last executing test programs: 38.303787732s ago: executing program 4 (id=402): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@mpls_getroute={0x24, 0x1a, 0x803, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, {0x61}}]}, 0x24}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000040)=0xd, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1e, 0x0, 0xffffffffffffffa8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x20) sendto$inet6(r0, &(0x7f0000000000)="c0", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xb0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x74, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0x54, 0x1, 'quot\xa8\xd2(\xbf)\xd5~\xa2\xde\x8c\x05\x8e]\xaf\x81^\xd1\xedV\xa2~\xe8h\xabP\x93K)\xea\x15\x9b\x95\x18\xa1\xb5\t\xf9~\xc0\xfe\x1b\xca\xeb\x1e\xcc\xee\xeac\x82\x00\xa3p\x97JO\x1f\x8e\x82\x8f9\x00'/80}]}}}]}], {0x14, 0x10}}, 0xf8}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r9) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000300)={0x0, 0x40, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r10, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000057c0)={'wpan4\x00'}) 37.967855865s ago: executing program 4 (id=408): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0xa, 0x0, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)={@val, @void, @eth={@broadcast, @remote, @val={@void, {0x6558}}}}, 0x16) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001200)={'caif0\x00', &(0x7f00000011c0)=@ethtool_sset_info={0x37, 0x9, 0x2, [0x6, 0x0, 0x0, 0x7]}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40500000000000071109c0000000000060000000000000095000000009ce38046000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) pwrite64(r5, &(0x7f00000001c0)="3968e75c33d01a035a420645f2d515fded9cdc77a6fe3ff0b9c2742c0972f1a5191fe9b08037f97b26409656e4f9a71737f59df3da8a063d7024d0d3f6efca80f48bcae64d07ea8134fcc9ab0fade447340ca8ce6b9e60f13b748364f39fe2e28d2a4812e5153742d8d6405c897bc5074d99724e6b1dedbb97a3f18a4f115b419c2182b6584e01cfa67f47a41b65d55f03138f832317e99b03b8b95aec5d4cad15bbe141ab3b58be0b55838a84005b006215812b84e5514c96501e508569a851194ae867f1d1f3bf6b939d53f890808f9a0e2418f5569965d4eb1d0a0fb2f64100ec2b30c204912c02bbc04f4bc0b917f063b9af8b5c70fc45de11c062606afd0b5c6ace2a5fd34cb0fb8d2e4545a34206cf73ff5e2a581d22d14744b71e4f55668b9e1fd810a89d9f008cb0fb946727d775ea5ecb53e82e0d4053aff4a1e94ab1dd3c2b6f14b875c2d41581ff94f0977870ccf043154c38ca06ecbb0daac43038c6c3b51d81bff1eac0215514ff36f5b9b36a05a12c701dfe56d24f495c7d57a401323072a1711d53438f6dbeaba676d731d5b2e8079859b913fe1ad7ddc610efe18d61d058a4ceeab91dad5c147c1f6a2fdb7ebf3554e3d306cd7b3edafbc9a35b491f8a2a11dc0d03df8729530c6eb87633fe74d8095faa98143cbebcf39326361f08b7c6a7d67425f3db9f470d566b79d7f922d2627a8ea790fed6cde2d516b8e263b8740c1843f8868f2cda791f53c93f8e8761c4c8d6f92f3dd3b3d05cbe7697c22b7dcc5b7171553d4ccaff22474b523787be32f91b3e93a90a97d3d5c778c8a65e528525f851fc4053f13dcccbf80e7ae578bba99d8768194c3e0f2aff5fccffc15e19a77ad04cdf9023a8b1cc153e6ab35d7279b45eec2ac705a55015a263ea3c9aa8965e95acb749f073b44d41f50dbb79dfe1412316865c882c9b01a21722b9d288cd5582be0dc7bc24fb1d98aff9ff3149e0426e1d114d3ef60949b242c094f6782db9146256f603e1496316a9b43d77e5a980fe8d2f988595a9903a2c8c4c75a7afdff23c30a2941bf7a6b5b94220a161aa8e2d80df39ebf423114dba82357b906dcf113115fe32cd44eb98e466490ac1a36861480cf9d52c926a3b31315f7a202f5c744d28ce54426a6ae38e8c19c4e3a0478e7c65f0430cff0f737c143b18ea34b5db8dde6ac4aec43880275403cf4ecb030a125ea1bdee492835c739dab8c46ca42ab6ae5ff08015fa735f2b2a197b3b78c21403fedf780e3d6a34167a5bfa117a410fe7bf2f2c7cc500012f3e24c9b5d7b145a158333b25918a6d642173efa2b657a5161a4c20a40bcd935b37060b53d3423ecbb88cec5dc2e14dcd7bbf2334a064c332118334b0bdb3b8e4ec051477838c63abb2735b864b95461c56af9539ec0f6c4bda3ffb6cda65ed1593e5cf61c2de0c140d69a50bd934178a9bc4704b64acdbdcf3b50b5f53edcb79b8895f64749c8c6ff0fafc709f34b86e905ae7cea648e872600543e4089e3aa60969dacac770b00ce5c2e768a08aeb4653c09b57c63a6a1cacfe997778e66c9fe69e9379dc46d964ab4d99c57d1be4e0c910e792c38a993e391bdd421368c34e9b9e809a66d46889622f4d3f8b91368aa8f674ecadce0061cefd01bf5a8fa2bcd5ac5516500eea197e9305f4f48ea76082c34ac206d3f2989296ff061da00452dcdd1c8c291f70f15529772004d8cc54b950ae86231f21ceee613db972004b002bed39d8938c8e8b38b6d34a53219ef47e949c730c3043ad9b2628a8c840a202963691d65d0395c8d406dbfc0ef287a7e81cb225e480ecd4d13264c3a3892d17bce4a4b2ba81bd281beabf541296ae607030b61978d6f38373d1445f8649e9f6e6750467cd347781f8f5aed31f352a871bb118b9bd04a052a101b98e1e5acd0be8b46b29854619a408a121abc43369a11b770c638a0d5bd8967991855e61812dea8ab350f30c96931366ad477e449923c8bbcedd0fb4fc37dea599b8221a1e4f4f8c96bb7b2a33f0a5dbfc1133d7a4ddd4c0e10af1deec55dd2d573e741ce2aa30d08f4dcc1932945681df283ce4dadf0aa149c1b7dfced0e2d63e72936303f76d348c264938231fad676f7b24a716c55c26feb419a2744ebb6433994a5551dc194849732551d19ce1d74bb93235a5c47585d8472e021ab014f5abe6caa14dbfadf46f8667224ca460be9026a4f157a8d7df1944167db4cfac509a7d08ca7a9a6585a83aa6dc82a5f7ce5890f5cd653fa57baff076397f52c1f36188380d4bbe6ceb12db98c919aebc470c93c336e568d05800cfd560230d5a1301759990ac212b7bdb80ff177d4bd393e931b917d01187d2595a98dc7ff698574ab6e6b8eaa38ca286964dbfc0e1f9c50d3a430d61710feae45df5e546e0ee3e5274f79f778a7c6839bd50cb4398a276f3d45958fdabba176253d866576caf33c4f2910032757e8b3caf96206930ff3015ca04c9eeabede2213af54999f21daf27ca0bc663eb71b23c4fc304bbf3e1c1592727f2b5d3a0630a504718ea6432e0dd6959378882a1921202669ff46fd98c15b0be97f607105b7a92a689f13b059e770327eff2829611b7acd1a509ec86809aed9ea7bff82f01f8b46aea891ecb1f7720d097cffb7636520cf40c0154589df0707ac0b433da1f10f75c849eeae0200ab01cf04da14d740bba5193893ff71968130b47f01d52e2945357f39bf11d18f2707ba30db6878c39278e105e77eb472b6aec103f0654a55c439bee1262e2b3532c95101949267a1369a40f8a4e8210ea17a86041930288cbc4cbaca4da1134fc5236da85e8366d68565f6efa6bd25d7b42372a23fb314c684b63925747d599e837e422193d37849e9c6428393ecd19c05aa2afa438ab53bc2d2eb059982138ffcd44099ce6a430b1d7697aac40e611091a4e34169323eb54c9e1346fd64518fea813c28e643b9c82c4cbcaa89fa375199caa3eb54ea895c6d04e46f3c451b919e543f084d94179751e063c866bf517d9a955765b45814e7d810e0ebc16490384bb12c88062284aa67819a928fea97047aea17399258066b922380562358f919771de85e256a3fa1c3a30d99892c075a8e73ee1e3b232367db0610e62206b4dd0637738cfacf26781f50db49dcea9ef4616627a78e9a1264ae9cac71ce462838584a754826d0edd08cbdb49f8776dfb66b66906ec0dba8fc80033df6593c21d1461fb22ceb09eb8e2b60b2474510de3d42b45459429271be29482ab09287d208eb8fa193a20a0e5110df97148fc0f150d592641b556fd0783893ec1e65b74aa049a1a80a9951e609aeae94b656e065be20272016d7c465dd6770d64bdc54eca4025620e292700e4e489d4093ad486aae141d8f8c3253c4bcabd36f0a1b94bd38133e1def9fdd89350e420027d96a35eb4435208cf90bda3dd4d010ae52e9c20736f9e93f6303638128bc741f2e8b62a7f35189d7e11589caf8724baf864b23795797f0edc59e9854371bd6362bbbd5cbd4b242c6caacc035edd79ab9f7defb4a06307b01bc55eade19b7c530613fdca9690cb9872d44fa2315fbe773a168f5f6ce15977bd7399f3b65611925750daed8700723b292356fafb7da51d8757046110693b5f8ebba43b8586a30cfa8c38683736183cac3ca86ba9dcba9d4b5a310b674333ac29ebc4655de3f8382cb8b8efed3bc53e7cdbe187abfe7d40923b08ef93c7258b3fa501e4f93ba047a38bdf0f25e2d40746d57abd1212392ea25b0d8578254b74df6755ee233437e23187cb55edcf67f7711de82c5d32198fd9c3aea107c705e16c0b2d3f67a817aaa988a4b6bd1ead53e29ec5fc0860d1bb0643a2cf10c2259d76bf8bcdbab6c4ab25ed7c8ce1ebefdb535ea767065180797aacbf4118cf13a58e94f4737c7886a2aa48ee376341d6a1d59b2b17cf19a1df8996a5953b7416adee15cf6bdd6139570afa8c3747abc23c2af0aa16a4186474b3c39daa51ff3942e81b8ad7ef093242ec31474b7873e3b44830e2ee244f4dc0f05c0fbeecdf8b9ba9ba19b0368526b214b85697c2d14a20b9e37a8c6691c25dcbefd6cd51e95e93ef1a93c43eb723f2919f1edc1bd80cbab566c1e3787ce7aa7020ab6dc820fc0e27e7ba8bcb0b84822bb1711bde9e6700cbdd6ed87761f51d3ea532cfef084f108d8f7d8317467d7efee01e91a47ac9735eb26804b7740cd570f853e5dc1f2cd77ae383a986dd6a0b908cee8311e8bbe9c2b30b558af0a6656471c1fdbfc2c9e9d82cf1f84c2754fe101d0b73846ad8e3354c37d1c07d836cd0476962a601d5cdd10cd43da2975b93c83fc024ca541294bf46b17ef3021b31bbbd3222b1c6b99f961375ed88617bc72f70205bf6762ca5ecb51fe9b569b5d2c0dce5e7ae7f23fe79a6ddc389a1a354d4ee27a64fb777fd6ff85d4b10f5fc60c9a418c3791b48079353d731e378241aada5dd5ecdc42487b746158f42e3d4aa4996002f4557379b7559a2476a1c88e136a889e3a4e15ca94bd053636886a9cfdd5cbdd85f124a90eb9043ccbb709922d6f795200bb546cbeb6e172982948710b906d0b158ca0609185f97623f57bcb0604f0878c7b02773acf5a196bcc00c0d679e1266a95c5d9a5017a12e89c1d3d8ec30c6afcc26ba3a06c1584f2a65b72ec1bfbf123b8a4c44ef628c9e79d8282df475fd26805455b76c9608dc9e745362d76a0fd1e7f0f289534a146c34b7ad401e3849130da1a10dfd3e7b7c3f08dbf574eeb2382b0a1bba39e0289b623c0b5f1bae1448288521f99aa5beacdd2a812dea7983631b656566133e633aad494c065b55dc5f6e3c5872f73e6a7b4a47ecd7dd4b502f5e07060da3421d05987526c1db91e179a2290b80cb5747c697b8dc793d466675c22f7c056365818ae88e38be8834f37faaa9330474661caa5e7dcd6512adc4e709694836e67f3356e0a58619b0d8e3eb8a6584bb6fda430fde27012cd10cbdd198c4bf4e5a67816ca2414337bed8b9f104105c2877bfef19907fdf127d1fffb5b71c3747ca83456f95a8e4b50ee050638d04fdaaf75867431286ad9826475ada46ad2bd09aef408fba097fe3efc5ee20b9a2dab43d5ea09e5cdb1c12b1e03608d5d78a7a39ef36c7a49307eb137f6137a303ed510670b2e819e6a8dca68511bb4afd52f3056ee3614439bd496dab9e4eb82ef924acc5bd563cc87a08c38d778d2628dbee866d2bf3ddc50f1c48fea746a58aacf2c2c22cd36e4d48e69dc17890f8c5278526a91bd1683b0cb06865edb52d3a2debfdc1b0917fe5ef0262a0f76d9bf3b0c7574b98ff2282987b0aef0b92ab2ef1007cfb0e7639b550d0b0b1072842c200fa141122ae2b670838d45aef61b2f56d0a1fadcae9f24b1120937cb118044ea048b8ba8bab8a29a2b60a13400b6bfde823b6e2adc7041db89ebcde92a92e930e160a8ebaa69bcf370de72fc0228a6d20d8c63b86fd4fc716e781012b977c173d2bccde8d2a6030b30942788f022f8f12903c923e612c5bc1c8aad2929cc1ef47ddb4920f2cc141149c51a4ac920fa0b5be8a0e4b81d5979b95b47c7c853faab74d6fc031f10dea0999400ca1852fc835d92d01ea6afcb8bb830afa36d250c145e5d3ea5d8e0f79ac6395b109a1151abfc22ae556f8fbe968f72aecc8081b92a0412a61fc5ddacbec4b573e0066a9f465a805c2c7e2470f5975c75b1e6999b23b94429900a6ec60762b61912aaa514e42cc515bd8b96608e0467e3bcfb1902efad16fa037b3782b09995587fc5bc137", 0x1000, 0x8001) 37.259291275s ago: executing program 4 (id=416): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) r0 = socket(0x22, 0x2, 0x23) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, 0x0, 0x0) close(0xffffffffffffffff) (async) socket(0x28, 0x5, 0x0) (async) unshare(0x400) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0000000000000000000002a789509fb2882d049c5568"], 0x1c}, 0x1, 0x4000}, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r3, 0x58, &(0x7f00000005c0)}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000200), 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400c3a0", @ANYRES16=r4, @ANYBLOB="330300000000000000001c000000"], 0x14}, 0x1, 0xa60d000000000000}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0800034b4bfea4", @ANYRES16=r4, @ANYBLOB="000428bd7000fddbdf251400000005000c0000000000080002000300000008000500510c0000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0x800000) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000005, 0x42073, 0xffffffffffffffff, 0xfffff000) 36.81621602s ago: executing program 4 (id=420): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000fffbffffc8280000084b0daea679"], 0x1c}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x18}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x84, 0x0, &(0x7f0000000140)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000240)={0x3, @bcast, 0xee00}) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={0x3, @bcast}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000001c0), 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x0, 0x10}, @window, @sack_perm, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp], 0x8) getsockopt$inet_int(r5, 0x0, 0x34, 0x0, &(0x7f00000006c0)) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000380)='cubic\x00', 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(r7, &(0x7f0000000100)='rdma.current\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x5, '\x00', 0x0, r6, 0x4, 0x3, 0x1}, 0x48) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000280)="acb7b961959a7cf18cd8ab4cd9887f7f12f3e80a02833dde029478d8a41fd962acda722ac303b5ec34d45598a6197a2076cd657985fcdc3c85c5e5659d0d04b23bd9f82be5d2e13f657e8f1c13ad2f777c437c1735272ee479e3e7cb55bb5da3782e1c604bfe33ccc4a4b838fc61d07c4b4f4f4206b3183e1d6f2f66ab164e065fa1689f7885d2f3b788b9e056db075453d911e3495f591ad965066f73bad6f1eba44170d5c4503f82e5198f2518fa3a129d336c7fdf1a", 0xb7}], 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 22.667926828s ago: executing program 1 (id=505): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x7, &(0x7f0000000400)=[{0x30, 0xfc, 0x0, 0x8}, {0x7, 0x4, 0xff}, {0x8, 0x0, 0x8, 0xb6}, {0x9, 0x1, 0x48, 0x9}, {0x6, 0x0, 0x3f, 0x80000001}, {0x1ff, 0x3f, 0x9, 0x7}, {0x4, 0x7f, 0xe8, 0x3}]}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="5000000010003b0c00"/20, @ANYRES32=r4, @ANYBLOB="0000001800000000300012800b02010065727370616e000020000280fa5d8c84078f3ca906000f00000000000400120006001100000000000600100000000000b8b502ba1415203ddcf854242fd25cf3b5008468ca825ee8476b7a692f5af68d2819c29758a945741e76f1adaeb1a479f1b1a9d8e0f30fe25f11d74bc02fd6fcbff2c1c60667132bd24eadeb1f0d90127b39f51a564cfdb68a65fa58"], 0x50}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000640)={0x0, 0x81, 0x1f, 0x1}) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="34000000a782ab6e0df98742f242c9e73a917a06c9fc75ce93c6c946d22c81e221abd912c47077aad70ee9d2fb9272c03b3c4fefb6b680e4cf851256dbd9c2", @ANYRES16=r6, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r8, @ANYBLOB="080026006c09000008009f00070000000800b70000000000"], 0x34}}, 0x0) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_ro(r13, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r14, &(0x7f0000000000), 0x208e24b) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) preadv(r14, &(0x7f0000001380)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x4, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r6, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7b}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x6a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffff9b85, 0x28}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x1f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xb6}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xf6}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) (async) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1c34}}, 0x0) (async) r16 = socket(0x2, 0x3, 0x6) bind$inet(r16, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) 20.869605332s ago: executing program 4 (id=420): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000fffbffffc8280000084b0daea679"], 0x1c}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x18}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x84, 0x0, &(0x7f0000000140)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000240)={0x3, @bcast, 0xee00}) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={0x3, @bcast}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000001c0), 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x0, 0x10}, @window, @sack_perm, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp], 0x8) getsockopt$inet_int(r5, 