372.388932][T18131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3337'. [ 372.420470][T18135] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3338'. [ 372.544997][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3340'. [ 372.621742][T18142] netlink: 'syz.2.3340': attribute type 13 has an invalid length. [ 372.835928][T18156] vlan2: entered promiscuous mode [ 372.849610][T18164] netlink: 'syz.5.3346': attribute type 1 has an invalid length. [ 372.858612][T18156] bridge0: entered promiscuous mode [ 373.012007][T18164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.106645][T18168] vlan2: entered promiscuous mode [ 373.111764][T18168] bond1: entered promiscuous mode [ 373.117413][T18168] vlan2: entered allmulticast mode [ 373.122659][T18168] bond1: entered allmulticast mode [ 373.130133][T18142] lo: Caught tx_queue_len zero misconfig [ 373.176740][T18172] bond1: (slave bridge4): making interface the new active one [ 373.187437][T18172] bridge4: entered promiscuous mode [ 373.192862][T18172] bridge4: entered allmulticast mode [ 373.202179][T18172] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 373.255806][T18182] sctp: [Deprecated]: syz.1.3350 (pid 18182) Use of int in maxseg socket option. [ 373.255806][T18182] Use struct sctp_assoc_value instead [ 373.468443][T18192] netlink: 'syz.0.3355': attribute type 21 has an invalid length. [ 373.525403][T18198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3354'. [ 373.644747][T18204] netlink: 'syz.0.3358': attribute type 1 has an invalid length. [ 373.673020][T18204] netlink: 'syz.0.3358': attribute type 1 has an invalid length. [ 373.690362][T18209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.726552][T18208] netlink: 'syz.2.3360': attribute type 1 has an invalid length. [ 373.760812][T18209] team0: Device ip6gre1 is of different type [ 373.839003][T18215] !: renamed from dummy0 (while UP) [ 373.959812][T18225] netlink: 'syz.0.3363': attribute type 5 has an invalid length. [ 373.993793][T18225] netlink: 'syz.0.3363': attribute type 11 has an invalid length. [ 374.003132][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 374.011196][ C0] lec:lec_tx_timeout: lec0 [ 374.018341][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 374.055161][T18225] netlink: 'syz.0.3363': attribute type 11 has an invalid length. [ 374.135946][T18227] bond0: entered promiscuous mode [ 374.141224][T18227] bond0: entered allmulticast mode [ 374.150132][T18227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.291512][T18297] syzkaller0: entered promiscuous mode [ 375.302158][T18297] syzkaller0: entered allmulticast mode [ 375.362691][T18298] netlink: 'syz.1.3378': attribute type 10 has an invalid length. [ 375.371771][T18298] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.379742][T18298] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.393987][T18298] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.401221][T18298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.408845][T18298] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.416107][T18298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.427987][T18298] : (slave bridge0): Enslaving as an active interface with an up link [ 375.675047][T18271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.822822][T18306] __nla_validate_parse: 10 callbacks suppressed [ 375.822844][T18306] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3382'. [ 375.973968][T18316] netlink: 'syz.2.3384': attribute type 10 has an invalid length. [ 375.995235][T18316] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.002474][T18316] bridge0: port 2(bridge_slave_1) entered listening state [ 376.009955][T18316] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.017280][T18316] bridge0: port 1(bridge_slave_0) entered listening state [ 376.087052][T18316] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 376.249684][T18332] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3389'. [ 376.405898][T18341] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 376.429949][T18341] bond2 (unregistering): Released all slaves [ 376.460212][T18344] netlink: 'syz.2.3393': attribute type 12 has an invalid length. [ 376.601505][T18348] bond1: entered promiscuous mode [ 376.606993][T18348] bond1: entered allmulticast mode [ 376.612715][T18348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.776932][T18362] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3397'. [ 377.153583][T18373] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20000 [ 377.425051][T18381] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3405'. [ 377.539566][T18389] IPv6: addrconf: prefix option has invalid lifetime [ 377.552729][T18393] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3405'. [ 377.648416][T18397] validate_nla: 6 callbacks suppressed [ 377.648437][T18397] netlink: 'syz.1.3410': attribute type 1 has an invalid length. [ 377.658682][T18399] openvswitch: netlink: Missing valid actions attribute. [ 377.691935][T18397] netlink: 476 bytes leftover after parsing attributes in process `syz.1.3410'. [ 377.703007][T18399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.724497][T18397] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.3410'. [ 377.853008][T18411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.874176][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3413'. [ 377.905829][T18411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3413'. [ 377.984576][T18414] bond_slave_0: Caught tx_queue_len zero misconfig [ 378.014549][T18417] ip6t_srh: unknown srh match flags 4000 [ 378.142911][T18424] !: renamed from dummy0 (while UP) [ 378.605366][T18405] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 378.659337][T18438] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3421'. [ 378.757759][T18434] bridge3: entered promiscuous mode [ 378.763043][T18434] bridge3: entered allmulticast mode [ 378.784575][T18449] xt_ecn: cannot match TCP bits for non-tcp packets [ 378.883936][T18455] syzkaller0: entered promiscuous mode [ 378.898292][T18455] syzkaller0: entered allmulticast mode [ 379.033155][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 379.041257][ C0] lec:lec_tx_timeout: lec0 [ 379.045939][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 379.401761][T18471] netlink: 'syz.0.3433': attribute type 1 has an invalid length. [ 379.510471][T18479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.520049][T18479] batadv0: mtu less than device minimum [ 379.527642][T18479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.540289][T18479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.552266][T18479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.564428][T18479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.576330][T18479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.588184][T18479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.600037][T18479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.611939][T18479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.623761][T18479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.652596][T18479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.734799][T18479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.779419][T18479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.807545][T18495] netlink: 'syz.5.3441': attribute type 2 has an invalid length. [ 379.817326][T18479] batman_adv: batadv0: Interface deactivated: 0! [ 379.826435][T18479] batman_adv: batadv0: Removing interface: 0! [ 379.925705][T18479] : (slave batadv0): Releasing backup interface [ 380.263457][T18526] netlink: 'syz.1.3447': attribute type 3 has an invalid length. [ 380.391587][T18521] syzkaller1: entered promiscuous mode [ 380.405507][T18521] syzkaller1: entered allmulticast mode [ 380.840834][T18545] __nla_validate_parse: 7 callbacks suppressed [ 380.840856][T18545] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3453'. [ 381.015105][T18557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3457'. [ 381.039076][T18557] C: renamed from lo (while UP) [ 381.100198][T18562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3458'. [ 381.242438][T18573] SET target dimension over the limit! [ 382.187126][T18607] syzkaller1: entered promiscuous mode [ 382.218564][T18607] syzkaller1: entered allmulticast mode [ 382.273622][T18619] netlink: 'syz.5.3471': attribute type 21 has an invalid length. [ 382.281569][T18619] netlink: 'syz.5.3471': attribute type 22 has an invalid length. [ 382.297119][T18619] netlink: 'syz.5.3471': attribute type 23 has an invalid length. [ 382.324828][T18619] netlink: 'syz.5.3471': attribute type 25 has an invalid length. [ 382.355837][T18619] netlink: 'syz.5.3471': attribute type 26 has an invalid length. [ 382.382180][T18619] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3471'. [ 382.755584][T18642] xt_hashlimit: size too large, truncated to 1048576 [ 382.840358][T18647] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3479'. [ 383.485586][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3483'. [ 383.554241][T18681] netlink: 'syz.1.3486': attribute type 33 has an invalid length. [ 383.570167][T18681] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3486'. [ 383.593598][T18680] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3486'. [ 383.720007][T18690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3489'. [ 383.734469][T18690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3489'. [ 383.836104][T18700] syzkaller0: entered promiscuous mode [ 383.852066][T18700] syzkaller0: entered allmulticast mode [ 383.876730][T18700] tipc: Started in network mode [ 383.886203][T18700] tipc: Node identity a655a00e3af8, cluster identity 4711 [ 383.899101][T18700] tipc: Enabled bearer , priority 0 [ 384.053557][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 384.061885][ C0] lec:lec_tx_timeout: lec0 [ 384.067362][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 384.246902][T18697] tipc: Resetting bearer [ 384.276997][T18697] tipc: Disabling bearer [ 384.632420][T18730] xt_CT: You must specify a L4 protocol and not use inversions on it [ 