last executing test programs: 43.070495959s ago: executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x2}]}, {0x0, [0x0, 0x5f, 0x2e, 0x30]}}, 0x0, 0x2e}, 0x20) r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@allocspi={0x130, 0x16, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in6=@private2}, {@in6=@private1, 0x0, 0x6c}, @in=@multicast2}, 0x0, 0xffff}, [@lifetime_val={0x24}, @coaddr={0x14, 0xe, @in6=@dev}]}, 0x130}}, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB='L'], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r8 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000012c0)='R', 0x1}, {&(0x7f0000000640)="94", 0x1}], 0x2}}], 0x1, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xe) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000280)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000240)=[@ip_retopts={{0x10, 0x0, 0x34}}], 0x10}, 0x0) 42.72127878s ago: executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(r0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close(r1) socket(0x1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x20040600) clock_gettime(0x0, &(0x7f0000001d00)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000001c40)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000001640)=[{&(0x7f0000000340)=""/186, 0xba}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/226, 0xe2}, {&(0x7f0000000400)=""/175, 0xaf}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/76, 0x4c}], 0x6, &(0x7f00000016c0)=""/112, 0x70}, 0xffff9e8a}, {{&(0x7f0000001740)=@alg, 0x80, &(0x7f0000001a40)=[{&(0x7f00000017c0)=""/191, 0xbf}, {&(0x7f0000001880)=""/97, 0x61}, {&(0x7f0000001900)=""/72, 0x48}, {&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000001980)=""/157, 0x9d}], 0x5}, 0x9}, {{&(0x7f0000001ac0)=@xdp, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001b40)=""/94, 0x5e}, {&(0x7f0000000200)=""/37, 0x25}], 0x2, &(0x7f0000001c00)=""/42, 0x2a}, 0x7fff}], 0x3, 0x40002102, &(0x7f0000001d40)={r4, r5+10000000}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bind$xdp(r6, &(0x7f0000000180)={0x2c, 0x0, r7, 0xf}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r8, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) 41.696619477s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) 40.728469111s ago: executing program 4: socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="ad56b6a8820fae9d6dcd1a92ea54c7beef9101000000f6854f67ac9d4c90c200", 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) write$binfmt_script(r6, &(0x7f0000020240)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x13, r6, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x3}}]}]}, 0x2c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000f00000008000300757cfc890d4040b04351fa8a1b0b9ce96ae89ccc6456746a84bfdb114c6fd03697d189e24076d8075b63d5bc2fc1abd6a4f1e23f7dbba28df21a668c760a4b9861bbd8aa0a3c0d382b9f0581204e2c7c7ae0473bae6e1d47a4ac4b45465d9d5345259f06bed0eb99f8eb", @ANYRES32=r13, @ANYBLOB="05003300020000000800340000000000"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r12, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000000)={0x1ff}) clock_gettime(0x0, &(0x7f0000005b80)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r4, 0x2, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) 40.487634188s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000e40095"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b40)="a0", 0x0, 0x3}, 0x50) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x8001, 0x1, 0x1, 0x7df, {{0x23, 0x4, 0x3, 0x1, 0x8c, 0x65, 0x0, 0x0, 0x4, 0x0, @remote, @multicast2, {[@timestamp_addr={0x44, 0x34, 0xd8, 0x1, 0xe, [{@loopback, 0x2}, {@broadcast, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd4d0}, {@loopback, 0xac5d}, {@local, 0x7ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x18}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0xc, [@dev={0xac, 0x14, 0x14, 0x11}]}, @noop, @ssrr={0x89, 0x1b, 0xb, [@private=0xa010101, @local, @private=0xa010102, @empty, @multicast1, @broadcast]}, @cipso={0x86, 0x1b, 0x1, [{0x5, 0x7, "afa82eb6b8"}, {0x2, 0xc, "6393f90a4f24ecf08dfc"}, {0x5, 0x2}]}]}}}}}) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000140)={0x0, 0x1, 0x7, r2, 0x8}, 0xc) 33.792299865s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={0x0, 0xf0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 33.620990437s ago: executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x7, 0x0) close(r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000740)=[{&(0x7f0000000340)="15", 0x1}, {&(0x7f0000000480)='\x00\x00t', 0x3}, {&(0x7f0000000040)="1f478d", 0x3}, {&(0x7f0000000000)="efce55", 