0x0, 0x34, 0x0, &(0x7f00000006c0)) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000380)='cubic\x00', 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(r7, &(0x7f0000000100)='rdma.current\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x5, '\x00', 0x0, r6, 0x4, 0x3, 0x1}, 0x48) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000280)="acb7b961959a7cf18cd8ab4cd9887f7f12f3e80a02833dde029478d8a41fd962acda722ac303b5ec34d45598a6197a2076cd657985fcdc3c85c5e5659d0d04b23bd9f82be5d2e13f657e8f1c13ad2f777c437c1735272ee479e3e7cb55bb5da3782e1c604bfe33ccc4a4b838fc61d07c4b4f4f4206b3183e1d6f2f66ab164e065fa1689f7885d2f3b788b9e056db075453d911e3495f591ad965066f73bad6f1eba44170d5c4503f82e5198f2518fa3a129d336c7fdf1a", 0xb7}], 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 8.795857579s ago: executing program 4 (id=420): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000fffbffffc8280000084b0daea679"], 0x1c}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x18}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x84, 0x0, &(0x7f0000000140)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000240)={0x3, @bcast, 0xee00}) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={0x3, @bcast}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000001c0), 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x0, 0x10}, @window, @sack_perm, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp], 0x8) getsockopt$inet_int(r5, 0x0, 0x34, 0x0, &(0x7f00000006c0)) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000380)='cubic\x00', 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(r7, &(0x7f0000000100)='rdma.current\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x5, '\x00', 0x0, r6, 0x4, 0x3, 0x1}, 0x48) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000280)="acb7b961959a7cf18cd8ab4cd9887f7f12f3e80a02833dde029478d8a41fd962acda722ac303b5ec34d45598a6197a2076cd657985fcdc3c85c5e5659d0d04b23bd9f82be5d2e13f657e8f1c13ad2f777c437c1735272ee479e3e7cb55bb5da3782e1c604bfe33ccc4a4b838fc61d07c4b4f4f4206b3183e1d6f2f66ab164e065fa1689f7885d2f3b788b9e056db075453d911e3495f591ad965066f73bad6f1eba44170d5c4503f82e5198f2518fa3a129d336c7fdf1a", 0xb7}], 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2.922952197s ago: executing program 3 (id=648): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}]}]}]}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0', [{0x20, 'drbg_nopr_ctr_aes128\x00'}], 0xa, "663586240ff2916e888931c742cf45ef8d8837e019c1780750bb00ba88c1f660c72f007bf5ea182f77aa5ace92c8612e4ab59a1b7e9f2818dd96b499ce4654c1d1de8d357829c4a80f4975acb7b9f576f4c6b3ef8b77c8a0d6dfd72bc84734e5241eb5e8d218d3707feedcf7857be6435ab32afb7181273525f2f5f9cfd5b249a6c08578e98f263bf8e1f8655b195f3f319af9a36976a9ee8fc63c1780a6f1654a5f269e4f3776de0e1e320acbf492b97147fa62ad40"}, 0xd7) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x2, 0x3, 0x7fffffff, 0x7, 0x81ee, 0x134, 0x4, 0x7, 0x2ccb, 0x3, 0xa, 0x1, 0x4, 0x2]}, &(0x7f0000000140)=0x100) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func={0xf, 0x0, 0x0, 0xc, 0x4}, @func={0xa, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x30, 0x61, 0x0]}}, &(0x7f0000000540)=""/85, 0x35, 0x55, 0x1, 0xd}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xc, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000740)={'tunl0\x00', 0x0, 0x80, 0x7800, 0x100, 0x9, {{0x2c, 0x4, 0x2, 0x3a, 0xb0, 0x67, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x24, 0x98, 0x0, 0x8, [0x4, 0x3, 0x5, 0x1, 0x714, 0xd, 0x2, 0x2]}, @noop, @cipso={0x86, 0x74, 0x2, [{0x6, 0x3, 'w'}, {0x0, 0xa, "5102835971cf6a39"}, {0x2, 0xe, "aa66a6d5fc9b92838509f51b"}, {0x7, 0x6, "f51dae2c"}, {0x5, 0x5, "2d0553"}, {0x6, 0x12, "e5e769a5c9e5f3effd7a0c14a51b26aa"}, {0x1, 0xf, "f858776b6e9f217328c55c62c2"}, {0x0, 0xa, "7beab42690df9c9a"}, {0x4, 0x11, "f5ad50384d7a4b0ae51a60d68aa564"}, {0xd, 0xc, "c7131045c3d739dbb969"}]}]}}}}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x0, 0x0, 0x230e, 0x1084, r7, 0x10000, '\x00', 0x0, r6, 0x5, 0x1, 0x4}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@cgroup, r5, 0x7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="16", 0x1}], 0x1}}], 0x2, 0x4000050) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={r3, 0x101, 0x0, 0xfffffff7, 0x71, 0x401}, 0x14) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)='+', 0x1) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x82, 0x0) ioctl$PPPIOCSDEBUG(r9, 0x40047440, &(0x7f0000000380)=0x1000) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f00000003c0)='wg2\x00') r10 = openat$cgroup(r5, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000940)='memory.numa_stat\x00', 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x40490, 0x0, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r11, 0x8922, &(0x7f0000000440)={'hsr0\x00'}) 2.525528032s ago: executing program 2 (id=650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0x20000000000001fc, &(0x7f0000000000)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x2, '\x00', r2}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r3, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) sendmsg(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) r7 = socket$inet(0x2, 0x3, 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000013000100000000000000000010000000", @ANYRES32=0x0, @ANYBLOB="1100e1ffffff0000"], 0x20}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3aa) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="020200000f00000000000000fddbdf25030006003200000002000000ac1414bb00000000000000000200010000003c000000000000000000030005000020000002000000ac1414aa00feffffff000000030017002b00000002004e210000000000000000000000000100140000000000010016"], 0x78}, 0x1, 0x7}, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000), 0xe) listen(r9, 0x0) r11 = epoll_create(0x5) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r12, &(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r12, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_mtu(r12, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) sendmmsg$inet(r12, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)="9082411dd9b58d193ce53c6bb3f2009ea515010bbe667120f696fae96c96061d81231cc77117f0090d935dc8cff2170cffb79771662c19b72f74ac36884918478fa42daa4a6416dac829b901a8ed4439e4a58fb14106bcb21aa12191f372daa5019212d86016d16016459356abb45fe0e7c211c8e485744148bbc830dc98e685d8c9bf7d84457ef43af8806205e8c1cd8a124ef69db43345cb08d2c897ccd6321a3e9171e676ddb9593871c43e15f43520a513548178a5d6a83e8be9d9c36096c943d59a4ab961ae53a7871d3b565c5fcd33956cc13d016a4d9bd4003c553ac301b73f1c", 0xe4}], 0x1}}], 0x1, 0x0) socketpair(0x2, 0x800, 0xfffffffc, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r9, &(0x7f00000005c0)={0x30000011}) accept(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x4) 2.019129518s ago: executing program 3 (id=652): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002000090800000000000000000a000000d7000001000000000500130001"], 0x24}}, 0x4) 1.819252546s ago: executing program 3 (id=653): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$rxrpc(0x21, 0x2, 0xa) (async, rerun: 32) socket$rxrpc(0x21, 0x2, 0xa) (async, rerun: 32) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='pids.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x15, 0x40, 0x9c98, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x9, 0x8, 0xbaeb, 0x1, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x1}, 0x48) (async, rerun: 64) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0xffffff82) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r4}, 0x10) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', '', [{0x20, '@]$!:*}'}, {0x20, '\xe7]\xe2'}]}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@map=0x1}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xd6c6, 0x6, 0x52, 0x2320, r0, 0x7cec, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0xd}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x6f, 0x0, &(0x7f0000000580)="3cd289eb705c7cb86961dad50786a5dcd69f4154e50cad26cb193737616b657266ddd8fb6263c5994c2b23220dbb224177a957a144c9583513dfe12a2a4d621b64137e37ac3167a16206d907fd2c4bb777972d79a6e0aa945654a57e162b43ecc3758c2fb09cd0b366cb34edfb9b05", 0x0, 0x100000e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.733619607s ago: executing program 0 (id=654): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, @in6={0xa, 0x4e23, 0x1e, @private0={0xfc, 0x0, '\x00', 0x1}}]}, &(0x7f0000000040)=0xfffffffffffffe7b) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r3}, &(0x7f0000000100)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, @in6={0xa, 0x4e23, 0x1e, @private0={0xfc, 0x0, '\x00', 0x1}}]}, &(0x7f0000000040)=0xfffffffffffffe7b) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r3}, &(0x7f0000000100)=0x10) (async) 1.672734651s ago: executing program 0 (id=655): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x18001, 0x9, 0x1}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$qrtr(0x2a, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$key(0xf, 0x3, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) connect$packet(r0, &(0x7f0000000080)={0x11, 0x7, r2, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC], 0x4c}}, 0x0) r5 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x4}, 0x6}) 1.523761249s ago: executing program 2 (id=656): socket$rds(0x15, 0x5, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010111, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) r0 = socket(0x15, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001180)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x34}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r4) getsockopt(r0, 0x200000000114, 0x271f, &(0x7f0000000040)=""/17, &(0x7f0000000000)=0x11) 1.397679342s ago: executing program 0 (id=657): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='*\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@broadcast, @random="1704b45adbde", @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010188, 0x9980}, {@private}, {@local}, {@remote}, {@private}, {@local}, {@private}]}]}}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x10) 1.352936625s ago: executing program 3 (id=658): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x6, 0x81, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)='%-010d \x00'}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0xfea7) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a37", 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x5c000000, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e17aa31076b876c1d0000007ea60864160af36504001a0038001d007e31a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f005807}, 0x0) accept4(r2, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1.301700338s ago: executing program 2 (id=659): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback}}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000000)={0x17, 0x0, 0xa, 0xb, 0x400, 0x2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x1}}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', 0x0}) 1.101721453s ago: executing program 0 (id=660): r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0xf, 0x3, 0x7) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000005600010000000000000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) getsockopt$nfc_llcp(r0, 0x6a, 0x4, 0x0, 0x0) 1.011657318s ago: executing program 2 (id=661): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}]}]}]}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0', [{0x20, 'drbg_nopr_ctr_aes128\x00'}], 0xa, "663586240ff2916e888931c742cf45ef8d8837e019c1780750bb00ba88c1f660c72f007bf5ea182f77aa5ace92c8612e4ab59a1b7e9f2818dd96b499ce4654c1d1de8d357829c4a80f4975acb7b9f576f4c6b3ef8b77c8a0d6dfd72bc84734e5241eb5e8d218d3707feedcf7857be6435ab32afb7181273525f2f5f9cfd5b249a6c08578e98f263bf8e1f8655b195f3f319af9a36976a9ee8fc63c1780a6f1654a5f269e4f3776de0e1e320acbf492b97147fa62ad40"}, 0xd7) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x2, 0x3, 0x7fffffff, 0x7, 0x81ee, 0x134, 0x4, 0x7, 0x2ccb, 0x3, 0xa, 0x1, 0x4, 0x2]}, &(0x7f0000000140)=0x100) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func={0xf, 0x0, 0x0, 0xc, 0x4}, @func={0xa, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x30, 0x61, 0x0]}}, &(0x7f0000000540)=""/85, 0x35, 0x55, 0x1, 0xd}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xc, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000740)={'tunl0\x00', 0x0, 0x80, 0x7800, 0x100, 0x9, {{0x2c, 0x4, 0x2, 0x3a, 0xb0, 0x67, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x24, 0x98, 0x0, 0x8, [0x4, 0x3, 0x5, 0x1, 0x714, 0xd, 0x2, 0x2]}, @noop, @cipso={0x86, 0x74, 0x2, [{0x6, 0x3, 'w'}, {0x0, 0xa, "5102835971cf6a39"}, {0x2, 0xe, "aa66a6d5fc9b92838509f51b"}, {0x7, 0x6, "f51dae2c"}, {0x5, 0x5, "2d0553"}, {0x6, 0x12, "e5e769a5c9e5f3effd7a0c14a51b26aa"}, {0x1, 0xf, "f858776b6e9f217328c55c62c2"}, {0x0, 0xa, "7beab42690df9c9a"}, {0x4, 0x11, "f5ad50384d7a4b0ae51a60d68aa564"}, {0xd, 0xc, "c7131045c3d739dbb969"}]}]}}}}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x0, 0x0, 0x230e, 0x1084, r7, 0x10000, '\x00', 0x0, r6, 0x5, 0x1, 0x4}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@cgroup, r5, 0x7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="16", 0x1}], 0x1}}], 0x2, 0x4000050) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={r3, 0x101, 0x0, 0xfffffff7, 0x71, 0x401}, 0x14) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)='+', 0x1) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x82, 0x0) ioctl$PPPIOCSDEBUG(r9, 0x40047440, &(0x7f0000000380)=0x1000) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f00000003c0)='wg2\x00') r10 = openat$cgroup(r5, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000940)='memory.numa_stat\x00', 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x40490, 0x0, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r11, 0x8922, &(0x7f0000000440)={'hsr0\x00'}) 1.002436183s ago: executing program 0 (id=662): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000200)=0x24, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "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"}, 0x152) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000102c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r6}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r8}, 0x69) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x1c, 0x0, &(0x7f0000000140)) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000010140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a95000000090a010100000000000000000d00000156000d40878d26478f185c856038e810ec96094f9a87c31f12afd716570fcff1e58a26a6fef1e366d1e5ad2d7e893e9948f60a077fe3dfdf51769da0c6cf59c6b30fe924523983000008000c400000000240000000030a03000000000000000000030000060900030073797a30000000000900010073797a3000000000140004800800024000000000080001400000000028000000000a010800000000000000000a0002000900010073797a30000000000800024000000001140000001100010000000000000000000000000a00"/260], 0x104}}, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1d, @multicast2}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @loopback}}}], 0x20}, 0x0) accept(r0, 0x0, 0x0) 949.510863ms ago: executing program 3 (id=663): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) listen(r2, 0x8) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000007c0)={0x10000001}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000004a00010000000000001a00004a00800000881d198cd0a3c176aab3eff87fd1d840692388d9aa86e8d574d741a9878f7d04321fd910411d4260a9b1c16c8e468985e047a8e7efd3161b5e61bc252d00"/97, @ANYRESOCT, @ANYBLOB="000000000000000001"], 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xe, 0x80, 0x9, 0x2, 0x800, r4, 0x27, '\x00', r7, r4, 0x2, 0x0, 0x4}, 0x48) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470001c00028008000100", @ANYRES32, @ANYRES64, @ANYRES32, @ANYBLOB='\b\x00!