385.369188][T18765] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 385.439798][T18765] bond3: (slave lo): Enslaving as an active interface with an up link [ 385.468359][T18765] net_ratelimit: 31 callbacks suppressed [ 385.468380][T18765] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 385.697769][T18776] netlink: 'syz.1.3513': attribute type 21 has an invalid length. [ 385.966335][T18787] syzkaller1: entered promiscuous mode [ 385.979116][T18787] syzkaller1: entered allmulticast mode [ 386.669685][T18823] __nla_validate_parse: 7 callbacks suppressed [ 386.669709][T18823] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3528'. [ 387.142011][T18839] netlink: 'syz.5.3532': attribute type 13 has an invalid length. [ 387.259543][T18842] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3533'. [ 388.526715][T18828] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 388.553634][T18839] gretap0: refused to change device tx_queue_len [ 388.561684][T18839] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 388.590077][T18846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3534'. [ 388.623563][T18846] veth0: Caught tx_queue_len zero misconfig [ 388.735094][T18851] syzkaller1: entered promiscuous mode [ 388.761761][T18851] syzkaller1: entered allmulticast mode [ 388.875896][T18864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3538'. [ 388.979218][T18871] nbd: illegal input index 2958377 [ 389.006727][T18873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.095365][T18876] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 389.270395][T18879] syzkaller0: entered promiscuous mode [ 389.301201][T18879] syzkaller0: entered allmulticast mode [ 389.472418][T18897] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3547'. [ 389.766509][T18908] digital: digital_start_poll: Unknown protocol [ 389.853435][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 389.861537][ C0] lec:lec_tx_timeout: lec0 [ 389.866955][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 390.034336][T18921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3554'. [ 390.170636][T18931] syzkaller0: entered promiscuous mode [ 390.197892][T18931] syzkaller0: entered allmulticast mode [ 390.270744][T18931] xt_hashlimit: size too large, truncated to 1048576 [ 390.399408][T18942] atomic_op ffff8880355a5198 conn xmit_atomic 0000000000000000 [ 390.789469][T18948] netlink: 'syz.0.3559': attribute type 6 has an invalid length. [ 390.911843][T18952] tipc: Failed to remove unknown binding: 66,0,0/0:3269062091/3269062092 [ 390.931347][T18950] syzkaller0: entered promiscuous mode [ 390.937357][T18952] tipc: Failed to remove unknown binding: 66,0,0/0:3269062091/3269062092 [ 390.947772][T18950] syzkaller0: entered allmulticast mode [ 390.956543][T18952] netlink: 'syz.3.3562': attribute type 26 has an invalid length. [ 390.967562][T18954] tunl0: Caught tx_queue_len zero misconfig [ 390.987288][T18950] x_tables: duplicate underflow at hook 3 [ 390.995808][T18954] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3561'. [ 391.297373][T18975] tc_dump_action: action bad kind [ 391.353791][T18975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3568'. [ 391.433634][T18982] netlink: 'syz.1.3570': attribute type 10 has an invalid length. [ 391.459643][T18982] team0: Device ipvlan1 failed to register rx_handler [ 391.640143][T18994] netlink: 'syz.1.3572': attribute type 8 has an invalid length. [ 391.673480][T18994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3572'. [ 391.736513][T18994] gretap0: entered promiscuous mode [ 391.768503][T18994] gretap0: left promiscuous mode [ 392.287011][T19015] xt_policy: output policy not valid in PREROUTING and INPUT [ 392.315121][T19015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3580'. [ 392.505326][T19015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3580'. [ 392.797814][T19029] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3583'. [ 393.075267][T19047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3591'. [ 393.148708][T19047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3591'. [ 393.178838][T19051] netlink: 'syz.0.3590': attribute type 1 has an invalid length. [ 393.281314][T19051] bond4: entered promiscuous mode [ 393.290945][T19051] 8021q: adding VLAN 0 to HW filter on device bond4 [ 393.369707][T19060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.398841][T19051] bond4: (slave bridge5): making interface the new active one [ 393.407661][T19051] bridge5: entered promiscuous mode [ 393.434907][T19051] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 393.604941][T19060] bond2: option mode: invalid value (133) [ 393.628120][T19060] bond2 (unregistering): Released all slaves [ 393.699590][T19070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3595'. [ 393.715878][T19070] chnl_net:caif_netlink_parms(): no params data found [ 394.454246][T19097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.712720][T19109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3605'. [ 394.893281][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 394.901380][ C0] lec:lec_tx_timeout: lec0 [ 394.906565][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 395.118349][T19131] Cannot find add_set index 0 as target [ 395.128968][T19131] netlink: 'syz.2.3613': attribute type 2 has an invalid length. [ 395.139487][T19131] netlink: 'syz.2.3613': attribute type 1 has an invalid length. [ 395.163795][T19134] x_tables: duplicate underflow at hook 1 [ 395.279390][T19139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3616'. [ 395.396086][T19146] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.3616'. [ 395.498880][T19146] syzkaller1: entered promiscuous mode [ 395.507354][T19146] syzkaller1: entered allmulticast mode [ 395.739845][T19170] netlink: 'syz.2.3626': attribute type 1 has an invalid length. [ 396.100250][T19170] 8021q: adding VLAN 0 to HW filter on device bond2 [ 396.127425][T12407] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.145085][T12407] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.290900][T12407] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.310199][T12407] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.784253][T19214] lo speed is unknown, defaulting to 1000 [ 398.847325][T19214] lo speed is unknown, defaulting to 1000 [ 398.921017][T19214] lo speed is unknown, defaulting to 1000 [ 399.132510][T19248] __nla_validate_parse: 3 callbacks suppressed [ 399.132530][T19248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3643'. [ 399.196052][T19249] smc: net device wlan0 applied user defined pnetid SYZ0 [ 399.215880][T19249] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3644'. [ 399.250751][T19248] veth0_to_team: entered promiscuous mode [ 399.284778][T19248] veth0_to_team: left promiscuous mode [ 399.513608][T19258] ip6tnl0: Caught tx_queue_len zero misconfig [ 399.572029][T19214] infiniband syz0: set active [ 399.577293][ T5977] lo speed is unknown, defaulting to 1000 [ 399.583616][T19214] infiniband syz0: added lo [ 399.590453][T19214] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 399.596389][T19214] infiniband syz0: Couldn't open port 1 [ 399.697560][T19214] RDS/IB: syz0: added [ 399.701665][T19214] smc: adding ib device syz0 with port count 1 [ 399.733381][T19214] smc: ib device syz0 port 1 has no pnetid [ 399.770794][T19214] lo speed is unknown, defaulting to 1000 [ 399.785593][ T5940] lo speed is unknown, defaulting to 1000 [ 399.833707][T19283] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3653'. [ 399.923418][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 399.931516][ C0] lec:lec_tx_timeout: lec0 [ 399.936361][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 400.016421][T19291] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.3655'. [ 400.167421][T19296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3657'. [ 400.184926][T19295] syzkaller1: entered promiscuous mode [ 400.190455][T19295] syzkaller1: entered allmulticast mode [ 400.429278][T19310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3658'. [ 400.472615][T19214] lo speed is unknown, defaulting to 1000 [ 400.919488][T19337] netlink: 'syz.5.3666': attribute type 11 has an invalid length. [ 401.176735][T19339] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.184114][T19339] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.240316][T19339] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 401.258380][T19214] lo speed is unknown, defaulting to 1000 [ 401.317457][T19342] sit2: entered promiscuous mode [ 401.322473][T19342] sit2: entered allmulticast mode [ 401.342302][T19350] netlink: 'syz.5.3671': attribute type 33 has an invalid length. [ 401.539334][T19349] syzkaller0: entered promiscuous mode [ 401.545503][T19349] syzkaller0: entered allmulticast mode [ 402.590211][T19392] xt_policy: too many policy elements [ 402.676361][T19393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3679'. [ 403.457550][T19214] lo speed is unknown, defaulting to 1000 [ 403.513523][T19393] hsr_slave_1 (unregistering): left promiscuous mode [ 403.742576][T19403] netlink: 'syz.2.3683': attribute type 1 has an invalid length. [ 403.775232][T19403] netlink: 'syz.2.3683': attribute type 7 has an invalid length. [ 403.783028][T19403] netlink: 'syz.2.3683': attribute type 8 has an invalid length. [ 403.801196][T19403] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3683'. [ 403.904530][T19403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3683'. [ 403.925199][T19403] netlink: 'syz.2.3683': attribute type 7 has an invalid length. [ 403.970359][T19403] netlink: 'syz.2.3683': attribute type 8 has an invalid length. [ 404.006046][T19403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3683'. [ 404.112764][T19214] lo speed is unknown, defaulting to 1000 [ 404.223960][T19425] tipc: Started in network mode [ 404.228938][T19425] tipc: Node identity 12bdd06e36e2, cluster identity 4711 [ 404.237203][T19425] tipc: Enabled bearer , priority 0 [ 404.330741][T19425] syzkaller0: entered promiscuous mode [ 404.338678][T19425] syzkaller0: entered allmulticast mode [ 404.356178][T19425] tipc: Resetting bearer [ 