0x3}, {&(0x7f0000000540)="94eaadd7c66d2a2ef2da40569fb064209dfb1e048b03bc0e43680764b5e473e0e673ed11c936bf3050d3613e9a662ffb527457da1b63290d09e69f62049073d137bc7dbd1d2a32d2e190b19ab0b3b29d7972cd2bfe673068c36a57668c4abf830afd43e5dfe418645dfa4cb7bfc676feef167924a4f068e5e244e0", 0x7b}, {&(0x7f00000005c0)="bb31389c501cac6fc63962e9bfbb888c3fa84c6194cdff0aa75e6c493bbee9771c98dff3f7cbd16a35c086a23c9184598df49a64265ce92596a352d1bd2d6476f97e57101aa4439386152f2d5845f367fee545f3c9ac0fa79e378da5efb4a9", 0x5f}, {&(0x7f0000000080)='R@', 0x2}, {&(0x7f0000001840)="75043a184c0f2d3250749a9c2a08bec30eb9a687c4b458492dbbed4b463f36303a31fdff15a6520963b18e497f54e35753d0d359b40a22cd1c48c02046a7641b1fb8546d8cf8e2abde9c90fad454cd496d8a82c5fbc8cc91ba2dffaa0a", 0x5d}, {&(0x7f0000001900)="d3", 0x1}, {&(0x7f0000000200)='[', 0x1}], 0xa) write$binfmt_script(r4, &(0x7f0000000040), 0x18a3c85) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x1) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000200000000000000000085000000070000001801000020646c2500000000002020607b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000011140100000000000400000008004b80"], 0x18}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x8a, &(0x7f0000000380)=""/138, 0x41000, 0x1}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 32.511253898s ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@local}, &(0x7f0000000400)=0x14) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x1, 0x1, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001480)={&(0x7f0000000040)='ext4_da_release_space\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000080)='%+9llu \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000002af8ffffffffffff01030000e6ff00000000020000000900010073797ac8d246b5000900030073797a320000000014000000110001c8e46f4f7060ff29fd0960161dfa7c59f28c32b42cf93ae4ac3a69ac575ca1b6dc37451c0ad4e7a08fa619108152a22cf2886360f376a931a2f0237351ebc9ab7d73331e1785"], 0x7c}, 0x1, 0x0, 0x0, 0x4021}, 0x200048c0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000002c0)={0x0, r3, 0x6, 0x7f, 0x4000007, 0x3}) write$cgroup_int(r3, &(0x7f0000000000), 0xffe000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r5, &(0x7f0000000980), 0x12) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)={'#! ', './file0', [{0x20, '],'}, {0x20, '%\x00'}, {0x20, 'sched_switch\x00'}, {0x20, ',\x00'}, {0x20, 'kfree\x00'}, {0x20, '%+9llu \x00'}, {0x20, 'syzkaller\x00'}, {0x20, '/'}], 0xa, "270901b0af737001dc8db222acccdc719064143aedfd65ab17b1e7c7dc9c139c8565ea40600c4a57153c77"}, 0x6a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x28, r2, 0xf00, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000200000079102800000000001e5000000000000095000d40371901e5"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0xfffffffd, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 31.874981951s ago: executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x7c, 0x2, 0x9, 0x401, 0x0, 0x0, {0x6, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xf2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x200}}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}]}, 0x7c}}, 0x840) (async) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x10001, &(0x7f0000003700)={0x77359400}) (rerun: 64) 31.843226289s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x3ff, 0x3ff, 0x3, 0x280, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000480)={r1}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) unshare(0x28000600) r3 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r3, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000640)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c30710", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @loopback}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0xa) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000204c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01020000000000000000020202000900010073797a30000000001400020076657468315f746f5f68737200f731"], 0x40}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x80) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0x6c}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2, 0x0, 0x47}, 0x10}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x1a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@cgroup, r7, 0x24, 0x0, 0xffffffffffffffff, @link_id}, 0x20) r8 = socket(0x26, 0xa, 0x7ff) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r6, @ANYRESHEX=r4, @ANYRES32=0x0], 0x11c}, 0x1, 0x0, 0x0, 0x4008041}, 0x20000001) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}}}, 0xe8) close(r10) 31.703079s ago: executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x7, 0x0) close(r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000740)=[{&(0x7f0000000340)="15", 0x1}, {&(0x7f0000000480)='\x00\x00t', 0x3}, {&(0x7f0000000040)="1f478d", 