\x00', @ANYRES32, @ANYRES8=r1, @ANYRES32, @ANYRESHEX], 0x50}}, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@polexpire={0xc0, 0x1b, 0x103, 0x0, 0x0, {{{@in=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}}}, 0xc0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) 814.791403ms ago: executing program 3 (id=664): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x54, r2, 0x260915eb7438f565, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$tipc(r3, &(0x7f0000000340)={&(0x7f0000000040)=@name, 0x10, 0x0}, 0x0) 811.130988ms ago: executing program 1 (id=592): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13, 0x0, 0x2}]}}, &(0x7f0000000640)=""/214, 0x26, 0xd6, 0x9}, 0x20) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x1c, r1, 0x11b, 0x0, 0x0, {0x7, 0x8}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002100)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) listen(0xffffffffffffffff, 0x80080400) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_int(r5, 0x10d, 0xde, &(0x7f0000000000), &(0x7f0000000080)=0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x18, 0x0, 0xb, 0x101, 0x0, 0x0, {}, [@generic="0e"]}, 0x18}}, 0x0) 661.166134ms ago: executing program 1 (id=665): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x458, 0x300, 0xb, 0x148, 0x0, 0x148, 0x3c0, 0x230, 0x242, 0x3c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00'}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000040000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}, @IFLA_TXQLEN={0x8}, @IFLA_BROADCAST={0xa, 0x2, @random="04b6a3803556"}]}, 0x5c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b4000000000340004803000018008000100636d7000240002801000038009000100000000fd80000000080001400000005108000240000000000900010073797a3000000000050007"], 0xd8}}, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x89, 0x6}, 0x10) 657.424025ms ago: executing program 2 (id=666): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendto$inet6(r2, &(0x7f0000000100)="800037e9220ca1ce", 0x8, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b40)={r1, 0x6b, &(0x7f0000001180)}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r5, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 469.53601ms ago: executing program 2 (id=667): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000cff5000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280080001006873720045000280050007000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2b5d68da810da6720775709f9e5b0fd8fef1860b33aa70538276593000d4491720086d381546710283ed78b5b0d4cb935eb6f2ed84a430a1a875ce9bdbb2cbd0f2cfb186f4640e5d6fb8e472ba78e63d582d079abc"], 0x48}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000cff5000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280080001006873720045000280050007000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2b5d68da810da6720775709f9e5b0fd8fef1860b33aa70538276593000d4491720086d381546710283ed78b5b0d4cb935eb6f2ed84a430a1a875ce9bdbb2cbd0f2cfb186f4640e5d6fb8e472ba78e63d582d079abc"], 0x48}}, 0x0) socket$unix(0x1, 0x0, 0x0) (async) socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window={0x3, 0x6, 0x7}, @timestamp, @window={0x3, 0x0, 0x401}, @mss={0x2, 0x80000000}], 0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000200)) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='veno\x00', 0x5) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) (async) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 465.497227ms ago: executing program 1 (id=668): socket$rds(0x15, 0x5, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010111, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) r0 = socket(0x15, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001180)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x34}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r4) getsockopt(r0, 0x200000000114, 0x271f, &(0x7f0000000040)=""/17, &(0x7f0000000000)=0x11) 263.24525ms ago: executing program 1 (id=669): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) socketpair(0x0, 0x0, 0x0, 0x0) r3 = accept$netrom(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x454200, 0x0) r5 = socket(0x10, 0x3, 0x0) unshare(0x60480) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x90) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES64=r3, @ANYRES16=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r7}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x4, 0x2, 0x12, 0x8a2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000480)={0x101, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="88010000100001000000000000000000ac1414bb00000000000000000000000000000000000000000000ffffe000000100"/64, @ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB="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"/480], 0x188}}, 0x20008000) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000003c0)={'bond0\x00', &(0x7f0000000340)=@ethtool_sfeatures}) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000400)=[{0x6, 0x8}]}) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x0, 0x0}) 1.625804ms ago: executing program 0 (id=670): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYRESHEX=r3, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000e000000bf0700000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0xe, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x2d, '\x00', 0x0, 0x0, r3}, 0x90) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000540), 0x12) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x19, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000dd850000006c00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$alg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)="23caad3d8ecaea78993cfbb9546e7053f969b503fbf9c16716a6bfe0a89005007c5dce42dc662f8708c3baf0347c30ed1dedd89c71bcd7efab04b8665a4d11c629ec03867ad086a44260e08d9dd40e4a04730f81f996fb104e0c0218eef1d5", 0x5f}], 0x8, &(0x7f0000000100)=[@op={0x18}, @assoc={0x18}], 0x30}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x17}}, 0x8) close(0x3) 0s ago: executing program 1 (id=671): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async, rerun: 32) socket$alg(0x26, 0x5, 0x0) (rerun: 32) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101200, 0x0) write$tun(r2, &(0x7f0000000180)={@void, @void, @ipv4=@igmp={{0x13, 0x4, 0x2, 0x11, 0x93, 0x65, 0x0, 0x6c, 0x2, 0x0, @remote, @empty, {[@end, @ssrr={0x89, 0xf, 0xb, [@loopback, @remote, @multicast1]}, @cipso={0x86, 0x25, 0xffffffffffffffff, [{0x5, 0x10, "7e3ce498b5beb548ca0e61448323"}, {0x1, 0x2}, {0x5, 0xd, "540cfa6786598e186db0fc"}]}, @noop]}}, {0x11, 0xc6, 0x0, @rand_addr=0x64010101, "4c306aeb65ac563297ea63e9f89dedc700250c3ef6fd18e3d4c3ca813b175a0551847da11c76894362f7c910e30d09ba5e2c5de4003295b34b391a078a7b4f"}}}, 0x93) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES64=r3], 0x40}}, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) (async) r7 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001}}, @IFA_ADDRESS={0x14, 0x1, @dev}]}, 0x54}}, 0x0) (async, rerun: 32) openat$cgroup_devices(r5, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 70.929395][ T5088] cgroup: Unknown subsys name 'net' [ 71.071042][ T5088] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.764462][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.771182][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.921558][ T5088] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.391878][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.401290][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.410643][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.430819][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.440838][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.448683][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.452458][ T5105] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.471104][ T4496] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.479148][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.488448][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.496669][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.508470][ T4496] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.531004][ T5105] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.561662][ T5100] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.571003][ T5100] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.582466][ T5100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.601645][ T5105] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.609648][ T5105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.635759][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.651122][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.658886][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.673981][ T5105] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.680627][ T4496] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.682361][ T5105] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.689365][ T4496] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.696000][ T5105] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.711332][ T5105] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.736882][ T4496] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.746488][ T4496] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.754768][ T4496] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.093000][ T5098] chnl_net:caif_netlink_parms(): no params data found [ 76.272296][ T5107] chnl_net:caif_netlink_parms(): no params data found [ 76.375249][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.383412][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.391051][ T5098] bridge_slave_0: entered allmulticast mode [ 76.398223][ T5098] bridge_slave_0: entered promiscuous mode [ 76.453946][ T5102] chnl_net:caif_netlink_parms(): no params data found [ 76.465282][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.473067][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.480294][ T5098] bridge_slave_1: entered allmulticast mode [ 76.487677][ T5098] bridge_slave_1: entered promiscuous mode [ 76.646153][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.653551][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.661021][ T5107] bridge_slave_0: entered allmulticast mode [ 76.668033][ T5107] bridge_slave_0: entered promiscuous mode [ 76.680023][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.687249][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.695479][ T5107] bridge_slave_1: entered allmulticast mode [ 76.702788][ T5107] bridge_slave_1: entered promiscuous mode [ 76.718100][ T5098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.730790][ T5098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.740325][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 76.834831][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 76.849700][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.862271][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.888812][ T5098] team0: Port device team_slave_0 added [ 76.931117][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.938504][ T5102] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.945968][ T5102] bridge_slave_0: entered allmulticast mode [ 76.953087][ T5102] bridge_slave_0: entered promiscuous mode [ 76.966334][ T5098] team0: Port device team_slave_1 added [ 76.996962][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.004519][ T5102] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.011963][ T5102] bridge_slave_1: entered allmulticast mode [ 77.019110][ T5102] bridge_slave_1: entered promiscuous mode [ 77.067157][ T5107] team0: Port device team_slave_0 added [ 77.076869][ T5107] team0: Port device team_slave_1 added [ 77.149598][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.157160][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.183401][ T5098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.227705][ T5102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.241920][ T5102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.253816][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.261006][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.287824][ T5098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.309200][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.316511][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.324429][ T5113] bridge_slave_0: entered allmulticast mode [ 77.332093][ T5113] bridge_slave_0: entered promiscuous mode [ 77.345650][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.352844][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.379439][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.392568][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.399561][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.425689][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.466731][ T5102] team0: Port device team_slave_0 added [ 77.474285][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.481684][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.488899][ T5113] bridge_slave_1: entered allmulticast mode [ 77.496368][ T5113] bridge_slave_1: entered promiscuous mode [ 77.521412][ T4496] Bluetooth: hci0: command tx timeout [ 77.523501][ T5102] team0: Port device team_slave_1 added [ 77.588178][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.595449][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.603792][ T5110] bridge_slave_0: entered allmulticast mode [ 77.610621][ T4496] Bluetooth: hci1: command tx timeout [ 77.613372][ T5110] bridge_slave_0: entered promiscuous mode [ 77.637178][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.644407][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.670730][ T5102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.684293][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.691576][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.717471][ T4496] Bluetooth: hci2: command tx timeout [ 77.723011][ T5102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.747514][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.754983][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.762518][ T5110] bridge_slave_1: entered allmulticast mode [ 77.769585][ T5110] bridge_slave_1: entered promiscuous mode [ 77.775748][ T4496] Bluetooth: hci3: command tx timeout [ 