404.369603][T19424] tipc: Resetting bearer [ 404.945956][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 404.954003][ C0] lec:lec_tx_timeout: lec0 [ 404.958662][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 405.915595][T19424] tipc: Disabling bearer [ 405.925247][T19214] lo speed is unknown, defaulting to 1000 [ 405.935772][ T5977] tipc: Node number set to 610259054 [ 406.054007][T19434] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3692'. [ 406.127660][T19214] lo speed is unknown, defaulting to 1000 [ 406.294116][T19214] lo speed is unknown, defaulting to 1000 [ 406.455453][T19419] siw: device registration error -23 [ 406.906851][T19466] tipc: Enabling of bearer rejected, failed to enable media [ 406.932281][ T6063] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 406.951887][ T6063] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 406.979734][ T6063] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 406.994000][T19469] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 407.020427][ T6063] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 407.027400][ T6063] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 407.263761][T19492] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 407.314636][T19495] ipt_ECN: cannot use operation on non-tcp rule [ 407.389442][T19498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3711'. [ 407.509906][T19506] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 407.567641][T19509] netlink: 'syz.0.3716': attribute type 12 has an invalid length. [ 407.576656][T19509] netlink: 'syz.0.3716': attribute type 29 has an invalid length. [ 407.587560][T19509] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3716'. [ 407.599588][T19509] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3716'. [ 407.892797][T19520] netlink: 'syz.1.3719': attribute type 10 has an invalid length. [ 408.209518][T19526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3720'. [ 408.293508][T19526] netlink: 'syz.1.3720': attribute type 11 has an invalid length. [ 408.332203][T19526] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3720'. [ 408.555549][T19533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3722'. [ 408.574788][T19532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3723'. [ 408.597171][T19532] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3723'. [ 408.771974][T19538] netlink: 'syz.1.3725': attribute type 2 has an invalid length. [ 408.793356][T19538] netlink: 119 bytes leftover after parsing attributes in process `syz.1.3725'. [ 408.921649][T19546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.285472][T19555] netlink: 'syz.1.3729': attribute type 10 has an invalid length. [ 409.446217][T19555] syz_tun: entered promiscuous mode [ 409.474808][T19555] : (slave syz_tun): Enslaving as an active interface with an up link [ 409.650270][T19560] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 409.973453][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 409.981544][ C0] lec:lec_tx_timeout: lec0 [ 409.986801][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 410.393640][T19569] syzkaller0: entered promiscuous mode [ 410.402338][T19569] syzkaller0: entered allmulticast mode [ 410.836777][T19591] netlink: zone id is out of range [ 410.862732][T19591] netlink: del zone limit has 4 unknown bytes [ 410.984265][T19594] syzkaller0: entered promiscuous mode [ 410.989962][T19594] syzkaller0: entered allmulticast mode [ 411.131637][T19603] bridge_slave_1: left allmulticast mode [ 411.151910][T19603] bridge_slave_1: left promiscuous mode [ 411.177150][T19603] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.201872][T19605] __nla_validate_parse: 2 callbacks suppressed [ 411.201923][T19605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3745'. [ 411.249818][T19609] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3746'. [ 411.293912][T19603] bridge_slave_0: left allmulticast mode [ 411.306844][T19603] bridge_slave_0: left promiscuous mode [ 411.321692][T19603] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.368916][T19603] bond0: (slave bridge0): Releasing backup interface [ 411.536530][T19614] lo speed is unknown, defaulting to 1000 [ 411.854474][T19596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 412.528071][T19649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3755'. [ 412.714454][T19662] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3759'. [ 412.763968][T19649] bond5: option xmit_hash_policy: invalid value (64) [ 412.783580][T19649] bond5 (unregistering): Released all slaves [ 413.030053][T19654] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 413.050713][T19654] bond5 (unregistering): Released all slaves [ 413.247998][T19665] syzkaller0: entered promiscuous mode [ 413.254729][T19665] syzkaller0: entered allmulticast mode [ 413.491858][T19687] Cannot find add_set index 2 as target [ 414.065581][T19674] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 414.344381][T19703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3767'. [ 415.003413][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 415.011554][ C0] lec:lec_tx_timeout: lec0 [ 415.016289][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 415.942887][T19712] netlink: 'syz.5.3772': attribute type 2 has an invalid length. [ 415.965570][T19713] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3770'. [ 416.004958][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3770'. [ 416.027013][T19716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.066291][T19713] bond0: entered promiscuous mode [ 416.093581][T19713] bond_slave_0: entered promiscuous mode [ 416.104044][T19713] bond_slave_1: entered promiscuous mode [ 416.137490][T19713] bond0: left promiscuous mode [ 416.147207][T19713] bond_slave_0: left promiscuous mode [ 416.163294][T19713] bond_slave_1: left promiscuous mode [ 416.313871][T19729] netlink: 'syz.1.3776': attribute type 39 has an invalid length. [ 416.399281][T19729] : (slave syz_tun): Releasing backup interface [ 416.778143][T19759] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3784'. [ 417.096978][T19771] netlink: 'syz.1.3789': attribute type 10 has an invalid length. [ 417.206526][T19771] team0: Device vxcan1 is of different type [ 417.274890][T19777] xt_hashlimit: size too large, truncated to 1048576 [ 417.375502][T19779] x_tables: duplicate underflow at hook 2 [ 417.392606][T19783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3792'. [ 417.442885][T19786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3792'. [ 418.090219][T19806] tipc: Failed to remove unknown binding: 66,0,0/0:577139863/577139864 [ 418.099463][T19806] tipc: Failed to remove unknown binding: 66,0,0/0:577139863/577139864 [ 418.160459][T19810] netlink: 'syz.2.3797': attribute type 1 has an invalid length. [ 418.168409][T19810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3797'. [ 418.580628][T19824] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 418.691425][T19833] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3804'. [ 418.992560][T19848] netlink: 208 bytes leftover after parsing attributes in process `syz.5.3810'. [ 419.610337][T19886] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3816'. [ 420.023340][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 420.031407][ C0] lec:lec_tx_timeout: lec0 [ 420.036068][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 420.096894][T19900] gtp1: entered promiscuous mode [ 420.133614][T19900] gtp1: entered allmulticast mode [ 420.171288][T19904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3825'. [ 420.255502][T19909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3827'. [ 420.661897][T19920] lo speed is unknown, defaulting to 1000 [ 420.918737][T19937] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3832'. [ 422.116625][T19968] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.124378][T19968] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.181714][T19978] netlink: 'syz.5.3840': attribute type 4 has an invalid length. [ 422.190825][T19978] __nla_validate_parse: 3 callbacks suppressed [ 422.190847][T19978] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3840'. [ 422.210737][T19978] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3840'. [ 422.230201][T19978] netlink: 'syz.5.3840': attribute type 12 has an invalid length. [ 422.247099][T19979] netlink: 'syz.5.3840': attribute type 12 has an invalid length. [ 422.417092][T19968] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 422.492734][T19964] syz_tun: entered promiscuous mode [ 422.515516][T19964] syz_tun: left promiscuous mode [ 422.605219][T19978] bond2: option primary_reselect: invalid value (255) [ 422.621673][T19978] bond2 (unregistering): Released all slaves [ 422.682400][T19979] bond2: option primary_reselect: invalid value (255) [ 422.697382][T19979] bond2 (unregistering): Released all slaves [ 422.950250][T20013] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3845'. [ 423.305716][T20029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3850'. [ 423.315087][T20029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3850'. [ 423.350399][T20029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3850'. [ 423.368853][T20029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.815406][T20058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3861'. [ 423.825314][T20050] block nbd3: server does not support multiple connections per device. [ 423.848795][T20050] block nbd3: shutting down sockets [ 423.937131][T20051] block nbd4: server does not support multiple connections per device. [ 423.947112][T20051] block nbd4: shutting down sockets [ 423.964011][T20068] netlink: 'syz.3.3862': attribute type 32 has an invalid length. [ 424.058461][T20068] bond4: option coupled_control: invalid value (5) [ 424.110318][T20068] bond4 (unregistering): Released all slaves [ 424.199248][T20078] netlink: 380 bytes leftover after parsing attributes in process `syz.5.3866'. [ 424.302333][T20082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3868'. [ 424.362210][T20083] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3868'. [ 