0x3}, {&(0x7f0000000000)="efce55", 0x3}, {&(0x7f0000000540)="94eaadd7c66d2a2ef2da40569fb064209dfb1e048b03bc0e43680764b5e473e0e673ed11c936bf3050d3613e9a662ffb527457da1b63290d09e69f62049073d137bc7dbd1d2a32d2e190b19ab0b3b29d7972cd2bfe673068c36a57668c4abf830afd43e5dfe418645dfa4cb7bfc676feef167924a4f068e5e244e0", 0x7b}, {&(0x7f00000005c0)="bb31389c501cac6fc63962e9bfbb888c3fa84c6194cdff0aa75e6c493bbee9771c98dff3f7cbd16a35c086a23c9184598df49a64265ce92596a352d1bd2d6476f97e57101aa4439386152f2d5845f367fee545f3c9ac0fa79e378da5efb4a9", 0x5f}, {&(0x7f0000000080)='R@', 0x2}, {&(0x7f0000001840)="75043a184c0f2d3250749a9c2a08bec30eb9a687c4b458492dbbed4b463f36303a31fdff15a6520963b18e497f54e35753d0d359b40a22cd1c48c02046a7641b1fb8546d8cf8e2abde9c90fad454cd496d8a82c5fbc8cc91ba2dffaa0a", 0x5d}, {&(0x7f0000001900)="d3", 0x1}, {&(0x7f0000000200)='[', 0x1}], 0xa) write$binfmt_script(r4, &(0x7f0000000040), 0x18a3c85) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x1) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000200000000000000000085000000070000001801000020646c2500000000002020607b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000011140100000000000400000008004b80"], 0x18}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x8a, &(0x7f0000000380)=""/138, 0x41000, 0x1}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 31.551107949s ago: executing program 0: r0 = socket(0x21, 0x2, 0x10000000000002) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000680)={{0x2, 0x4e21, @loopback}, {0x1, @local}, 0x0, {0x2, 0x0, @multicast1}, 'ipvlan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4fb7, 0x8001, 0x6, 0x3132, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x401, 0x1}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='devices.list\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00'}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @remote}, 0x2, 0x1, 0x2, 0x1}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xb, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) write$binfmt_elf32(r5, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r5, &(0x7f0000007940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}], 0x1}}], 0x1, 0x4048841) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="4e00030007"], 0xd) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x2, 0x2, 0xfffd}}, 0x26) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x0, 0x3}, 0x48) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000580)) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071123a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000200)=""/36, &(0x7f0000000240)=0x24) 31.437473832s ago: executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0xd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0xc9c0) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc903ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x50c}, {&(0x7f0000000480)="84", 0x10}], 0x3) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/251, 0xfb}, 0x0) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000000ff00000000000000000000000000000000000000000000400000fe8c99c8706a"], 0x78) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) 31.248449854s ago: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140), 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 31.129726994s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001300)=@delsa={0x34, 0x11, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x0, 0x6c}, [@mark={0xc}]}, 0x34}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180400000000000000000000000000007110800000000000950000000000000069751cc0d3b8a3184e7c0a154f3eda6708e859b4f51d1293b97f8db935c78190631d20343e532a5c13fef8b412cfbf743aac2fc0b304f64852139cfa45a6273810102b51e2cdcddd2b4ececb4fdcbe3def20157e5852068ab29ef4a27035c12fc6f2d63708cc96b5a408d7623d11445abf37750239ca4d5294b7b3c625"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f0000000000)="fcffffff", 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r3}, 0x10) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 31.00953899s ago: executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 64) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async, rerun: 32) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580), 0x12) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000880), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (rerun: 32) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003100), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000005240), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r9, &(0x7f0000005cc0)={0x0, 0x3b, &(0x7f0000005c80)={&(0x7f0000005c00)={0x2c, r8, 0x413, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r7, &(0x7f0000000400)={0x0, 0xfcf9, &(0x7f0000000000)={&(0x7f0000000080)={0x28, r8, 