77.803008][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.842600][ T5098] hsr_slave_0: entered promiscuous mode [ 77.849393][ T5098] hsr_slave_1: entered promiscuous mode [ 77.855477][ T4496] Bluetooth: hci4: command tx timeout [ 77.882759][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.932867][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.990085][ T5113] team0: Port device team_slave_0 added [ 78.001770][ T5107] hsr_slave_0: entered promiscuous mode [ 78.008748][ T5107] hsr_slave_1: entered promiscuous mode [ 78.015491][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.024117][ T5107] Cannot create hsr debugfs directory [ 78.032435][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.071318][ T5102] hsr_slave_0: entered promiscuous mode [ 78.077807][ T5102] hsr_slave_1: entered promiscuous mode [ 78.084579][ T5102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.092314][ T5102] Cannot create hsr debugfs directory [ 78.100992][ T5113] team0: Port device team_slave_1 added [ 78.169681][ T5110] team0: Port device team_slave_0 added [ 78.179013][ T5110] team0: Port device team_slave_1 added [ 78.267851][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.275130][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.301728][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.315237][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.325244][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.351569][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.393326][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.400403][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.426902][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.465492][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.472812][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.498918][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.628991][ T5113] hsr_slave_0: entered promiscuous mode [ 78.637188][ T5113] hsr_slave_1: entered promiscuous mode [ 78.643989][ T5113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.652491][ T5113] Cannot create hsr debugfs directory [ 78.701594][ T5110] hsr_slave_0: entered promiscuous mode [ 78.708253][ T5110] hsr_slave_1: entered promiscuous mode [ 78.714624][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.722853][ T5110] Cannot create hsr debugfs directory [ 78.933096][ T5098] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.963204][ T5098] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.993593][ T5098] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.040329][ T5098] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.144950][ T5107] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.183053][ T5107] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.206807][ T5107] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.237250][ T5107] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.256584][ T5102] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.270389][ T5102] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.291327][ T5102] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.303826][ T5102] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.431106][ T5110] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.442912][ T5110] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.455419][ T5110] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.475273][ T5110] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.601138][ T4496] Bluetooth: hci0: command tx timeout [ 79.643872][ T5098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.651191][ T5113] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.673178][ T5113] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.681716][ T4496] Bluetooth: hci1: command tx timeout [ 79.714174][ T5113] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.726399][ T5113] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.761318][ T4496] Bluetooth: hci2: command tx timeout [ 79.768123][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.796212][ T5098] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.819517][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.826966][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.841156][ T4496] Bluetooth: hci3: command tx timeout [ 79.864467][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.871739][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.921183][ T4496] Bluetooth: hci4: command tx timeout [ 79.921966][ T5102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.962729][ T5107] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.996851][ T5102] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.011171][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.025319][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.032531][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.067503][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.074734][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.088748][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.096102][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.127374][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.139012][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.146246][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.185921][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.193162][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.252763][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.259926][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.504505][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.607571][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.658201][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.665420][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.739873][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.747160][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.809278][ T5098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.937346][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.008610][ T5102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.018400][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.060518][ T5098] veth0_vlan: entered promiscuous mode [ 81.131676][ T5098] veth1_vlan: entered promiscuous mode [ 81.169563][ T5102] veth0_vlan: entered promiscuous mode [ 81.267690][ T5102] veth1_vlan: entered promiscuous mode [ 81.294733][ T5110] veth0_vlan: entered promiscuous mode [ 81.320312][ T5107] veth0_vlan: entered promiscuous mode [ 81.338202][ T5110] veth1_vlan: entered promiscuous mode [ 81.368307][ T5098] veth0_macvtap: entered promiscuous mode [ 81.406913][ T5098] veth1_macvtap: entered promiscuous mode [ 81.423859][ T5107] veth1_vlan: entered promiscuous mode [ 81.469263][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.510214][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.527143][ T5110] veth0_macvtap: entered promiscuous mode [ 81.549892][ T5102] veth0_macvtap: entered promiscuous mode [ 81.584236][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.598149][ T5098] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.610229][ T5098] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.628423][ T5098] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.637623][ T5098] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.667781][ T5110] veth1_macvtap: entered promiscuous mode [ 81.681540][ T4496] Bluetooth: hci0: command tx timeout [ 81.689850][ T5102] veth1_macvtap: entered promiscuous mode [ 81.699571][ T5107] veth0_macvtap: entered promiscuous mode [ 81.732666][ T5107] veth1_macvtap: entered promiscuous mode [ 81.761688][ T4496] Bluetooth: hci1: command tx timeout [ 81.794699][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.807156][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.819311][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.837818][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.848741][ T4496] Bluetooth: hci2: command tx timeout [ 81.856388][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.867048][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.877920][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.890063][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.909501][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.922056][ T4496] Bluetooth: hci3: command tx timeout [ 81.927654][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.943239][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.954706][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.966557][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.976533][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.987836][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.999561][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.007640][ T4496] Bluetooth: hci4: command tx timeout [ 82.038951][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.055348][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.071366][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.087606][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.099384][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.117824][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.132662][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.158433][ T5107] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.180732][ T5107] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.189496][ T5107] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.198894][ T5107] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.220405][ T5110] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.234538][ T5110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.246463][ T5110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.255790][ T5110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.301991][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.322337][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.337671][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.351090][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.361477][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.372432][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.385097][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.464741][ T5102] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.474829][ T5102] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.484781][ T5102] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.493970][ T5102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.523766][ T986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.549323][ T986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.683086][ T5113] veth0_vlan: entered promiscuous mode [ 82.744572][ T986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.757037][ T5113] veth1_vlan: entered promiscuous mode [ 82.771926][ T986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.864063][ T986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.882491][ T986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.986293][ T2483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.003213][ T2483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.024901][ T5113] veth0_macvtap: entered promiscuous mode [ 83.038573][ T5113] veth1_macvtap: entered promiscuous mode [ 83.070674][ T986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.078541][ T986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.189620][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.209539][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.227456][ T986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.240088][ T986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.254178][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.280423][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.298416][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.328641][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.336959][ T5183] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6'. [ 83.356223][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.378292][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.389011][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.394557][ T5183] Bluetooth: MGMT ver 1.23 [ 83.401063][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.417555][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.467651][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.485900][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.496534][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.513239][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.537257][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.548358][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.566142][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.579633][ T5187] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.580560][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.606342][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.630015][ T5186] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7'. [ 83.649111][ T5113] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.699862][ T5113] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.720946][ T5113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.747337][ T5113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.770667][ T4496] Bluetooth: hci0: command tx timeout [ 83.777096][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.804027][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.815923][ T5190] netlink: 'syz.0.1': attribute type 16 has an invalid length. [ 83.842669][ T4496] Bluetooth: hci1: command tx timeout [ 83.861911][ T5190] netlink: 'syz.0.1': attribute type 17 has an invalid length. [ 83.921702][ T4496] Bluetooth: hci2: command tx timeout [ 84.001927][ T4496] Bluetooth: hci3: command tx timeout [ 84.081523][ T4496] Bluetooth: hci4: command tx timeout [ 84.417065][ T5223] Zero length message leads to an empty skb [ 84.471370][ T5226] nbd: socks must be embedded in a SOCK_ITEM attr [ 84.503631][ T986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.535133][ T986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.606586][ T5234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.625173][ T5234] team0: Port device bond0 added [ 84.632886][ T5226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 84.883006][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.907067][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.162657][ T5251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18'. [ 85.172523][ T5254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19'. [ 85.216305][ T5251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 85.235939][ T29] audit: type=1107 audit(1721811406.357:2): pid=5253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='{§4·Táöiõ %Ñ<×&¡‰ãjÓ.ä°Þ/)ОgÏe4!ëAÖ]hßX¥:[œ}3] !€›ÐzôØÔžïšžêKý7µ ¶W‚ .®âÚ‰t.—Ÿ¯-¾ çÿì;Êaˆ]ø]ï´À0 [ 85.235939][ T29] ÞÌáh'X‡K#»q•Ùì½’óQb•K•h?ó3£5^â.