424.461672][T20082] bond4: option xmit_hash_policy: invalid value (64) [ 424.536171][T20082] bond4 (unregistering): Released all slaves [ 424.627199][T20092] netlink: 'syz.2.3871': attribute type 1 has an invalid length. [ 424.719820][T20102] tipc: Enabled bearer , priority 0 [ 424.727404][T20101] syzkaller0: entered promiscuous mode [ 424.738734][T20101] syzkaller0: entered allmulticast mode [ 424.814325][T20102] tipc: Resetting bearer [ 424.829955][T20104] xt_hashlimit: size too large, truncated to 1048576 [ 424.844974][T20106] netlink: 'syz.2.3876': attribute type 8 has an invalid length. [ 424.864153][T20100] tipc: Resetting bearer [ 424.918440][T20100] tipc: Disabling bearer [ 424.953698][T20106] bond0: entered promiscuous mode [ 424.961560][T20106] bond_slave_0: entered promiscuous mode [ 424.976285][T20106] bond_slave_1: entered promiscuous mode [ 425.002105][T20106] gretap0: entered promiscuous mode [ 425.016599][T20106] erspan0: entered promiscuous mode [ 425.037708][T20106] debugfs: 'hsr1' already exists in 'hsr' [ 425.044061][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 425.044093][ C0] lec:lec_tx_timeout: lec0 [ 425.052525][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 425.117593][T20106] Cannot create hsr debugfs directory [ 425.147058][T20120] openvswitch: netlink: Flow actions attr not present in new flow. [ 425.158164][T20106] hsr1: entered promiscuous mode [ 425.371265][T20127] netlink: 'syz.1.3879': attribute type 30 has an invalid length. [ 425.747698][T20158] openvswitch: netlink: IPv4 tunnel dst address is zero [ 426.057633][T20178] GUP no longer grows the stack in syz.2.3892 (20178): 200000003000-20000000a000 (200000001000) [ 426.070062][T20178] CPU: 0 UID: 0 PID: 20178 Comm: syz.2.3892 Not tainted syzkaller #0 PREEMPT(full) [ 426.070100][T20178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 426.070123][T20178] Call Trace: [ 426.070132][T20178] [ 426.070142][T20178] dump_stack_lvl+0xe8/0x150 [ 426.070182][T20178] __get_user_pages+0x2453/0x29d0 [ 426.070217][T20178] ? __lock_acquire+0x6b5/0x2cf0 [ 426.070266][T20178] ? __gup_longterm_locked+0xc4e/0x1630 [ 426.070300][T20178] ? down_read_killable+0x1bb/0x340 [ 426.070334][T20178] __gup_longterm_locked+0xdcf/0x1630 [ 426.070395][T20178] gup_fast_fallback+0x1d82/0x22e0 [ 426.070464][T20178] ? __pfx_gup_fast_fallback+0x10/0x10 [ 426.070495][T20178] ? futex_unqueue+0x22/0x240 [ 426.070521][T20178] ? futex_unqueue+0x22/0x240 [ 426.070545][T20178] ? is_valid_gup_args+0x11f/0x200 [ 426.070580][T20178] ? get_user_pages_fast+0x4d/0xb0 [ 426.070616][T20178] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 426.070659][T20178] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 426.070687][T20178] iov_iter_get_pages2+0x5e/0xa0 [ 426.070724][T20178] __se_sys_vmsplice+0x7b3/0x1490 [ 426.070779][T20178] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 426.070821][T20178] ? __pfx_futex_wait+0x10/0x10 [ 426.070866][T20178] ? lockdep_hardirqs_on+0x7a/0x110 [ 426.070964][T20178] do_syscall_64+0x14d/0xf80 [ 426.070985][T20178] ? trace_irq_disable+0x3b/0x150 [ 426.071017][T20178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.071040][T20178] ? clear_bhb_loop+0x40/0x90 [ 426.071068][T20178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.071097][T20178] RIP: 0033:0x7f2a64f9c799 [ 426.071121][T20178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.071141][T20178] RSP: 002b:00007f2a65efa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 426.071174][T20178] RAX: ffffffffffffffda RBX: 00007f2a65215fa0 RCX: 00007f2a64f9c799 [ 426.071191][T20178] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 426.071206][T20178] RBP: 00007f2a65032c99 R08: 0000000000000000 R09: 0000000000000000 [ 426.071220][T20178] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 426.071233][T20178] R13: 00007f2a65216038 R14: 00007f2a65215fa0 R15: 00007fff78a6fab8 [ 426.071268][T20178] [ 426.322897][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.343389][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.355149][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.367536][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.380682][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.393703][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.408732][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.452376][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.471752][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.518126][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.535562][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.546967][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.564328][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.576154][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.594440][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.606733][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.627853][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.690359][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.721551][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.732950][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.744942][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.759154][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.785756][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.805100][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.820367][T20202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.831963][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.879658][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.892392][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.906751][T20207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.920306][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.934552][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.950009][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.965835][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.977525][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.004122][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.017367][T20215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.098845][T20219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.252271][T20228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.288899][ T1211] IPVS: starting estimator thread 0... [ 427.386558][T20231] IPVS: using max 26 ests per chain, 62400 per kthread [ 427.713854][T20246] siw: device registration error -23 [ 427.917443][T20253] netlink: 'syz.5.3914': attribute type 1 has an invalid length. [ 427.964741][T20253] bond3: (slave geneve2): making interface the new active one [ 427.973802][T20253] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 427.987961][ T1166] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 428.033600][ T1166] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 428.091251][ T1166] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 428.165851][ T1166] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 428.182238][T20268] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 428.391686][T20276] __nla_validate_parse: 9 callbacks suppressed [ 428.391708][T20276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3917'. [ 428.445418][T20276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3917'. [ 428.478754][T20281] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 428.870110][T20308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3924'. [ 428.880167][T20308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3924'. [ 429.087605][T20329] netlink: 'syz.2.3932': attribute type 13 has an invalid length. [ 429.099437][T20329] gretap0: refused to change device tx_queue_len [ 429.106304][T20329] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 429.317033][T20340] netlink: 'syz.0.3936': attribute type 1 has an invalid length. [ 429.362907][T20340] 8021q: adding VLAN 0 to HW filter on device bond5 [ 429.388769][T20342] bond5: (slave geneve2): making interface the new active one [ 429.398645][T20342] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 429.517147][T20342] lo speed is unknown, defaulting to 1000 [ 430.053161][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 430.061280][ C0] lec:lec_tx_timeout: lec0 [ 430.066190][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 431.637625][T20299] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.890734][T20358] bond6: option resend_igmp: invalid value (32767) [ 431.908541][T20358] bond6: option resend_igmp: allowed values 0 - 255 [ 431.920637][T20358] bond6 (unregistering): Released all slaves [ 432.165145][T20384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3947'. [ 432.175499][T20384] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3947'. [ 432.252856][T12407] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.298108][T12407] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.329839][T12407] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.363007][T12407] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.538639][T20391] syzkaller1: entered promiscuous mode [ 432.553200][T20391] syzkaller1: entered allmulticast mode [ 432.671418][T20407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3955'. [ 432.791715][T20413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3957'. [ 432.964166][T20425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3961'. [ 432.978676][T20422] lo speed is unknown, defaulting to 1000 [ 433.030666][T20425] netlink: 'syz.2.3961': attribute type 30 has an invalid length. [ 433.064312][T20429] netlink: 'syz.3.3962': attribute type 13 has an invalid length. [ 433.089588][T20431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3961'. [ 433.204653][T20429] veth0_macvtap: left promiscuous mode [ 433.210659][T20431] netlink: 'syz.2.3961': attribute type 30 has an invalid length. [ 433.245902][T20429] macvtap0: entered allmulticast mode [ 433.285153][T20429] macvtap0: refused to change device tx_queue_len [ 433.324576][ T58] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.366081][ T58] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.397087][ T58] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.452633][ T58] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.597872][T20443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3963'. [ 433.994839][T20464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3967'. [ 434.014693][T20464] netlink: 'syz.2.3967': attribute type 7 has an invalid length. [ 434.032976][T20464] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3967'. [ 434.383598][T20477] ip6tnl0: Caught tx_queue_len zero misconfig [ 434.416500][T20486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3971'. [ 434.579662][T20499] IPv6: NLM_F_CREATE should be specified when creating new route [ 435.115582][T20518] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3977'. [ 435.853159][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 435.861279][ C0] lec:lec_tx_timeout: lec0 [ 435.866266][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 436.161170][T20534] sctp: [Deprecated]: syz.0.3983 (pid 20534) Use of int in maxseg socket option. [ 436.161170][T20534] Use struct sctp_assoc_value instead [ 436.179879][T20534] IPVS: set_ctl: invalid protocol: 115 10.1.1.0:20004 [ 436.189312][T20534] x_tables: duplicate underflow at hook 2 [ 436.196185][T20534] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20004 [ 436.204672][T20534] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20000 [ 436.615054][T20446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.752679][T20537] openvswitch: netlink: Key type 324 is out of range max 32 [ 436.794426][T20537] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3984'. [ 436.838626][T20537] openvswitch: netlink: Missing key (keys=40, expected=100) [ 436.917211][T20547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3989'. [ 436.938936][T20551] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3988'. [ 436.975793][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 436.979129][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 437.008756][T20543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.101529][T20544] rdma_op ffff88806d1569f0 conn xmit_rdma 0000000000000000 [ 437.202542][T20556] syzkaller0: entered promiscuous mode [ 437.221630][T20556] syzkaller0: entered allmulticast mode [ 437.412924][T20570] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 437.417268][ T1213] IPVS: starting estimator thread 0... [ 437.441493][T20570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3990'. [ 437.526035][T20574] IPVS: using max 37 ests per chain, 88800 per kthread [ 439.209691][T20595] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 439.220471][T20602] netlink: 'syz.3.3995': attribute type 13 has an invalid length. [ 439.263438][T20602] netlink: 'syz.3.3995': attribute type 58 has an invalid length. [ 439.271391][T20602] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3995'. [ 439.418047][T20613] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4000'. [ 439.526178][T20620] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4002'. [ 439.896377][T20636] netlink: 'syz.1.4007': attribute type 9 has an invalid length. [ 440.019678][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.140630][T20645] netlink: 'syz.5.4010': attribute type 2 has an invalid length. [ 440.247281][T20645] tipc: Enabled bearer , priority 0 [ 440.426804][T20645] syzkaller0: MTU too low for tipc bearer [ 440.432696][T20645] tipc: Disabling bearer [ 440.442885][T20651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.614301][T20659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4014'. [ 440.632053][T20663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4016'. [ 440.644055][T20659] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4014'. [ 440.659318][T20665] netlink: 'syz.1.4017': attribute type 1 has an invalid length. [ 440.707256][T20667] syzkaller0: entered promiscuous mode [ 440.712880][T20667] syzkaller0: entered allmulticast mode [ 440.718205][T20665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.728484][T20667] xt_socket: unknown flags 0x50 [ 440.893182][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 440.901294][ C0] lec:lec_tx_timeout: lec0 [ 440.906385][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 441.147388][T20695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4029'. [ 441.169099][T20695] : entered promiscuous mode [ 441.178811][T20695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4029'. [ 441.439127][ T634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.453943][ T634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.982621][T20743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.382753][T20765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4047'. [ 442.742034][T20784] netlink: 'syz.2.4053': attribute type 83 has an invalid length. [ 442.771350][T20784] xt_hashlimit: size too large, truncated to 1048576 [ 443.132769][T20801] lo speed is unknown, defaulting to 1000 [ 443.132922][T20796] netlink: 'syz.1.4055': attribute type 3 has an invalid length. [ 443.161282][T20808] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4058'. [ 443.530416][T20820] tipc: Started in network mode [ 443.537289][T20820] tipc: Node identity , cluster identity 4711 [ 444.080380][T20841] syzkaller0: entered promiscuous mode [ 444.096937][T20841] syzkaller0: entered allmulticast mode [ 444.285720][T20859] sctp: [Deprecated]: syz.5.4076 (pid 20859) Use of int in max_burst socket option deprecated. [ 444.285720][T20859] Use struct sctp_assoc_value instead [ 444.604359][T20873] syzkaller1: entered promiscuous mode [ 444.609902][T20873] syzkaller1: entered allmulticast mode [ 444.700579][T20877] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4080'. [ 444.738539][T20881] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4082'. [ 444.838952][T20883] bridge6: port 1(veth5) entered blocking state [ 444.854902][T20883] bridge6: port 1(veth5) entered disabled state [ 444.865916][T20883] veth5: entered allmulticast mode [ 444.879471][T20883] veth5: entered promiscuous mode [ 444.890658][T20877] bridge6: port 2(veth0_to_bond) entered blocking state [ 444.906505][T20877] bridge6: port 2(veth0_to_bond) entered disabled state [ 444.914590][T20877] veth0_to_bond: entered allmulticast mode [ 444.923598][T20877] veth0_to_bond: entered promiscuous mode [ 444.969244][T20891] tipc: Enabled bearer , priority 0 [ 445.010148][T20888] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4083'. [ 445.026769][T20888] +: renamed from syzkaller0 [ 445.036623][T20888] tipc: Disabling bearer [ 445.161034][T20896] syzkaller1: entered promiscuous mode [ 445.168060][T20896] syzkaller1: entered allmulticast mode [ 445.258426][T20904] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4087'. [ 445.495384][T20918] netlink: 'syz.0.4091': attribute type 1 has an invalid length. [ 445.640751][T20923] netlink: 'syz.0.4091': attribute type 29 has an invalid length. [ 445.656510][T20918] netlink: 'syz.0.4091': attribute type 29 has an invalid length. [ 445.789186][T20918] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4091'. [ 445.909891][T20935] xt_hashlimit: size too large, truncated to 1048576 [ 445.923103][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 445.931218][ C0] lec:lec_tx_timeout: lec0 [ 445.936694][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 446.012401][T20945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.032048][T20949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4099'. [ 446.050865][T20948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4099'. [ 446.471951][T20967] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4104'. [ 446.569452][T20975] syzkaller0: entered promiscuous mode [ 446.581880][T20975] syzkaller0: entered allmulticast mode [ 447.166827][T21014] sctp: [Deprecated]: syz.3.4117 (pid 21014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 447.166827][T21014] Use struct sctp_sack_info instead [ 447.224165][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 447.404261][T21030] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 447.462579][T21028] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4123'. [ 447.574187][T21037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4127'. [ 447.735490][T21054] tipc: Enabling not permitted [ 447.749192][T21054] tipc: Enabling of bearer rejected, failed to enable media [ 447.990485][T21062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.006659][T21062] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.022032][T21062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.117789][T21066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.266386][T21079] syzkaller0: entered promiscuous mode [ 448.276409][T21079] syzkaller0: entered allmulticast mode [ 448.531586][T21103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.544114][T21104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.151439][T21115] ip6tnl0: Caught tx_queue_len zero misconfig [ 450.159427][T21118] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 450.469993][T21132] syzkaller0: entered promiscuous mode [ 450.486140][T21132] syzkaller0: entered allmulticast mode [ 450.719667][T21158] netlink: 'syz.0.4155': attribute type 1 has an invalid length. [ 450.929507][T21147] lo speed is unknown, defaulting to 1000 [ 450.932376][T21158] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 450.943405][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 450.959860][ C0] lec:lec_tx_timeout: lec0 [ 450.965779][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 451.198107][T21172] netlink: 'syz.2.4158': attribute type 1 has an invalid length. [ 451.510454][T21187] __nla_validate_parse: 3 callbacks suppressed [ 451.510474][T21187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4162'. [ 451.528036][T21187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4162'. [ 452.338884][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 452.829343][T21181] syzkaller1: entered promiscuous mode [ 452.835449][T21181] syzkaller1: entered allmulticast mode [ 452.842333][T21187] netdevsim netdevsim0 : renamed from netdevsim0 [ 453.736030][T21231] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4173'. [ 