0x200, 0xfffffffd, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CCA_MODE={0x0, 0xc, 0x6}]}, 0x28}}, 0x0) 30.927042706s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000700)=0x5, 0x4) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x4a6a, 0x4) recvmmsg(r0, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000006, 0x0) (async) shutdown(r0, 0x1) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) (async) sendto$packet(r1, &(0x7f00000000c0)="3f0302e9260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 30.853114414s ago: executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r2, 0x8, 0x7, 0x7}) openat$cgroup_ro(r5, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 30.643308863s ago: executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'gretap0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x4cc, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1d, 0x1b, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018390000020000000000000000000000b7080000000000007b8af8ff00000000b70800001f0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216, 0x41100, 0x8, '\x00', r1, 0x7, r4, 0x8, &(0x7f0000000240)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002440)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xc9, &(0x7f0000000840)='cgroup\x00\xe6\xe6B{q\x89\x1d\x96\xfc>\x1a\x91\f\xad\xfcJ-\xfeP\x1c*\xb5h\xb8\xfcH\xb5\xcf\x95O4\xfeP\x83jU\xae\x1a\x83\f/\r\x02\xb2t\xfa]\xeb;2\t\x9a0I8\x11\x9d3\x7f\"\xa6$r\x8c\t#p\ni\xa0\xd7\x92y[\xf9\xe6\xbam\\\xa1\x90k*U/\xbf\xf8\xf9Q\b8\'\x04\x88Jf1\x9e\xa9:rM\xd1)\x8e\xab\x02\xaf^<\x99B\x17\x8e\"\r\xca\x8b\xa3q\xc7\x8c\x1c>\x13\xc0\xf3L\xc0\xe4\\\xb6#\xf3z\x16\'\x1b\xb76(\x17u\x86>\x98$E\x9b\x14\x969c\x89\xc9\xb6*~\x18\xd6\x9e4P\xdb`\xd3K\xae\xdcJ\x85\xa6B\xa8G\xb2q\x1ba;7R\xac\xf6\x06\xe0\xbams.\xc9!\xc9%'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x5, &(0x7f0000000300), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000280)='GPL\x00'}, 0x90) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x7e, 0x4) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x2, @empty, 0x1}, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x5c) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@remote, @in=@loopback}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) socket$netlink(0x10, 0x3, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x800, 0x0) r9 = bpf$BPF_BTF_LOAD(0x22, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc00}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r9, 0x3, 0x2, 0x5}, 0x48) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="b50d410a8496e9b801d057c500034f64ee3de135b53325f9ada83c538daa087181729c43c727aaeb4f06e0170a3920cd97c9d2113e438cf9a79664262e9881218e0e7712701868386a37d7d5b59dbd8f598c72c1fb6567e62275d824539cde151669c18988c7816b192af43f91e777e281e6c3c0e2b06a8a86034e24d3c2a1f540fa8aeae4aaf6cc699b411a0ebab06e08719c171f77adcba60a8bb88d30e1dcaad8ddd88b4d4edffa620ea8b06e19d9f95b28a132abe4d869e1434baa4b47091eece31da956368176a2fb81fb485d8cbe1b3d83898f612bcd24bde463041e74", @ANYRES32=r2, @ANYRESDEC=r8, @ANYRES8=r10, @ANYRES32=r0, @ANYRESOCT=r9], &(0x7f0000000980)=""/262, 0x37, 0x106, 0x1, 0x80000001}, 0x20) 30.585929469s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000e40095"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b40)="a0", 0x0, 0x3}, 0x50) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x8001, 0x1, 0x1, 0x7df, {{0x23, 0x4, 0x3, 0x1, 0x8c, 0x65, 0x0, 0x0, 0x4, 0x0, @remote, @multicast2, {[@timestamp_addr={0x44, 0x34, 0xd8, 0x1, 0xe, [{@loopback, 0x2}, {@broadcast, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd4d0}, {@loopback, 0xac5d}, {@local, 0x7ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x18}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0xc, [@dev={0xac, 0x14, 0x14, 0x11}]}, @noop, @ssrr={0x89, 0x1b, 0xb, [@private=0xa010101, @local, @private=0xa010102, @empty, @multicast1, @broadcast]}, @cipso={0x86, 0x1b, 0x1, [{0x5, 0x7, "afa82eb6b8"}, {0x2, 0xc, "6393f90a4f24ecf08dfc"}, {0x5, 0x2}]}]}}}}}) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000140)={0x0, 0x1, 0x7, r2, 0x8}, 0xc) 30.568090861s ago: executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x31}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="a9d000000000e7df5e66efff00722c26b8ab64750200000000000000522ebfaba9644225695cecf76b088c50c30c349f3a58692802000000e66514b6a0661c955525ef1c36ca8066447da25b84922195559207817be05f95978e30e7de10f6a32f72fa76b50dfdbd9c60bef2e0189e8b9df6c8d2322ecc000000000000000000009ece64577894c2f7c16b0b18c0bb65ea321ea2acc81c22c0757bd291a77d8098c5cb057ff63e6d858b43996c2192d7bd22f0a09ab0b157c6ad7eafcda9d96e8000839363f41f48a55cae5ac88a3465e8031ee078c1747880cc8799"], 0x28}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.555461044s