[ãPÇ·I3ßÇ_ [ 85.235939][ T29] fÿ1xÉô· 1 [ 112.675985][ T4496] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.691886][ T4496] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.710301][ T4496] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.720686][ T4496] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 112.728444][ T4496] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.865882][ T1099] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.029883][ T1099] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.135301][ T6353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.297'. [ 113.196192][ T1099] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.279645][ T6359] netlink: 'syz.0.299': attribute type 9 has an invalid length. [ 113.328056][ T6362] netlink: 'syz.2.298': attribute type 10 has an invalid length. [ 113.417809][ T6362] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.514321][ T6368] netlink: 7 bytes leftover after parsing attributes in process `syz.0.302'. [ 113.560873][ T1099] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.625969][ T6370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 113.893056][ T6375] netlink: 'syz.4.303': attribute type 4 has an invalid length. [ 114.056348][ T6335] chnl_net:caif_netlink_parms(): no params data found [ 114.092536][ T1099] bridge_slave_1: left allmulticast mode [ 114.098548][ T1099] bridge_slave_1: left promiscuous mode [ 114.133057][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.299536][ T1099] bridge_slave_0: left allmulticast mode [ 114.305849][ T1099] bridge_slave_0: left promiscuous mode [ 114.320809][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.801090][ T54] Bluetooth: hci0: command tx timeout [ 114.890296][ T1099] team0: Port device bond0 removed [ 114.904699][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.922663][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.937312][ T1099] bond0 (unregistering): Released all slaves [ 115.059445][ T6415] netlink: 140 bytes leftover after parsing attributes in process `syz.0.314'. [ 115.122879][ T1099] Êü: left promiscuous mode [ 115.177141][ T6415] caif0 speed is unknown, defaulting to 1000 [ 115.315928][ T6434] netlink: 'syz.2.316': attribute type 3 has an invalid length. [ 115.318267][ T6415] caif0 speed is unknown, defaulting to 1000 [ 115.544220][ T6415] caif0 speed is unknown, defaulting to 1000 [ 115.545348][ T6335] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.584365][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.605900][ T6335] bridge_slave_0: entered allmulticast mode [ 115.635788][ T6335] bridge_slave_0: entered promiscuous mode [ 115.689795][ T6335] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.704609][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.722981][ T6335] bridge_slave_1: entered allmulticast mode [ 115.740646][ T6335] bridge_slave_1: entered promiscuous mode [ 115.775931][ T6441] sctp: [Deprecated]: syz.4.320 (pid 6441) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.775931][ T6441] Use struct sctp_sack_info instead [ 115.858041][ C0] eth0: bad gso: type: 1, size: 1408 [ 116.044629][ C0] eth0: bad gso: type: 1, size: 1408 [ 116.064214][ T6335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.149749][ T6415] infiniband syz1: set down [ 116.166092][ T1099] hsr_slave_0: left promiscuous mode [ 116.187570][ T1099] hsr_slave_1: left promiscuous mode [ 116.193410][ T6415] infiniband syz1: added caif0 [ 116.212925][ T6415] syz1: rxe_create_cq: returned err = -12 [ 116.222567][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.241431][ T6415] infiniband syz1: Couldn't create ib_mad CQ [ 116.247771][ T6415] infiniband syz1: Couldn't open port 1 [ 116.253716][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.282065][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.289536][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.334834][ T6415] RDS/IB: syz1: added [ 116.339561][ T6415] smc: adding ib device syz1 with port count 1 [ 116.351247][ T6415] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 116.377420][ T1099] veth1_macvtap: left promiscuous mode [ 116.383649][ T1099] veth0_macvtap: left promiscuous mode [ 116.389362][ T1099] veth1_vlan: left promiscuous mode [ 116.395367][ T1099] veth0_vlan: left promiscuous mode [ 116.880830][ T54] Bluetooth: hci0: command tx timeout [ 116.944584][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 116.993903][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 117.409844][ T6335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.420415][ T5149] caif0 speed is unknown, defaulting to 1000 [ 117.427619][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'. [ 117.477824][ T6459] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 54195 - 0 [ 117.505301][ T6459] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 54195 - 0 [ 117.526730][ T6459] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 54195 - 0 [ 117.546464][ T6459] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 54195 - 0 [ 117.555872][ T6459] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 48147 - 0 [ 117.566467][ T6459] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 48147 - 0 [ 117.575972][ T6459] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 48147 - 0 [ 117.585228][ T6459] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 48147 - 0 [ 117.594857][ T6459] geneve2: entered promiscuous mode [ 117.600092][ T6459] geneve2: entered allmulticast mode [ 117.656059][ T8] caif0 speed is unknown, defaulting to 1000 [ 117.774348][ T6335] team0: Port device team_slave_0 added [ 117.787213][ T6335] team0: Port device team_slave_1 added [ 117.797549][ T6475] netlink: 'syz.2.330': attribute type 21 has an invalid length. [ 117.805824][ T6475] netlink: 132 bytes leftover after parsing attributes in process `syz.2.330'. [ 117.820015][ T6475] netlink: 'syz.2.330': attribute type 1 has an invalid length. [ 117.827856][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.330'. [ 117.873315][ T6415] caif0 speed is unknown, defaulting to 1000 [ 117.897982][ T6481] netlink: 'syz.4.331': attribute type 3 has an invalid length. [ 117.986418][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.022732][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.085445][ T6495] x_tables: duplicate underflow at hook 1 [ 118.107226][ T6335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.138221][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.149085][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.185040][ T6335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.324436][ T6335] hsr_slave_0: entered promiscuous mode [ 118.340156][ T6335] hsr_slave_1: entered promiscuous mode [ 118.459220][ T6415] caif0 speed is unknown, defaulting to 1000 [ 118.659054][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 118.787631][ T6516] netlink: 'syz.4.339': attribute type 1 has an invalid length. [ 118.810585][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 118.839384][ T6516] netlink: 224 bytes leftover after parsing attributes in process `syz.4.339'. [ 118.899400][ T6506] netlink: 'syz.1.337': attribute type 8 has an invalid length. [ 118.907361][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.339'. [ 118.960901][ T54] Bluetooth: hci0: command tx timeout [ 119.129784][ T6530] netlink: 20 bytes leftover after parsing attributes in process `syz.4.341'. [ 119.138174][ T6415] caif0 speed is unknown, defaulting to 1000 [ 119.150637][ T6530] Bluetooth: MGMT ver 1.23 [ 119.217215][ C0] eth0: bad gso: type: 1, size: 1408 [ 119.376079][ T6537] netlink: 'syz.2.344': attribute type 32 has an invalid length. [ 119.400930][ T6537] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 119.510057][ T6415] caif0 speed is unknown, defaulting to 1000 [ 119.593583][ T6547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.345'. [ 119.676849][ T6547] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 119.701461][ T6335] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 119.724967][ T6335] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 119.759153][ T6335] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 119.795025][ T6335] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 119.964708][ T6415] caif0 speed is unknown, defaulting to 1000 [ 119.999680][ T6335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.056294][ T6335] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.094562][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.101818][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.117995][ T6534] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 120.140231][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.147621][ T5178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.536106][ T6562] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 120.574235][ T6562] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 120.630323][ T6562] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 120.727239][ T6573] netlink: 'syz.4.351': attribute type 11 has an invalid length. [ 120.738229][ T6575] veth1: entered promiscuous mode [ 120.762706][ T6575] batman_adv: batadv0: Adding interface: macvlan2 [ 120.775853][ T6575] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.803642][ T6578] netlink: 'syz.4.351': attribute type 11 has an invalid length. [ 120.815721][ T6575] batman_adv: batadv0: Interface activated: macvlan2 [ 120.839571][ T6578] debugfs: Directory 'netdev:' with parent 'phy11' already present! [ 120.923373][ T6335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.063808][ T6335] veth0_vlan: entered promiscuous mode [ 121.201445][ T6335] veth1_vlan: entered promiscuous mode [ 121.201662][ T6595] Cannot find add_set index 0 as target [ 121.341845][ T6335] veth0_macvtap: entered promiscuous mode [ 121.386535][ T6335] veth1_macvtap: entered promiscuous mode [ 121.429161][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.447819][ T6602] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.359'. [ 121.459696][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.481323][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.481331][ T6602] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 121.508625][ T6602] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 121.509070][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.551274][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.580491][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.590363][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.613067][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.633143][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.690223][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.712931][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.729304][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.740249][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.751075][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.762891][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.784292][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.805105][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.845145][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.913800][ T6335] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.934056][ T6335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.959481][ T6335] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.981863][ T6335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.261054][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.269038][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.355079][ T6630] syzkaller0: entered promiscuous mode [ 122.360813][ T6630] syzkaller0: entered allmulticast mode [ 122.631272][ T6643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.369'. [ 122.787232][ T6639] ip6t_srh: unknown srh invflags 4811 [ 123.300881][ T6653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.371'. [ 124.072569][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.093160][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.291130][ T6658] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 124.314101][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'. [ 124.440777][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.284'. [ 124.555960][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.377'. [ 124.580858][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.377'. [ 124.822635][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'. [ 124.921089][ T6703] netlink: 5 bytes leftover after parsing attributes in process `syz.0.385'. [ 124.938235][ T6703] 0ªX¹¦D: renamed from gretap0 (while UP) [ 124.962991][ T6703] 0ªX¹¦D: entered allmulticast mode [ 124.968899][ T6703] A link change request failed with some changes committed already. Interface 10ªX¹¦D may have been left with an inconsistent configuration, please check. [ 125.108429][ T6700] netlink: 'syz.2.384': attribute type 10 has an invalid length. [ 125.241726][ T6716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.388'. [ 125.279496][ T6718] lo: entered allmulticast mode [ 125.645575][ T6733] netlink: 100 bytes leftover after parsing attributes in process `syz.4.394'. [ 125.913312][ T6744] sctp: [Deprecated]: syz.4.397 (pid 6744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.913312][ T6744] Use struct sctp_sack_info instead [ 126.011862][ T6744] netlink: 'syz.4.397': attribute type 1 has an invalid length. [ 126.032424][ T6744] netlink: 'syz.4.397': attribute type 1 has an invalid length. [ 126.068036][ T6744] netlink: 'syz.4.397': attribute type 2 has an invalid length. [ 126.119785][ T6748] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 126.251187][ T6755] sit0: entered promiscuous mode [ 126.304989][ T6755] netlink: 'syz.0.401': attribute type 1 has an invalid length. [ 126.793136][ T6777] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.801008][ T6777] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.829861][ T6777] bridge0: entered allmulticast mode [ 126.876864][ T6780] bridge_slave_1: left allmulticast mode [ 126.902809][ T6780] bridge_slave_1: left promiscuous mode [ 126.932347][ T6780] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.955740][ T6784] netlink: 'syz.0.410': attribute type 1 has an invalid length. [ 126.968803][ T6780] bridge_slave_0: left allmulticast mode [ 126.983087][ T6780] bridge_slave_0: left promiscuous mode [ 126.990110][ T6780] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.515510][ T6800] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 127.643825][ T6811] ip6t_srh: unknown srh match flags 5294 [ 127.842457][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.883933][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.909205][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 54195 - 0 [ 127.933179][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 48147 - 0 [ 128.086161][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.102993][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.141902][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 54195 - 0 [ 128.176477][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 48147 - 