453.752921][T21231] netlink: 'syz.3.4173': attribute type 1 has an invalid length. [ 454.040362][T21231] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 454.329276][T21246] syzkaller0: entered promiscuous mode [ 454.347137][T21246] syzkaller0: entered allmulticast mode [ 454.684368][T21269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.739543][T21273] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4186'. [ 454.751089][T21269] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 454.765354][T21269] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 454.774275][T21269] gretap1: entered promiscuous mode [ 454.779601][T21269] gretap1: entered allmulticast mode [ 454.789837][T21271] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4185'. [ 454.924072][T21278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4188'. [ 454.954131][T21278] netlink: 'syz.1.4188': attribute type 2 has an invalid length. [ 455.318308][T21311] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4195'. [ 455.348477][T21309] syzkaller0: entered promiscuous mode [ 455.354669][T21309] syzkaller0: entered allmulticast mode [ 455.390359][T21311] netlink: 'syz.5.4195': attribute type 7 has an invalid length. [ 455.983072][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 455.991206][ C0] lec:lec_tx_timeout: lec0 [ 455.995876][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 457.598193][T21327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4199'. [ 457.609170][T21327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4199'. [ 457.996920][T21284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 458.177842][T21340] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4203'. [ 458.226989][T21345] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4205'. [ 458.456605][T21357] syzkaller0: entered promiscuous mode [ 458.462956][T21357] syzkaller0: entered allmulticast mode [ 460.481445][T21403] Cannot find add_set index 0 as target [ 460.632436][T21415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4223'. [ 460.659269][T21415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4223'. [ 460.706291][T21420] netlink: 'syz.3.4220': attribute type 3 has an invalid length. [ 460.762260][T21420] team0: Device ip6gre1 is of different type [ 460.908781][T21433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4226'. [ 460.927289][T21433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4226'. [ 460.957743][T21433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4226'. [ 461.003346][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 461.011456][ C0] lec:lec_tx_timeout: lec0 [ 461.016896][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 461.071103][T21436] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4226'. [ 461.082917][T21438] syzkaller1: entered promiscuous mode [ 461.089316][T21438] syzkaller1: entered allmulticast mode [ 461.282884][T21454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 461.357910][T21458] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 461.358387][ T5885] IPVS: starting estimator thread 0... [ 461.378866][T21458] netlink: 'syz.1.4234': attribute type 21 has an invalid length. [ 461.388184][T21458] IPv6: NLM_F_CREATE should be specified when creating new route [ 461.396702][T21458] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 461.404177][T21458] IPv6: NLM_F_CREATE should be set when creating new route [ 461.411436][T21458] IPv6: NLM_F_CREATE should be set when creating new route [ 461.418745][T21458] IPv6: NLM_F_CREATE should be set when creating new route [ 461.464260][T21459] IPVS: using max 26 ests per chain, 62400 per kthread [ 461.505662][T21464] netlink: 'syz.1.4236': attribute type 6 has an invalid length. [ 461.946232][T21501] netlink: 'syz.5.4245': attribute type 1 has an invalid length. [ 462.019537][T21498] syzkaller0: entered promiscuous mode [ 462.026081][T21498] syzkaller0: entered allmulticast mode [ 462.033813][T21499] netlink: 'syz.1.4246': attribute type 1 has an invalid length. [ 464.045099][T21442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 464.287051][T21525] xt_hashlimit: size too large, truncated to 1048576 [ 464.384334][T21537] xt_hashlimit: size too large, truncated to 1048576 [ 464.492196][T21544] __nla_validate_parse: 5 callbacks suppressed [ 464.492218][T21544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4258'. [ 464.530486][T21544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4258'. [ 464.678229][T21551] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4259'. [ 464.836989][T21557] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.4262'. [ 464.870739][T21557] openvswitch: netlink: Missing key (keys=40, expected=100) [ 465.140818][T21578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4267'. [ 465.176798][T21582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4267'. [ 465.208105][T21578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4267'. [ 465.225706][T21578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4267'. [ 465.238192][T21578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4267'. [ 465.269044][T21578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4267'. [ 465.429359][T21595] netlink: Conntrack attr has 3 unknown bytes [ 466.028439][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 466.036612][ C0] lec:lec_tx_timeout: lec0 [ 466.041404][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 467.008098][T21601] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 467.438135][T21634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.480994][T21632] lo speed is unknown, defaulting to 1000 [ 467.829635][T21650] netlink: 'syz.5.4291': attribute type 3 has an invalid length. [ 467.859048][T21650] netlink: 'syz.5.4291': attribute type 1 has an invalid length. [ 468.151413][T21661] lo speed is unknown, defaulting to 1000 [ 468.340731][T21664] macvtap0: entered promiscuous mode [ 468.355624][T21662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.380452][T21664] netlink: 'syz.3.4297': attribute type 10 has an invalid length. [ 468.487546][T21665] macvtap0 (unregistering): left promiscuous mode [ 468.679091][T21674] syzkaller0: entered promiscuous mode [ 468.684892][T21674] syzkaller0: entered allmulticast mode [ 470.664765][T21708] __nla_validate_parse: 68 callbacks suppressed [ 470.664785][T21708] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4310'. [ 471.053614][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 471.061713][ C0] lec:lec_tx_timeout: lec0 [ 471.073168][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 471.172212][T21730] netlink: 'syz.5.4314': attribute type 4 has an invalid length. [ 471.180790][T21731] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4315'. [ 471.419903][T21744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4319'. [ 471.461030][T21746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4321'. [ 471.482735][T21738] syzkaller0: entered promiscuous mode [ 471.489819][T21738] syzkaller0: entered allmulticast mode [ 471.727462][T21761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4324'. [ 473.146344][T21740] syzkaller0: entered promiscuous mode [ 473.152583][T21740] syzkaller0: entered allmulticast mode [ 473.457242][T21780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4328'. [ 473.476578][T21784] netlink: 'syz.5.4331': attribute type 1 has an invalid length. [ 473.548380][T21784] 8021q: adding VLAN 0 to HW filter on device bond4 [ 473.771175][T21791] bond4: (slave geneve3): making interface the new active one [ 473.781108][T21791] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 473.791837][T21799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4334'. [ 473.828313][T12413] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 473.845732][ T1135] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 473.883534][ T1135] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 473.903487][ T1135] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 473.985179][T21810] netlink: 'syz.3.4337': attribute type 1 has an invalid length. [ 474.020971][T21803] syzkaller0: entered promiscuous mode [ 474.030504][T21803] syzkaller0: entered allmulticast mode [ 474.074376][T21810] 8021q: adding VLAN 0 to HW filter on device bond4 [ 474.127055][T21810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4337'. [ 474.319770][T21827] netlink: 'syz.1.4340': attribute type 1 has an invalid length. [ 475.747695][T21814] bond4: (slave veth7): Enslaving as an active interface with a down link [ 475.781859][T21826] vlan1: entered allmulticast mode [ 475.789232][T21826] bond4: entered allmulticast mode [ 475.798861][T21826] bond4: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 475.842933][T21827] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 476.064218][T21851] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 476.122195][T21852] bond0: (slave gre0): Error: Device type is different from other slaves [ 476.221795][T21857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4348'. [ 476.342174][ T5833] block nbd3: Receive control failed (result -1) [ 476.490545][T21886] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 476.509565][T21886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.567710][T21882] IPVS: Error connecting to the multicast addr [ 476.666978][T21893] netlink: 'syz.5.4359': attribute type 1 has an invalid length. [ 476.851251][T21903] veth0: entered promiscuous mode [ 476.876101][T21899] netlink: 'syz.5.4361': attribute type 1 has an invalid length. [ 476.893476][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 476.901608][ C0] lec:lec_tx_timeout: lec0 [ 476.906351][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 476.966267][T21900] veth0: left promiscuous mode [ 476.994540][T21901] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 477.296860][T21928] bond3: (slave lo): Releasing backup interface [ 477.300480][T21930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4367'. [ 477.357231][T21928] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 477.359306][T21935] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 