ago: executing program 2: mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x7a}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'netpci0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0x13) ioctl$TUNGETFILTER(r6, 0x801054db, &(0x7f0000000240)=""/206) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@deltfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="b000000010000100"/20, @ANYRES32=r10, @ANYBLOB="524202000000000084001680800001807c000c8014000100bbad0000e102000029000000810000001400010070040000ea0900000400000088a80000140001039d92bf00a20000000900000088a800001400010006000000690500000400000088a8000014000100190c0000400200000500000088a8000014000100ff07000044080000fdffffff88a800000a000100aa"], 0xb0}}, 0x0) sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x24040010, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x100, 0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r11, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 30.500797345s ago: executing program 0: socket$inet6(0xa, 0x80002, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0xfffffffffffffe1a, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x0, 0x6, "50cffa89d7edb6d4669355c39d4bb2d00ef8c5bb0aeb379e0a76417b18af095d4e7225f6f7fd1406f8c82e87f8cbea0c920bbaf1ee6d74ff765b7fb52c4f1ab127e84bb51d4b34ef898e2b65da3c18f8c5b635b12238701a7a06964e76642ee7253ab186c78698eb09b4092087a27f97aca7d9772d02a4ee5db843eb83ff1622ee37ec7e47a0477627d01f3536ea6d26741d82b775498552eeaaf34b54559093626c40f578dc9dc7c9b496bccc83bdfea6bbface83c098d324c2164a"}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELTABLE={0x0, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz1\x00'}]}], {0x14}}, 0x9c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8010000000002100000000000000bb050005002b0000000a0000a874000000fc01000000020000000200000000000000000000000000000800197c"], 0xe0}}, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018e0ffff00000000000000000000000300000000000000000000000000000000000000008863db54acd630a5bdc75ef14f02c66341e94477986308f670cd36c8079cb1b0c97c9bfe04b6d588e9de5bd65ca7af0a145753b7a9707626ad224c37d2e074c1eae895e6521ef293fa5d3c1bd909f794df0c1bf2dea1b77394d00fed30a87b1114a0b0985f9abc13236ed3c189f7a57622fd68542797a464da2f061e95ddbb9ccf43dd4f97fea243"], 0x0, 0x18, 0x0, 0xa}, 0x20) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socket$packet(0x11, 0x3, 0x300) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000180)=[{}, {r3}], 0x2, 0x0, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYRES64=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xfffffffffffffd8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd2f, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) (async) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r6, &(0x7f0000000340)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}}, 0x1c) (async) shutdown(r6, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) 30.151469119s ago: executing program 1: r0 = socket(0x21, 0x2, 0x10000000000002) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000680)={{0x2, 0x4e21, @loopback}, {0x1, @local}, 0x0, {0x2, 0x0, @multicast1}, 'ipvlan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4fb7, 0x8001, 0x6, 0x3132, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x401, 0x1}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='devices.list\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00'}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @remote}, 0x2, 0x1, 0x2, 0x1}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xb, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) write$binfmt_elf32(r5, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r5, &(0x7f0000007940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}], 0x1}}], 0x1, 0x4048841) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="4e00030007"], 0xd) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x2, 0x2, 0xfffd}}, 0x26) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x0, 0x3}, 0x48) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000580)) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071123a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000200)=""/36, &(0x7f0000000240)=0x24) 30.134001022s ago: executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000010000000000000000000000911201000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000003c0)={0x1f, 0x0, @none}, &(0x7f0000000400)=0xe, 0x80000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'dummy0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007b113800800000e985100000020000008500000005000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000066008166", 