0 [ 128.249361][ T6822] __nla_validate_parse: 7 callbacks suppressed [ 128.249382][ T6822] netlink: 28 bytes leftover after parsing attributes in process `syz.0.421'. [ 128.344602][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.367509][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.388685][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 54195 - 0 [ 128.399929][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 128.410544][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 48147 - 0 [ 128.454938][ T6823] netlink: 'syz.1.422': attribute type 10 has an invalid length. [ 128.474139][ T6823] geneve0: entered promiscuous mode [ 128.521589][ T6823] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 128.563416][ T6826] team0: Port device bond0 removed [ 128.686909][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.733958][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.774200][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 54195 - 0 [ 128.804120][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 48147 - 0 [ 128.941560][ T6833] netlink: 'syz.0.425': attribute type 10 has an invalid length. [ 128.968726][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.987897][ T6833] bridge0: port 3(team0) entered disabled state [ 129.002432][ T5100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.011402][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.025613][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.040154][ T5100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 129.053915][ T5100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.098018][ T6833] team0: left allmulticast mode [ 129.114341][ T6833] team_slave_0: left allmulticast mode [ 129.138455][ T6833] team_slave_1: left allmulticast mode [ 129.144980][ T6833] team0: left promiscuous mode [ 129.157640][ T6833] team_slave_0: left promiscuous mode [ 129.165364][ T6833] team_slave_1: left promiscuous mode [ 129.176491][ T6833] bridge0: port 3(team0) entered disabled state [ 129.191375][ T6833] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.201393][ T6833] bond0: (slave team0): Enslaving as an active interface with an up link [ 129.226369][ T6846] netlink: 'syz.0.425': attribute type 10 has an invalid length. [ 129.238072][ T6846] bond0: (slave team0): Releasing backup interface [ 129.257526][ T6846] bridge0: port 3(team0) entered blocking state [ 129.264164][ T6846] bridge0: port 3(team0) entered disabled state [ 129.271472][ T6846] team0: entered allmulticast mode [ 129.276654][ T6846] team_slave_0: entered allmulticast mode [ 129.283390][ T6846] team_slave_1: entered allmulticast mode [ 129.291227][ T6846] team0: entered promiscuous mode [ 129.296482][ T6846] team_slave_0: entered promiscuous mode [ 129.303793][ T6846] team_slave_1: entered promiscuous mode [ 129.312066][ T6849] netlink: 'syz.1.424': attribute type 29 has an invalid length. [ 129.443435][ T6840] caif0 speed is unknown, defaulting to 1000 [ 129.465456][ T35] bridge_slave_1: left allmulticast mode [ 129.477151][ T35] bridge_slave_1: left promiscuous mode [ 129.490106][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.521551][ T35] bridge_slave_0: left allmulticast mode [ 129.531015][ T35] bridge_slave_0: left promiscuous mode [ 129.545982][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.273252][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.307113][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.342406][ T35] bond0 (unregistering): (slave team0): Releasing backup interface [ 130.373550][ T35] bond0 (unregistering): Released all slaves [ 130.491766][ T6866] netlink: 172 bytes leftover after parsing attributes in process `syz.2.430'. [ 130.866089][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'. [ 131.072403][ T6882] netlink: 'syz.2.433': attribute type 4 has an invalid length. [ 131.121002][ T4496] Bluetooth: hci4: command tx timeout [ 131.428035][ T6898] netlink: 28 bytes leftover after parsing attributes in process `syz.1.436'. [ 131.560234][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'. [ 131.613722][ T6904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.437'. [ 131.693379][ T6907] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 131.768939][ T35] hsr_slave_0: left promiscuous mode [ 131.782638][ T35] hsr_slave_1: left promiscuous mode [ 131.793144][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.802168][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.822211][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.830695][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.870069][ T35] veth1_macvtap: left promiscuous mode [ 131.879745][ T35] veth0_macvtap: left promiscuous mode [ 131.890182][ T35] veth1_vlan: left promiscuous mode [ 131.900224][ T35] veth0_vlan: left promiscuous mode [ 132.727404][ T35] team0 (unregistering): Port device team_slave_1 removed [ 132.748449][ T6919] dccp_invalid_packet: P.Data Offset(68) too large [ 132.786586][ T35] team0 (unregistering): Port device team_slave_0 removed [ 133.191653][ T6840] chnl_net:caif_netlink_parms(): no params data found [ 133.206541][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.213204][ T4496] Bluetooth: hci4: command tx timeout [ 133.226407][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.469832][ T6924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.444'. [ 133.521464][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 133.556760][ T6933] netlink: 'syz.1.444': attribute type 1 has an invalid length. [ 133.566329][ T6933] netlink: 616 bytes leftover after parsing attributes in process `syz.1.444'. [ 133.568885][ T6924] syz_tun: entered promiscuous mode [ 133.599488][ T6924] batadv_slave_0: entered promiscuous mode [ 133.714121][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.726055][ T6936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.741484][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.749041][ T6840] bridge_slave_0: entered allmulticast mode [ 133.780963][ T6840] bridge_slave_0: entered promiscuous mode [ 133.809800][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.813277][ T6936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.828668][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.846517][ T6840] bridge_slave_1: entered allmulticast mode [ 133.870888][ T6936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.883672][ T6840] bridge_slave_1: entered promiscuous mode [ 134.036888][ T6840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.044361][ T35] IPVS: stop unused estimator thread 0... [ 134.076526][ T6840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.162956][ T6840] team0: Port device team_slave_0 added [ 134.177363][ T6840] team0: Port device team_slave_1 added [ 134.289866][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.306390][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.354907][ T6840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.378258][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.385779][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.412649][ T6840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.430718][ T6963] netlink: 'syz.1.456': attribute type 6 has an invalid length. [ 134.523600][ T6840] hsr_slave_0: entered promiscuous mode [ 134.541260][ T6840] hsr_slave_1: entered promiscuous mode [ 134.560039][ T6840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.601250][ T6840] Cannot create hsr debugfs directory [ 134.671044][ T6962] delete_channel: no stack [ 134.714539][ T6975] vlan2: entered allmulticast mode [ 134.720720][ T6975] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 134.747805][ T6975] mac80211_hwsim hwsim14 wlan1: left allmulticast mode [ 134.777602][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.460'. [ 135.015942][ T6975] syzkaller0: entered promiscuous mode [ 135.021928][ T6975] syzkaller0: entered allmulticast mode [ 135.285154][ T4496] Bluetooth: hci4: command tx timeout [ 136.788645][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.464'. [ 136.805503][ T7000] team0: left allmulticast mode [ 136.824360][ T7000] team_slave_0: left allmulticast mode [ 136.829922][ T7000] team_slave_1: left allmulticast mode [ 136.870679][ T7000] team0: left promiscuous mode [ 136.875544][ T7000] team_slave_0: left promiscuous mode [ 136.906322][ T7000] team_slave_1: left promiscuous mode [ 136.927689][ T7000] bridge0: port 3(team0) entered disabled state [ 136.970576][ T7000] bridge_slave_1: left allmulticast mode [ 136.976302][ T7000] bridge_slave_1: left promiscuous mode [ 137.004492][ T7000] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.019423][ T7000] bridge_slave_0: left allmulticast mode [ 137.032898][ T7000] bridge_slave_0: left promiscuous mode [ 137.038769][ T7000] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.061636][ T7025] netlink: 60 bytes leftover after parsing attributes in process `syz.0.470'. [ 137.069031][ T7020] Only authenc() type AEADs are supported by ESSIV [ 137.197111][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 137.248839][ T7025] Êü: entered promiscuous mode [ 137.361010][ T4496] Bluetooth: hci4: command tx timeout [ 137.444460][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.475'. [ 137.530188][ T7035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.473'. [ 137.896333][ T6840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 137.936028][ T6840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 137.996353][ T6840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 138.058712][ T6840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 138.532654][ T6840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.576891][ T6840] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.593187][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.600467][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.623351][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.630631][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.711933][ T7086] caif0 speed is unknown, defaulting to 1000 [ 138.802770][ T6840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.825762][ T6840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.959198][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'. [ 139.010830][ T7100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.488'. [ 139.384037][ T6840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.906251][ T7125] openvswitch: netlink: Key type 7951 is out of range max 32 [ 140.065721][ T6840] veth0_vlan: entered promiscuous mode [ 140.098678][ T6840] veth1_vlan: entered promiscuous mode [ 140.378771][ T6840] veth0_macvtap: entered promiscuous mode [ 140.423439][ T6840] veth1_macvtap: entered promiscuous mode [ 140.433189][ T7134] netlink: 'syz.0.494': attribute type 1 has an invalid length. [ 140.477230][ T7134] netlink: 113592 bytes leftover after parsing attributes in process `syz.0.494'. [ 140.505808][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.560736][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.590578][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.638629][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.670582][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.710552][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.740732][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.780133][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.797515][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.846379][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.497'. [ 140.929463][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.942623][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.953692][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.964543][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.974889][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.985416][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.998744][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.016847][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.028945][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.096107][ T6840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.114071][ T6840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.142263][ T6840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.156966][ T6840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.412439][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.441296][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.496733][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 141.508166][ T2483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.513281][ T7169] Cannot find add_set index 0 as target [ 141.529115][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.502'. [ 141.535861][ T2483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.543339][ T7170] netlink: 'syz.3.502': attribute type 12 has an invalid length. [ 141.561037][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.501'. [ 141.570846][ T7170] netlink: 'syz.3.502': attribute type 13 has an invalid length. [ 141.590741][ T7163] netlink: 52 bytes leftover after parsing attributes in process `syz.2.501'. [ 141.599888][ T7170] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.608904][ T7170] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.617688][ T7170] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.626909][ T7170] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.672524][ T7170] vxlan0: entered promiscuous mode [ 141.701845][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'. [ 141.726179][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'. [ 142.409230][ C0] eth0: bad gso: type: 1, size: 1408 [ 142.735484][ T7226] dccp_v4_rcv: dropped packet with invalid checksum [ 143.936700][ T2483] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.252634][ T7271] __nla_validate_parse: 16 callbacks suppressed [ 144.252656][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 144.292494][ T7271] netlink: 108 bytes leftover after parsing attributes in process `syz.0.532'. [ 144.454540][ T2483] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.477005][ T7276] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.529425][ T7276] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 144.567328][ T7278] tipc: Failed to obtain node identity [ 144.580721][ T7278] tipc: Enabling of bearer rejected, failed to enable media [ 144.647481][ T2483] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.710916][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 144.738338][ T5100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 144.747429][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 144.773432][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 144.783667][ T5100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 144.792050][ T5100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 144.926101][ T2483] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.038486][ T7284] caif0 speed is unknown, defaulting to 1000 [ 145.070281][ T7296] pimreg: entered allmulticast mode [ 145.171094][ T7296] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 145.277871][ T2483] bridge_slave_1: left allmulticast mode [ 145.312430][ T2483] bridge_slave_1: left promiscuous mode [ 145.322875][ T2483] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.346303][ T2483] bridge_slave_0: left allmulticast mode [ 145.354783][ T2483] bridge_slave_0: left promiscuous mode [ 145.389799][ T2483] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.471575][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 145.815722][ T2483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.841700][ T2483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.858625][ T2483] bond0 (unregistering): Released all slaves [ 145.906017][ T7313] netlink: 40 bytes leftover after parsing attributes in process `syz.0.542'. [ 146.136727][ T7323] netlink: 'syz.2.545': attribute type 1 has an invalid length. [ 146.144629][ T7323] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.545'. [ 146.220030][ T7325] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.546'. [ 146.245360][ T7325] openvswitch: netlink: VXLAN extension 1024 out of range max 1 [ 146.421343][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'. [ 146.460141][ T7331] netlink: 'syz.2.548': attribute type 64 has an invalid length. [ 146.490106][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'. [ 146.515355][ T7331] netlink: 32 bytes leftover after parsing attributes in process `syz.2.548'. [ 146.598236][ T7284] chnl_net:caif_netlink_parms(): no params data found [ 146.867181][ T2483] hsr_slave_0: left promiscuous mode [ 146.873289][ T7355] netlink: 'syz.2.552': attribute type 1 has an invalid length. [ 146.881936][ T5100] Bluetooth: hci4: command tx timeout [ 146.893483][ T2483] hsr_slave_1: left promiscuous mode [ 146.910202][ T7355] netlink: 9348 bytes leftover after parsing attributes in process `syz.2.552'. [ 146.923868][ T2483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.932887][ T7357] Bluetooth: hci3: unsupported parameter 64512 [ 146.939224][ T7357] Bluetooth: hci3: invalid length 0, exp 2 for type 13 [ 146.947712][ T2483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.968848][ T2483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.979875][ T2483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.010009][ T2483] veth1_macvtap: left promiscuous mode [ 147.020153][ T2483] veth0_macvtap: left promiscuous mode [ 147.030162][ T7360] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 147.041173][ T2483] veth1_vlan: left promiscuous mode [ 147.046544][ T2483] veth0_vlan: left promiscuous mode [ 147.559455][ T2483] team0 (unregistering): Port device team_slave_1 removed [ 147.604169][ T2483] team0 (unregistering): Port device team_slave_0 removed [ 147.999458][ T7358] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 148.084671][ C0] eth0: bad gso: type: 1, size: 1408 [ 148.164497][ T7284] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.178323][ T7284] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.188175][ C0] eth0: bad gso: type: 1, size: 1408 [ 148.191131][ T7284] bridge_slave_0: entered allmulticast mode [ 148.224249][ T7284] bridge_slave_0: entered promiscuous mode [ 148.261980][ T7284] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.269183][ T7284] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.289620][ T7284] bridge_slave_1: entered allmulticast mode [ 148.305850][ T7284] bridge_slave_1: entered promiscuous mode [ 148.428791][ T7284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.465836][ T7284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.584623][ T7385] bond0: (slave bond_slave_0): Releasing backup interface [ 148.606182][ T7389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.613904][ T7389] IPv6: NLM_F_CREATE should be set when creating new route [ 148.621266][ T7389] IPv6: NLM_F_CREATE should be set when creating new route [ 148.628494][ T7389] IPv6: NLM_F_CREATE should be set when creating new route [ 148.675261][ T7284] team0: Port device team_slave_0 added [ 148.742466][ T7284] team0: Port device team_slave_1 added [ 148.754962][ T7397] netlink: 'syz.0.565': attribute type 33 has an invalid length. [ 148.763206][ T7400] netlink: 'syz.2.566': attribute type 1 has an invalid length. [ 148.857605][ T7284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.865297][ T7284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.927269][ T7284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.954529][ T7284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.962170][ T5100] Bluetooth: hci4: command 0x041b tx timeout [ 148.971394][ T7284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.998540][ T7284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.116682][ T7284] hsr_slave_0: entered promiscuous mode [ 149.131244][ T7284] hsr_slave_1: entered promiscuous mode [ 149.143201][ T7284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.158361][ T7284] Cannot create hsr debugfs directory [ 149.166188][ T7410] caif0 speed is unknown, defaulting to 1000 [ 149.490870][ T7416] tap0: tun_chr_ioctl cmd 1074025677 [ 149.507450][ T7418] __nla_validate_parse: 1 callbacks suppressed [ 149.507470][ T7418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.570'. [ 149.510794][ T7416] tap0: linktype set to 773 [ 149.515377][ T7418] netlink: 56 bytes leftover after parsing attributes in process `syz.3.570'. [ 149.553143][ T7415] netlink: 'syz.0.569': attribute type 1 has an invalid length. [ 149.578193][ T7415] netlink: 224 bytes leftover after parsing attributes in process `syz.0.569'. [ 149.582725][ T7418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.570'. [ 149.962988][ T7427] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744071562067968) [ 149.980110][ T7427] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 150.400753][ T7284] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 150.414277][ T7284] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.443604][ T7284] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 150.465597][ T7284] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.716211][ T7284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.766684][ T7284] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.795558][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.802842][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.845570][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.852964][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.953487][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.580'. [ 150.964112][ T7459] 8021q: VLANs not supported on ipvlan1 [ 151.050641][ T4496] Bluetooth: hci4: command 0x041b tx timeout [ 151.348415][ T7284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.006944][ T7284] veth0_vlan: entered promiscuous mode [ 152.039486][ T7284] veth1_vlan: entered promiscuous mode [ 152.112579][ T7515] openvswitch: netlink: Message has 16 unknown bytes. [ 152.133931][ T7284] veth0_macvtap: entered promiscuous mode [ 152.159375][ T7284] veth1_macvtap: entered promiscuous mode [ 152.176165][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 152.226164][ T7284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.238727][ T7284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.260661][ T7284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.274032][ T7284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.289621][ T7284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.302089][ T7284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.322869][ T7284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.338716][ T7284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.357928][ T7284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.376798][ T5100] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.393076][ T5100] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.397886][ T7284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.415561][ T7284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.415636][ T5100] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.426091][ T7284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.426113][ T7284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.426126][ T7284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.426139][ T7284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.426159][ T7284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.426171][ T7284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.428259][ T7284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.472219][ T7284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.521437][ T5100] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.538037][ T5100] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.549413][ T5100] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.573229][ T7284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.595887][ T7520] netlink: 40 bytes leftover after parsing attributes in process `syz.2.594'. [ 152.604903][ T7284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.613927][ T7284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.711948][ T7509] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 152.737557][ T7517] caif0 speed is unknown, defaulting to 1000 [ 152.893434][ T2483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.922616][ T2483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.020837][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.037699][ T7534] netlink: 'syz.0.598': attribute type 2 has an invalid length. [ 153.050226][ T7534] netlink: 'syz.0.598': attribute type 1 has an invalid length. [ 153.070521][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.121655][ T4496] Bluetooth: hci4: command 0x041b tx timeout [ 153.231394][ T7540] netlink: 92 bytes leftover after parsing attributes in process `syz.2.600'. [ 153.715160][ T7564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.606'. [ 153.730655][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.606'. [ 153.876540][ T7517] chnl_net:caif_netlink_parms(): no params data found [ 154.001003][ T4496] Bluetooth: hci1: command 0x0401 tx timeout [ 154.036330][ T7517] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.044214][ T7517] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.053041][ T7517] bridge_slave_0: entered allmulticast mode [ 154.061596][ T7517] bridge_slave_0: entered promiscuous mode [ 154.071251][ T7517] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.078576][ T7517] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.087580][ T7517] bridge_slave_1: entered allmulticast mode [ 154.097252][ T7517] bridge_slave_1: entered promiscuous mode [ 154.109586][ T7582] geneve2: entered promiscuous mode [ 154.135042][ T7582] geneve2: entered allmulticast mode [ 154.197082][ T7517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.221733][ T7517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.302965][ T7517] team0: Port device team_slave_0 added [ 154.316080][ T7517] team0: Port device team_slave_1 added [ 154.360243][ T7517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.367937][ T7517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.395498][ T7517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.411117][ T7517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.418193][ T7517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.447703][ T7517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.641186][ T4496] Bluetooth: hci5: command tx timeout [ 154.646735][ T7517] hsr_slave_0: entered promiscuous mode [ 154.665558][ T7517] hsr_slave_1: entered promiscuous mode [ 154.680789][ T7517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.697190][ T7517] Cannot create hsr debugfs directory [ 155.093963][ T7517] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.133162][ T7602] netlink: 'syz.2.614': attribute type 58 has an invalid length. [ 155.283602][ T7517] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.477755][ T7517] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.749557][ T7517] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.820799][ T7620] #d: renamed from ipvlan1 [ 155.951093][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.197105][ T7632] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 156.332755][ T7636] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 156.401267][ T7517] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 156.427994][ T7517] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 156.449315][ T7517] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 156.488694][ T7517] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 156.626261][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.638782][ T5100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.650584][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.678886][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.689702][ T5100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.700588][ T5100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.721805][ T4496] Bluetooth: hci5: command tx timeout [ 156.903864][ T7517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.941820][ T7647] caif0 speed is unknown, defaulting to 1000 [ 156.989821][ T7517] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.038522][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.045870][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.134824][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.191183][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.198466][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.374244][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.620327][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.041018][ T7684] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 158.162838][ T7691] tipc: Invalid UDP bearer configuration [ 158.162901][ T7691] tipc: Enabling of bearer rejected, failed to enable media [ 158.252588][ T35] bridge_slave_1: left allmulticast mode [ 158.264312][ T35] bridge_slave_1: left promiscuous mode [ 158.285791][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.298247][ T35] bridge_slave_0: left allmulticast mode [ 158.305810][ T35] bridge_slave_0: left promiscuous mode [ 158.311982][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.574459][ T7684] syz.0.629 (7684) used greatest stack depth: 18064 bytes left [ 158.706397][ T7702] Bluetooth: hci0: load_link_keys: too big key_count value 65280 [ 158.736116][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.754115][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.771375][ T35] bond0 (unregistering): Released all slaves [ 158.800961][ T4496] Bluetooth: hci5: command tx timeout [ 158.806714][ T5100] Bluetooth: hci4: command tx timeout [ 158.836293][ T7696] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 159.195787][ T7517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.336227][ T7647] chnl_net:caif_netlink_parms(): no params data found [ 159.683668][ T7730] __nla_validate_parse: 3 callbacks suppressed [ 159.683688][ T7730] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.640'. [ 159.832597][ T7739] xt_bpf: check failed: parse error [ 159.855070][ T7517] veth0_vlan: entered promiscuous mode [ 159.919117][ T35] hsr_slave_0: left promiscuous mode [ 159.936937][ T35] hsr_slave_1: left promiscuous mode [ 159.950332][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.958726][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.970276][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.978154][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.003947][ T35] veth1_macvtap: left promiscuous mode [ 160.012050][ T35] veth0_macvtap: left promiscuous mode [ 160.018181][ T35] veth1_vlan: left promiscuous mode [ 160.024063][ T35] veth0_vlan: left promiscuous mode [ 160.739360][ T35] team0 (unregistering): Port device team_slave_1 removed [ 160.826066][ T35] team0 (unregistering): Port device team_slave_0 removed [ 160.884937][ T4496] Bluetooth: hci5: command tx timeout [ 160.891373][ T5100] Bluetooth: hci4: command tx timeout [ 160.909079][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'. [ 161.400119][ T7647] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.428739][ T7647] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.436684][ T7647] bridge_slave_0: entered allmulticast mode [ 161.444370][ T7647] bridge_slave_0: entered promiscuous mode [ 161.458952][ T7743] netlink: 76 bytes leftover after parsing attributes in process `syz.2.643'. [ 161.484132][ T7647] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.511751][ T7647] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.519055][ T7647] bridge_slave_1: entered allmulticast mode [ 161.549746][ T7647] bridge_slave_1: entered promiscuous mode [ 161.574531][ T7517] veth1_vlan: entered promiscuous mode [ 161.764748][ T7647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.805896][ T7647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.904184][ T7517] veth0_macvtap: entered promiscuous mode [ 161.982561][ T7647] team0: Port device team_slave_0 added [ 161.993771][ T7517] veth1_macvtap: entered promiscuous mode [ 162.028738][ T7647] team0: Port device team_slave_1 added [ 162.145092][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.169332][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.189630][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.210577][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.229063][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.245938][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.270116][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.289294][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.314669][ T7517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.326769][ T7647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.360699][ T7647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.404854][ T7647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.457715][ T7647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.468463][ T7647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.503026][ T7647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.518346][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.530372][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.540864][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.551794][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.562294][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.577353][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.587807][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.602105][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.613710][ T7517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.675488][ T7786] : renamed from bond0 [ 162.746657][ T7647] hsr_slave_0: entered promiscuous mode [ 162.766499][ T7647] hsr_slave_1: entered promiscuous mode [ 162.787068][ T7647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.802390][ T7647] Cannot create hsr debugfs directory [ 162.817218][ T7517] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.838585][ T7517] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.848467][ T7517] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.857730][ T7517] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.888314][ T7802] batadv0: entered promiscuous mode [ 162.896428][ T7802] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 162.906014][ T7802] batadv0: left promiscuous mode [ 162.971122][ T4496] Bluetooth: hci4: command tx timeout [ 163.109433][ T7805] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 163.359638][ T2483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.386785][ T2483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.562536][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.582379][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.798775][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.592'. [ 163.940064][ T7647] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 163.955368][ T7833] xt_l2tp: wrong L2TP version: 0 [ 163.978986][ T7647] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 164.004540][ T7647] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 164.030562][ T7647] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 164.097966][ T7835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.667'. [ 164.119003][ T7838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.667'. [ 164.138057][ T7837] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 164.331401][ T7647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.364976][ T7842] netlink: 152 bytes leftover after parsing attributes in process `syz.1.669'. [ 164.379766][ T7647] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.423794][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.431111][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.469087][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.476305][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.587850][ T7647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.612714][ T54] ================================================================== [ 164.620861][ T54] BUG: KASAN: slab-use-after-free in mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 164.629583][ T54] Read of size 8 at addr ffff88802aac0f18 by task kworker/u9:0/54 [ 164.637415][ T54] [ 164.639769][ T54] CPU: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 164.649508][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 164.659602][ T54] Workqueue: hci0 hci_cmd_sync_work [ 164.664869][ T54] Call Trace: [ 164.668170][ T54] [ 164.671123][ T54] dump_stack_lvl+0x241/0x360 [ 164.675830][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.681041][ T54] ? __pfx__printk+0x10/0x10 [ 164.685648][ T54] ? _printk+0xd5/0x120 [ 164.689817][ T54] ? __virt_addr_valid+0x183/0x530 [ 164.694937][ T54] ? __virt_addr_valid+0x183/0x530 [ 164.700059][ T54] print_report+0x169/0x550 [ 164.704563][ T54] ? __virt_addr_valid+0x183/0x530 [ 164.709685][ T54] ? __virt_addr_valid+0x183/0x530 [ 164.714803][ T54] ? __virt_addr_valid+0x45f/0x530 [ 164.719922][ T54] ? __phys_addr+0xba/0x170 [ 164.724439][ T54] ? mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 164.730365][ T54] kasan_report+0x143/0x180 [ 164.734877][ T54] ? mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 164.740778][ T54] mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 164.746501][ T54] ? __pfx_mgmt_remove_adv_monitor_sync+0x10/0x10 [ 164.752917][ T54] hci_cmd_sync_work+0x22b/0x400 [ 164.757864][ T54] ? process_scheduled_works+0x945/0x1830 [ 164.763593][ T54] process_scheduled_works+0xa2c/0x1830 [ 164.769162][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 164.775157][ T54] ? assign_work+0x364/0x3d0 [ 164.779845][ T54] worker_thread+0x86d/0xd40 [ 164.784453][ T54] ? __kthread_parkme+0x169/0x1d0 [ 164.789488][ T54] ? __pfx_worker_thread+0x10/0x10 [ 164.794604][ T54] kthread+0x2f0/0x390 [ 164.798685][ T54] ? __pfx_worker_thread+0x10/0x10 [ 164.803802][ T54] ? __pfx_kthread+0x10/0x10 [ 164.808402][ T54] ret_from_fork+0x4b/0x80 [ 164.812826][ T54] ? __pfx_kthread+0x10/0x10 [ 164.817426][ T54] ret_from_fork_asm+0x1a/0x30 [ 164.822210][ T54] [ 164.825231][ T54] [ 164.827549][ T54] Allocated by task 7112: [ 164.831883][ T54] kasan_save_track+0x3f/0x80 [ 164.836567][ T54] __kasan_kmalloc+0x98/0xb0 [ 164.841160][ T54] __kmalloc_cache_noprof+0x19c/0x2c0 [ 164.846536][ T54] mgmt_pending_new+0x65/0x250 [ 164.851303][ T54] mgmt_pending_add+0x36/0x120 [ 164.856070][ T54] remove_adv_monitor+0x102/0x1b0 [ 164.861098][ T54] hci_mgmt_cmd+0xc47/0x11d0 [ 164.865693][ T54] hci_sock_sendmsg+0x7b8/0x11c0 [ 164.870639][ T54] __sock_sendmsg+0x221/0x270 [ 164.875334][ T54] sock_write_iter+0x2dd/0x400 [ 164.880101][ T54] vfs_write+0xa72/0xc90 [ 164.884346][ T54] ksys_write+0x1a0/0x2c0 [ 164.888675][ T54] do_syscall_64+0xf3/0x230 [ 164.893195][ T54] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.899095][ T54] [ 164.901414][ T54] Freed by task 7179: [ 164.905385][ T54] kasan_save_track+0x3f/0x80 [ 164.910076][ T54] kasan_save_free_info+0x40/0x50 [ 164.915106][ T54] poison_slab_object+0xe0/0x150 [ 164.920042][ T54] __kasan_slab_free+0x37/0x60 [ 164.924822][ T54] kfree+0x149/0x360 [ 164.928722][ T54] mgmt_pending_foreach+0xd1/0x130 [ 164.933832][ T54] __mgmt_power_off+0x187/0x420 [ 164.938683][ T54] hci_dev_close_sync+0x665/0x11a0 [ 164.943798][ T54] hci_dev_close+0x112/0x210 [ 164.948385][ T54] sock_do_ioctl+0x158/0x460 [ 164.952973][ T54] sock_ioctl+0x629/0x8e0 [ 164.957303][ T54] __se_sys_ioctl+0xfc/0x170 [ 164.961903][ T54] do_syscall_64+0xf3/0x230 [ 164.966408][ T54] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.972327][ T54] [ 164.974649][ T54] The buggy address belongs to the object at ffff88802aac0f00 [ 164.974649][ T54] which belongs to the cache kmalloc-96 of size 96 [ 164.988611][ T54] The buggy address is located 24 bytes inside of [ 164.988611][ T54] freed 96-byte region [ffff88802aac0f00, ffff88802aac0f60) [ 165.002232][ T54] [ 165.004550][ T54] The buggy address belongs to the physical page: [ 165.010961][ T54] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802aac0b80 pfn:0x2aac0 [ 165.021029][ T54] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 165.029096][ T54] page_type: 0xffffefff(slab) [ 165.033772][ T54] raw: 00fff00000000200 ffff888015041280 ffffea00007c85d0 ffffea0001a17590 [ 165.042355][ T54] raw: ffff88802aac0b80 000000000020000a 00000001ffffefff 0000000000000000 [ 165.050932][ T54] page dumped because: kasan: bad access detected [ 165.057346][ T54] page_owner tracks the page as allocated [ 165.063056][ T54] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x352800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_THISNODE), pid 5330, tgid 5329 (syz.3.37), ts 87033405855, free_ts 86894920419 [ 165.083549][ T54] post_alloc_hook+0x1f3/0x230 [ 165.088325][ T54] get_page_from_freelist+0x2e4c/0x2f10 [ 165.093874][ T54] __alloc_pages_noprof+0x256/0x6c0 [ 165.099072][ T54] alloc_slab_page+0x5f/0x120 [ 165.103748][ T54] allocate_slab+0x5a/0x2f0 [ 165.108245][ T54] ___slab_alloc+0xcd1/0x14b0 [ 165.112927][ T54] __slab_alloc+0x58/0xa0 [ 165.117259][ T54] __kmalloc_node_noprof+0x286/0x440 [ 165.122552][ T54] allocate_slab+0xb6/0x2f0 [ 165.127055][ T54] ___slab_alloc+0xcd1/0x14b0 [ 165.131737][ T54] __slab_alloc+0x58/0xa0 [ 165.136067][ T54] kmem_cache_alloc_noprof+0x1c1/0x2a0 [ 165.141538][ T54] sk_prot_alloc+0x58/0x210 [ 165.146058][ T54] sk_alloc+0x38/0x370 [ 165.150136][ T54] inet_create+0x652/0xe70 [ 165.154557][ T54] __sock_create+0x490/0x920 [ 165.159156][ T54] page last free pid 5318 tgid 5318 stack trace: [ 165.165489][ T54] free_unref_folios+0xf23/0x19e0 [ 165.170523][ T54] folios_put_refs+0x93a/0xa60 [ 165.175305][ T54] free_pages_and_swap_cache+0x5c8/0x690 [ 165.180957][ T54] tlb_flush_mmu+0x3a3/0x680 [ 165.185551][ T54] tlb_finish_mmu+0xd4/0x200 [ 165.190141][ T54] exit_mmap+0x44f/0xc80 [ 165.194398][ T54] __mmput+0x115/0x390 [ 165.198480][ T54] exit_mm+0x220/0x310 [ 165.202571][ T54] do_exit+0x9b2/0x27f0 [ 165.206745][ T54] do_group_exit+0x207/0x2c0 [ 165.211344][ T54] __x64_sys_exit_group+0x3f/0x40 [ 165.216377][ T54] x64_sys_call+0x26c3/0x26d0 [ 165.221061][ T54] do_syscall_64+0xf3/0x230 [ 165.225571][ T54] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.231481][ T54] [ 165.233801][ T54] Memory state around the buggy address: [ 165.239427][ T54] ffff88802aac0e00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 165.247487][ T54] ffff88802aac0e80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 165.255545][ T54] >ffff88802aac0f00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 165.263605][ T54] ^ [ 165.268447][ T54] ffff88802aac0f80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 165.276517][ T54] ffff88802aac1000: 04 fc fc fc 04 fc fc fc 04 fc fc fc 04 fc fc fc [ 165.284574][ T54] ================================================================== [ 165.308867][ T4496] Bluetooth: hci4: command tx timeout [ 165.314544][ T54] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 165.321765][ T54] CPU: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 165.331514][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 165.341604][ T54] Workqueue: hci0 hci_cmd_sync_work [ 165.346847][ T54] Call Trace: [ 165.350141][ T54] [ 165.353088][ T54] dump_stack_lvl+0x241/0x360 [ 165.357800][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.363027][ T54] ? __pfx__printk+0x10/0x10 [ 165.367644][ T54] ? preempt_schedule+0xe1/0xf0 [ 165.372534][ T54] ? vscnprintf+0x5d/0x90 [ 165.376897][ T54] panic+0x349/0x860 [ 165.380824][ T54] ? check_panic_on_warn+0x21/0xb0 [ 165.385983][ T54] ? __pfx_panic+0x10/0x10 [ 165.390431][ T54] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 165.396459][ T54] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 165.402838][ T54] ? print_report+0x502/0x550 [ 165.407552][ T54] check_panic_on_warn+0x86/0xb0 [ 165.412532][ T54] ? mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 165.418456][ T54] end_report+0x77/0x160 [ 165.422737][ T54] kasan_report+0x154/0x180 [ 165.427273][ T54] ? mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 165.433203][ T54] mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 165.438962][ T54] ? __pfx_mgmt_remove_adv_monitor_sync+0x10/0x10 [ 165.445405][ T54] hci_cmd_sync_work+0x22b/0x400 [ 165.450388][ T54] ? process_scheduled_works+0x945/0x1830 [ 165.456140][ T54] process_scheduled_works+0xa2c/0x1830 [ 165.461736][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 165.467754][ T54] ? assign_work+0x364/0x3d0 [ 165.472387][ T54] worker_thread+0x86d/0xd40 [ 165.477021][ T54] ? __kthread_parkme+0x169/0x1d0 [ 165.482084][ T54] ? __pfx_worker_thread+0x10/0x10 [ 165.487232][ T54] kthread+0x2f0/0x390 [ 165.491357][ T54] ? __pfx_worker_thread+0x10/0x10 [ 165.496501][ T54] ? __pfx_kthread+0x10/0x10 [ 165.501126][ T54] ret_from_fork+0x4b/0x80 [ 165.505576][ T54] ? __pfx_kthread+0x10/0x10 [ 165.510285][ T54] ret_from_fork_asm+0x1a/0x30 [ 165.515092][ T54] [ 165.518467][ T54] Kernel Offset: disabled [ 165.522800][ T54] Rebooting in 86400 seconds..