477.421953][T21928] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 477.457001][T21928] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.473843][T19986] lo speed is unknown, defaulting to 1000 [ 477.524483][T19986] syz0: Port: 1 Link DOWN [ 477.529637][T19986] lo speed is unknown, defaulting to 1000 [ 477.620788][T21951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4371'. [ 477.739049][T21957] sctp: [Deprecated]: syz.1.4374 (pid 21957) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.739049][T21957] Use struct sctp_sack_info instead [ 477.779098][T21957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4374'. [ 477.950854][T21973] veth0: entered promiscuous mode [ 477.958884][T21973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4379'. [ 478.003986][T21973] veth0 (unregistering): left promiscuous mode [ 478.102243][T21981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4381'. [ 478.151331][T21983] sch_fq: defrate 53322 ignored. [ 478.181697][T21988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4382'. [ 478.505103][T22004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4389'. [ 478.762069][T22024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4395'. [ 478.774939][T22024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4395'. [ 479.116014][T22047] pimreg3: entered allmulticast mode [ 479.161440][T22047] C: Caught tx_queue_len zero misconfig [ 479.979858][T22103] netlink: 'syz.3.4421': attribute type 2 has an invalid length. [ 480.017614][T22105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.086339][T22112] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 480.218267][T22117] netlink: 'syz.1.4426': attribute type 1 has an invalid length. [ 480.477631][ T1211] IPVS: starting estimator thread 0... [ 480.488320][T22142] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 480.596160][T22145] IPVS: using max 24 ests per chain, 57600 per kthread [ 480.647462][T22153] C: entered promiscuous mode [ 480.656673][T22153] tunl0: entered promiscuous mode [ 480.666392][T22153] gre0: entered promiscuous mode [ 480.712081][T22153] ip_vti0: entered promiscuous mode [ 481.035675][T22163] syzkaller0: entered promiscuous mode [ 481.042232][T22163] syzkaller0: entered allmulticast mode [ 481.923105][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 481.931733][ C0] lec:lec_tx_timeout: lec0 [ 481.937812][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 482.136952][T22195] __nla_validate_parse: 13 callbacks suppressed [ 482.136973][T22195] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4446'. [ 482.214141][T22196] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4446'. [ 482.226272][T22196] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4446'. [ 483.325915][T22188] lo speed is unknown, defaulting to 1000 [ 483.400234][T22201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4448'. [ 483.439746][T22201] openvswitch: netlink: Flow key attr not present in new flow. [ 483.527685][T22210] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 483.660690][T22217] netlink: 'syz.3.4452': attribute type 11 has an invalid length. [ 483.673488][T22217] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4452'. [ 483.685203][T22219] netlink: 112 bytes leftover after parsing attributes in process `syz.5.4453'. [ 483.861009][T22227] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4457'. [ 483.933924][T22231] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4457'. [ 483.955076][T22233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4458'. [ 484.357520][T22252] netlink: 'syz.0.4464': attribute type 1 has an invalid length. [ 484.374326][T22252] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4464'. [ 484.649950][T22262] netlink: 'syz.0.4467': attribute type 1 has an invalid length. [ 485.186891][T22288] netlink: 'syz.3.4472': attribute type 1 has an invalid length. [ 485.874852][T22335] netlink: 'syz.5.4487': attribute type 1 has an invalid length. [ 485.886276][T22337] netlink: 'syz.5.4487': attribute type 1 has an invalid length. [ 485.999086][T22337] bond6: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 486.013965][T22337] bond6: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 486.065798][T22337] bond6: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 486.104329][T22350] netlink: 'syz.2.4488': attribute type 5 has an invalid length. [ 486.856819][T22381] syzkaller0: entered promiscuous mode [ 486.943064][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 486.951124][ C0] lec:lec_tx_timeout: lec0 [ 486.956540][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 486.980770][T22386] netlink: 'syz.1.4498': attribute type 4 has an invalid length. [ 487.447402][T22410] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 487.466163][T22410] bond5: (slave lo): Enslaving as an active interface with an up link [ 487.476195][T22410] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 487.537171][T22417] netlink: 'syz.0.4505': attribute type 1 has an invalid length. [ 487.781318][T22430] team0: No ports can be present during mode change [ 488.064486][T22450] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 488.231073][T22455] xt_hashlimit: overflow, rate too high: 0 [ 488.297572][T22458] __nla_validate_parse: 6 callbacks suppressed [ 488.297593][T22458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4515'. [ 488.392559][T22458] veth0_macvtap: left promiscuous mode [ 488.456030][T22416] lec:lec_atm_send: lec0: Unknown message type -1945772398 [ 488.478121][T22416] lec:lec_atm_send: lec0: Unknown message type 56 [ 488.622671][T22427] erspan0: entered promiscuous mode [ 488.628587][T22427] erspan0: entered allmulticast mode [ 488.759121][T22419] lec:lec_atm_close: lec0: Shut down! [ 488.835110][T22476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 488.842413][T22476] IPv6: NLM_F_CREATE should be set when creating new route [ 488.850371][T22476] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4518'. [ 489.286682][ T29] audit: type=1107 audit(1773826405.328:6): pid=22495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 489.612781][T22509] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 489.750443][T22509] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 489.770731][T22509] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 489.781505][T22509] [ 489.783884][T22509] ====================================================== [ 489.790931][T22509] WARNING: possible circular locking dependency detected [ 489.797995][T22509] syzkaller #0 Not tainted [ 489.802446][T22509] ------------------------------------------------------ [ 489.809508][T22509] syz.2.4524/22509 is trying to acquire lock: [ 489.815606][T22509] ffffffff8e882e40 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 489.824997][T22509] [ 489.824997][T22509] but task is already holding lock: [ 489.832388][T22509] ffffffff8f17a488 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 489.841331][T22509] [ 489.841331][T22509] which lock already depends on the new lock. [ 489.841331][T22509] [ 489.851764][T22509] [ 489.851764][T22509] the existing dependency chain (in reverse order) is: [ 489.860807][T22509] [ 489.860807][T22509] -> #9 (gdp_mutex){+.+.}-{4:4}: [ 489.867970][T22509] __mutex_lock+0x19f/0x1300 [ 489.873109][T22509] get_device_parent+0x16f/0x3a0 [ 489.878585][T22509] device_add+0x2e1/0xb70 [ 489.883450][T22509] device_create+0x269/0x300 [ 489.888584][T22509] msr_device_create+0x33/0x50 [ 489.893884][T22509] cpuhp_invoke_callback+0x445/0x860 [ 489.899725][T22509] cpuhp_thread_fun+0x36b/0x780 [ 489.905122][T22509] smpboot_thread_fn+0x541/0xa50 [ 489.910613][T22509] kthread+0x388/0x470 [ 489.915220][T22509] ret_from_fork+0x51e/0xb90 [ 489.920378][T22509] ret_from_fork_asm+0x1a/0x30 [ 489.925692][T22509] [ 489.925692][T22509] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 489.933275][T22509] cpuhp_thread_fun+0x127/0x780 [ 489.938689][T22509] smpboot_thread_fn+0x541/0xa50 [ 489.944176][T22509] kthread+0x388/0x470 [ 489.948783][T22509] ret_from_fork+0x51e/0xb90 [ 489.953913][T22509] ret_from_fork_asm+0x1a/0x30 [ 489.959222][T22509] [ 489.959222][T22509] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 489.966976][T22509] cpus_read_lock+0x42/0x160 [ 489.972122][T22509] static_key_slow_inc+0x12/0x30 [ 489.977602][T22509] setup_udp_tunnel_sock+0x343/0x550 [ 489.983423][T22509] l2tp_tunnel_register+0xda0/0x1460 [ 489.989265][T22509] pppol2tp_connect+0x8b7/0x17c0 [ 489.994739][T22509] __sys_connect+0x312/0x450 [ 489.999876][T22509] __x64_sys_connect+0x7a/0x90 [ 490.005186][T22509] do_syscall_64+0x14d/0xf80 [ 490.010311][T22509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.016744][T22509] [ 490.016744][T22509] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 490.024509][T22509] lock_sock_nested+0x48/0x100 [ 490.029816][T22509] inet_shutdown+0x6a/0x390 [ 490.034870][T22509] nbd_mark_nsock_dead+0x2e9/0x560 [ 490.040545][T22509] recv_work+0x1c7f/0x1d90 [ 490.045512][T22509] process_scheduled_works+0xb02/0x1830 [ 490.051608][T22509] worker_thread+0xa50/0xfc0 [ 490.056744][T22509] kthread+0x388/0x470 [ 490.061353][T22509] ret_from_fork+0x51e/0xb90 [ 490.066488][T22509] ret_from_fork_asm+0x1a/0x30 [ 490.071819][T22509] [ 490.071819][T22509] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 490.079493][T22509] __mutex_lock+0x19f/0x1300 [ 490.084623][T22509] nbd_queue_rq+0x37b/0x1100 [ 490.089764][T22509] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 490.095847][T22509] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 490.102720][T22509] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 490.109234][T22509] blk_mq_run_hw_queue+0x348/0x4f0 [ 490.114890][T22509] blk_mq_dispatch_list+0xd16/0xe10 [ 490.120621][T22509] blk_mq_flush_plug_list+0x48d/0x570 [ 490.126532][T22509] __blk_flush_plug+0x3ed/0x4d0 [ 490.131923][T22509] __submit_bio+0x28d/0x580 [ 490.136961][T22509] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 490.143132][T22509] block_read_full_folio+0x599/0x830 [ 490.148962][T22509] filemap_read_folio+0x137/0x3b0 [ 490.154571][T22509] do_read_cache_folio+0x358/0x590 [ 