0x8}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r2, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0xe8, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x2f, 0xa9, @random="a8a38cb8d0b260766d7349c34ae1583e902dc13b8dcb7e01cc14d626ae46897d925264ad89ee268ccf8614"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}, @DEVLINK_ATTR_RATE_NODE_NAME={0x78, 0xa8, @random="746d0bf5af531f3f1a3b8c7f470e47ac3b94bbbc7052ac3a54e15071528f539134edcd2a6ffa55eb34e20693184e720706dbb25c105d51399775c5936657746c19b6a534dadab98e76a110b4c302066710dc82d8b7e2b1767bc12068154f9b327637fe5f5d7aea0864337e80271767c854db5c3b"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x8094) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="25003300d0000000080211000001080211000000505050505050000003"], 0x44}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 30.023756203s ago: executing program 1: getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, 0x8) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x1000008, @loopback, 0xffffffbc}, 0x1c) r3 = socket$inet(0x2, 0x3, 0x9) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0x17}}, 0xc) listen(r2, 0x80080400) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f0000000100)=r6, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r6, 0x20, &(0x7f0000000440)={&(0x7f0000000140)=""/34, 0x22, 0x0, &(0x7f0000000380)=""/188, 0xbc}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c3916fb0cce646a67a444d4de2a41990f05ccd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc865011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b9e8a03c35c8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaec0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff928de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ec89e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589b0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a85430600f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a2c0afd605eab3e33f96500cad0aaa691c231a8b9e83c30c260415b35c268b02680541a41288129c8a183df9e9e98c28fbec483df6baa22bb2af678b319467f0b3b57659187e9e06014c3ffc6e20e1ab7f83f5da106de77ca7194ea1f7ab6955cab770e4f65163715fb551390d3f6d2086fb1566175af9511e496c2e006f095fcd4db0d4b8d7aac9bc475d1360e5311ee19ec74fdb16949afc33dfe60bd3a73211e086598db2a084c8ef9ec06cabe0fe004551b97cdc4cf1f7800f274e55a5f4b4b86000000000000000035603ac86b4520995271cd5a4f3d600fe1bf172f9449163cf130625d7d958fc4d48b6bdb76fac530a97151da2a41daf3661e5e026499ec1b3d07106a66b048b421ba8569a5e87fafc837926e00409f17b8dfa04816e782add9965a482ad013a2d481cba6f9b5517407ad2e38ff94c96b983102203521e700bb2ab802bc2fd236001152c53420eef7e2d4dec10b6e1d04f2fe5c36c0e22b58c7f05c77669312c4ae82d9bc38c1b043fea90000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000e80)="b9ff03076808268cb89e14f008001be0ffff00fe4000632f77fbac141416e0000001", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_int(r4, 0x10d, 0xe1, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000017c0), 0x4) sendto$inet6(r1, &(0x7f0000000580)="03", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x100}}, [0xd66, 0x6, 0x0, 0x6, 0x4, 0x4, 0x7, 0x2, 0x8000, 0x9, 0xffffffffffff0001, 0x1f, 0x8000, 0x6, 0x9]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e22, 0x9, @mcast1, 0x8000}}}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 544.749237ms ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000000000000000003000000000200000002000000000000000000000000000001050000001f0000000000000001000085000000000000000001000008000000000000"], 0x0, 0x5a}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x4, 0x8, 0x6, 0x924, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x6}, 0x48) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r0, 0x4a, &(0x7f0000000680)={&(0x7f00000005c0)=""/44, 0xfb, 0x0, &(0x7f00000007c0)=""/93, 0x5c}}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x24}}, 0x5) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18ff00000d0e9a74ff6afed7f7910000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r2 = socket(0x11, 0x3, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000001c40), 0x0, 0x20000000) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in], 0x10) (async) r4 = socket$inet(0x2, 0x80001, 0x84) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000380)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00082bbdf000fbdbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b008c000000060016007f00000005001200100000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100100008000b00c6ad000006001600d10000000500120001000000"], 0x94}, 0x1, 0x0, 0x0, 0x24004804}, 0x20800) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='fsi_master_gpio_crc_cmd_error\x00'}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0)=0x908, 0x4) (async) recvmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000240)=""/34, 