490.160251][T22509] read_part_sector+0xb6/0x2b0 [ 490.165574][T22509] adfspart_check_ICS+0xa5/0xa40 [ 490.171080][T22509] bdev_disk_changed+0x7ba/0x1550 [ 490.176657][T22509] blkdev_get_whole+0x380/0x510 [ 490.182512][T22509] bdev_open+0x31e/0xd30 [ 490.187308][T22509] blkdev_open+0x470/0x610 [ 490.192269][T22509] do_dentry_open+0x785/0x14e0 [ 490.197578][T22509] vfs_open+0x3b/0x340 [ 490.202188][T22509] path_openat+0x2e08/0x3860 [ 490.207313][T22509] do_file_open+0x23e/0x4a0 [ 490.212353][T22509] do_sys_openat2+0x113/0x200 [ 490.217579][T22509] __x64_sys_openat+0x138/0x170 [ 490.222973][T22509] do_syscall_64+0x14d/0xf80 [ 490.228115][T22509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.234563][T22509] [ 490.234563][T22509] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 490.241812][T22509] __mutex_lock+0x19f/0x1300 [ 490.246946][T22509] nbd_queue_rq+0xc6/0x1100 [ 490.251994][T22509] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 490.258081][T22509] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 490.264952][T22509] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 490.271486][T22509] blk_mq_run_hw_queue+0x348/0x4f0 [ 490.277145][T22509] blk_mq_dispatch_list+0xd16/0xe10 [ 490.282888][T22509] blk_mq_flush_plug_list+0x48d/0x570 [ 490.288801][T22509] __blk_flush_plug+0x3ed/0x4d0 [ 490.294207][T22509] __submit_bio+0x28d/0x580 [ 490.299248][T22509] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 490.305417][T22509] block_read_full_folio+0x599/0x830 [ 490.311244][T22509] filemap_read_folio+0x137/0x3b0 [ 490.316808][T22509] do_read_cache_folio+0x358/0x590 [ 490.322460][T22509] read_part_sector+0xb6/0x2b0 [ 490.327759][T22509] adfspart_check_ICS+0xa5/0xa40 [ 490.333229][T22509] bdev_disk_changed+0x7ba/0x1550 [ 490.338795][T22509] blkdev_get_whole+0x380/0x510 [ 490.344183][T22509] bdev_open+0x31e/0xd30 [ 490.348959][T22509] blkdev_open+0x470/0x610 [ 490.353923][T22509] do_dentry_open+0x785/0x14e0 [ 490.359226][T22509] vfs_open+0x3b/0x340 [ 490.363836][T22509] path_openat+0x2e08/0x3860 [ 490.368962][T22509] do_file_open+0x23e/0x4a0 [ 490.373999][T22509] do_sys_openat2+0x113/0x200 [ 490.379224][T22509] __x64_sys_openat+0x138/0x170 [ 490.384614][T22509] do_syscall_64+0x14d/0xf80 [ 490.389739][T22509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.396165][T22509] [ 490.396165][T22509] -> #3 (set->srcu){.+.+}-{0:0}: [ 490.403311][T22509] __synchronize_srcu+0xca/0x3e0 [ 490.408791][T22509] elevator_switch+0x1e8/0x7a0 [ 490.414085][T22509] elevator_change+0x2cc/0x450 [ 490.419396][T22509] elevator_set_default+0x36c/0x430 [ 490.425130][T22509] blk_register_queue+0x366/0x430 [ 490.430689][T22509] __add_disk+0x677/0xd50 [ 490.435561][T22509] add_disk_fwnode+0xfb/0x480 [ 490.440777][T22509] nbd_dev_add+0x72c/0xb50 [ 490.445743][T22509] nbd_init+0x168/0x1f0 [ 490.450444][T22509] do_one_initcall+0x250/0x8d0 [ 490.455770][T22509] do_initcall_level+0x104/0x190 [ 490.461252][T22509] do_initcalls+0x59/0xa0 [ 490.466120][T22509] kernel_init_freeable+0x2a6/0x3e0 [ 490.471880][T22509] kernel_init+0x1d/0x1d0 [ 490.476750][T22509] ret_from_fork+0x51e/0xb90 [ 490.481878][T22509] ret_from_fork_asm+0x1a/0x30 [ 490.487202][T22509] [ 490.487202][T22509] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 490.495057][T22509] __mutex_lock+0x19f/0x1300 [ 490.500186][T22509] elevator_change+0x1b3/0x450 [ 490.505484][T22509] elevator_set_none+0xb5/0x140 [ 490.510866][T22509] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 490.517211][T22509] nbd_start_device+0x17f/0xb10 [ 490.522617][T22509] nbd_genl_connect+0x165b/0x1cf0 [ 490.528190][T22509] genl_family_rcv_msg_doit+0x22a/0x330 [ 490.534286][T22509] genl_rcv_msg+0x61c/0x7a0 [ 490.539334][T22509] netlink_rcv_skb+0x232/0x4b0 [ 490.544649][T22509] genl_rcv+0x28/0x40 [ 490.549171][T22509] netlink_unicast+0x80f/0x9b0 [ 490.554478][T22509] netlink_sendmsg+0x813/0xb40 [ 490.559794][T22509] ____sys_sendmsg+0x972/0x9f0 [ 490.565093][T22509] ___sys_sendmsg+0x2a5/0x360 [ 490.570306][T22509] __x64_sys_sendmsg+0x1bd/0x2a0 [ 490.575789][T22509] do_syscall_64+0x14d/0xf80 [ 490.580923][T22509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.587352][T22509] [ 490.587352][T22509] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 490.595982][T22509] blk_alloc_queue+0x546/0x680 [ 490.601321][T22509] __blk_mq_alloc_disk+0x197/0x390 [ 490.606970][T22509] nbd_dev_add+0x499/0xb50 [ 490.611930][T22509] nbd_init+0x168/0x1f0 [ 490.616640][T22509] do_one_initcall+0x250/0x8d0 [ 490.621946][T22509] do_initcall_level+0x104/0x190 [ 490.627422][T22509] do_initcalls+0x59/0xa0 [ 490.632291][T22509] kernel_init_freeable+0x2a6/0x3e0 [ 490.638033][T22509] kernel_init+0x1d/0x1d0 [ 490.642901][T22509] ret_from_fork+0x51e/0xb90 [ 490.648032][T22509] ret_from_fork_asm+0x1a/0x30 [ 490.653344][T22509] [ 490.653344][T22509] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 490.660572][T22509] __lock_acquire+0x15a5/0x2cf0 [ 490.665963][T22509] lock_acquire+0xf0/0x2e0 [ 490.670924][T22509] fs_reclaim_acquire+0x71/0x100 [ 490.676397][T22509] __kmalloc_cache_noprof+0x40/0x660 [ 490.682218][T22509] get_device_parent+0x255/0x3a0 [ 490.687697][T22509] device_add+0x2e1/0xb70 [ 490.692565][T22509] firmware_fallback_sysfs+0x2e4/0xa30 [ 490.698568][T22509] _request_firmware+0x1052/0x1780 [ 490.704217][T22509] request_firmware+0x36/0x50 [ 490.709434][T22509] devlink_compat_flash_update+0x15a/0x2c0 [ 490.715777][T22509] dev_ethtool+0x1874/0x1ae0 [ 490.720898][T22509] dev_ioctl+0x392/0x1150 [ 490.725767][T22509] sock_do_ioctl+0x23e/0x320 [ 490.730894][T22509] sock_ioctl+0x5c6/0x7f0 [ 490.735760][T22509] __se_sys_ioctl+0xfc/0x170 [ 490.740888][T22509] do_syscall_64+0x14d/0xf80 [ 490.746017][T22509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.752450][T22509] [ 490.752450][T22509] other info that might help us debug this: [ 490.752450][T22509] [ 490.762695][T22509] Chain exists of: [ 490.762695][T22509] fs_reclaim --> cpuhp_state-up --> gdp_mutex [ 490.762695][T22509] [ 490.774728][T22509] Possible unsafe locking scenario: [ 490.774728][T22509] [ 490.782183][T22509] CPU0 CPU1 [ 490.787558][T22509] ---- ---- [ 490.792937][T22509] lock(gdp_mutex); [ 490.796852][T22509] lock(cpuhp_state-up); [ 490.803721][T22509] lock(gdp_mutex); [ 490.810156][T22509] lock(fs_reclaim); [ 490.814151][T22509] [ 490.814151][T22509] *** DEADLOCK *** [ 490.814151][T22509] [ 490.822301][T22509] 3 locks held by syz.2.4524/22509: [ 490.827502][T22509] #0: ffff888035d43250 (&devlink->lock_key#7){+.+.}-{4:4}, at: devlink_compat_flash_update+0xa6/0x2c0 [ 490.838588][T22509] #1: ffffffff8e5fb8b0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 490.848976][T22509] #2: ffffffff8f17a488 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 490.858313][T22509] [ 490.858313][T22509] stack backtrace: [ 490.864222][T22509] CPU: 1 UID: 0 PID: 22509 Comm: syz.2.4524 Not tainted syzkaller #0 PREEMPT(full) [ 490.864244][T22509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 490.864256][T22509] Call Trace: [ 490.864263][T22509] [ 490.864273][T22509] dump_stack_lvl+0xe8/0x150 [ 490.864299][T22509] print_circular_bug+0x2e1/0x300 [ 490.864330][T22509] check_noncircular+0x12e/0x150 [ 490.864360][T22509] __lock_acquire+0x15a5/0x2cf0 [ 490.864387][T22509] ? lockdep_unlock+0x5d/0xd0 [ 490.864406][T22509] ? __lock_acquire+0x146e/0x2cf0 [ 490.864434][T22509] lock_acquire+0xf0/0x2e0 [ 490.864456][T22509] ? __kmalloc_cache_noprof+0x40/0x660 [ 490.864480][T22509] fs_reclaim_acquire+0x71/0x100 [ 490.864502][T22509] ? __kmalloc_cache_noprof+0x40/0x660 [ 490.864521][T22509] __kmalloc_cache_noprof+0x40/0x660 [ 490.864541][T22509] ? get_device_parent+0x255/0x3a0 [ 490.864558][T22509] ? do_raw_spin_unlock+0xf5/0x210 [ 490.864577][T22509] get_device_parent+0x255/0x3a0 [ 490.864597][T22509] device_add+0x2e1/0xb70 [ 490.864616][T22509] firmware_fallback_sysfs+0x2e4/0xa30 [ 490.864646][T22509] ? kfree+0x1c1/0x630 [ 490.864664][T22509] _request_firmware+0x1052/0x1780 [ 490.864697][T22509] ? __pfx__request_firmware+0x10/0x10 [ 490.864723][T22509] ? xa_get_mark+0x6fc/0x7b0 [ 490.864747][T22509] request_firmware+0x36/0x50 [ 490.864771][T22509] devlink_compat_flash_update+0x15a/0x2c0 [ 490.864795][T22509] ? __pfx_netdev_run_todo+0x10/0x10 [ 490.864814][T22509] ? __pfx_devlink_compat_flash_update+0x10/0x10 [ 490.864838][T22509] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 490.864867][T22509] dev_ethtool+0x1874/0x1ae0 [ 490.864889][T22509] ? __pfx_dev_ethtool+0x10/0x10 [ 490.864912][T22509] ? dev_load+0x21/0x1f0 [ 490.864936][T22509] dev_ioctl+0x392/0x1150 [ 490.864962][T22509] sock_do_ioctl+0x23e/0x320 [ 490.864985][T22509] ? __pfx_sock_do_ioctl+0x10/0x10 [ 490.865010][T22509] ? do_futex+0x395/0x420 [ 490.865039][T22509] sock_ioctl+0x5c6/0x7f0 [ 490.865060][T22509] ? __pfx_sock_ioctl+0x10/0x10 [ 490.865080][T22509] ? __fget_files+0x2a/0x420 [ 490.865107][T22509] ? __fget_files+0x3a0/0x420 [ 490.865132][T22509] ? __fget_files+0x2a/0x420 [ 490.865159][T22509] ? bpf_lsm_file_ioctl+0x9/0x20 [ 490.865183][T22509] ? __pfx_sock_ioctl+0x10/0x10 [ 490.865202][T22509] __se_sys_ioctl+0xfc/0x170 [ 490.865224][T22509] do_syscall_64+0x14d/0xf80 [ 490.865241][T22509] ? trace_irq_disable+0x3b/0x150 [ 490.865267][T22509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.865286][T22509] ? clear_bhb_loop+0x40/0x90 [ 490.865306][T22509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.865324][T22509] RIP: 0033:0x7f2a64f9c799 [ 490.865341][T22509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.865358][T22509] RSP: 002b:00007f2a65efa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 490.865377][T22509] RAX: ffffffffffffffda RBX: 00007f2a65215fa0 RCX: 00007f2a64f9c799 [ 490.865390][T22509] RDX: 0000200000000100 RSI: 0000000000008946 RDI: 0000000000000003 [ 490.865402][T22509] RBP: 00007f2a65032c99 R08: 0000000000000000 R09: 0000000000000000 [ 490.865414][T22509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.865425][T22509] R13: 00007f2a65216038 R14: 00007f2a65215fa0 R15: 00007fff78a6fab8 [ 490.865446][T22509] [ 493.853089][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 493.861188][ C0] lec:lec_tx_timeout: lec0