0x22}, {0x0}, {0x0}], 0x4}, 0x101) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r5, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) (async) r6 = socket(0x2, 0x5, 0x0) bind$rds(r6, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000940)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000050000140600fc020000000000000000000000000000ff0200"/51, @ANYRES32], 0x0) (async) socket$caif_stream(0x25, 0x1, 0x4) accept4(0xffffffffffffffff, &(0x7f0000000540)=@isdn, &(0x7f0000000400)=0x80, 0xc0800) 509.317511ms ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@local}, &(0x7f0000000400)=0x14) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x1, 0x1, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001480)={&(0x7f0000000040)='ext4_da_release_space\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000080)='%+9llu \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000002af8ffffffffffff01030000e6ff00000000020000000900010073797ac8d246b5000900030073797a320000000014000000110001c8e46f4f7060ff29fd0960161dfa7c59f28c32b42cf93ae4ac3a69ac575ca1b6dc37451c0ad4e7a08fa619108152a22cf2886360f376a931a2f0237351ebc9ab7d73331e1785"], 0x7c}, 0x1, 0x0, 0x0, 0x4021}, 0x200048c0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000002c0)={0x0, r3, 0x6, 0x7f, 0x4000007, 0x3}) write$cgroup_int(r3, &(0x7f0000000000), 0xffe000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r5, &(0x7f0000000980), 0x12) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)={'#! ', './file0', [{0x20, '],'}, {0x20, '%\x00'}, {0x20, 'sched_switch\x00'}, {0x20, ',\x00'}, {0x20, 'kfree\x00'}, {0x20, '%+9llu \x00'}, {0x20, 'syzkaller\x00'}, {0x20, '/'}], 0xa, "270901b0af737001dc8db222acccdc719064143aedfd65ab17b1e7c7dc9c139c8565ea40600c4a57153c77"}, 0x6a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x28, r2, 0xf00, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000200000079102800000000001e5000000000000095000d40371901e5"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0xfffffffd, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 107.514036ms ago: executing program 0: bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000002c40)=@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x8}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x7) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000900)={&(0x7f0000000080)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000640)=[{&(0x7f00000000c0)="c2", 0x1}], 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000008400000005000000300000400000000020"], 0x38}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="182f0d007616c17100"/20, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) socket(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="3200030007"], 0xd) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000034c0)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r6, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'veth0_to_team\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) bind$tipc(r4, &(0x7f0000000300)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x3}}, 0x10) write$cgroup_subtree(r4, &(0x7f0000000580)={[{0x2d, 'net'}, {0x2d, 'memory'}, {0x2d, 'net_prio'}, {0x2b, 'memory'}, {0x2d, 'freezer'}, {0x2d, 'hugetlb'}, {0x2d, 'pids'}, {0x2b, 'blkio'}, {0x2d, 'perf_event'}]}, 0x4a) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140010009d581dadaf0e645a0bbbb32386f579013b977fce074ad6ce45023df69858e3d6cea47653a4e13f18114f7c0044a5254d7d5eb73739028bc32a5bd61a336f38043d7bf827a5c79a01231b9a4000000000000000ef1b2d502c2348dd5121bbf9a1971b8f8088e4c72fab2d10a3acb36b6737cec5", @ANYRES16=r8, @ANYBLOB="00042bbd7000ffdbdf2568000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c00028008000100", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r10], 0x48}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_netprio_ifpriomap(r4, &(0x7f00000001c0), 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r6, 0x5000940a, &(0x7f00000024c0)={{r0}, "fcab9ce6197d2ef8674b52b25bbe324df88055a75f65abcd2204626f360aecf0990535530db0f07349f8854637db2a51c6a61c6f0fe189708919d73a522f66215f43006f4e7f921bec59daca9a4260f4f7da320695b5699ec50013418b085878fca46580fa8bd3427a4cd9749caa17b76182871ee71c02420d58b3331e1df03533f8fbacef705423e970d1d3b433759372c1c6a45732b2f6c9fe85ca81d5923f01100ec3a2a8a5822e75c6c50b752429135bd0b326468c1f519bc35fb22605fadb7bcc13a30547dd448878b9973cd1174eeaa37e4d2b700c96a3504ede498bfc5d23eb9ed4a1e861bad554618ea8a92bd81ed9ec7246c6e18a65926627bbd3b00d3970a4436c95c3240af5497ef03716cbd03e6dd06b561956ba8f78482d073b77c6647fa903f49144c05c7f1ce619514aa4c1e87693a66975849005153e25001f0ca95965a73a6d4658be4d8ef611a53a70935b4568b30154f19755c2c11d055f8f38af91d32437ba47f62c477a23f0938c24ed65c2ba7f6f8af0852807124f85267914da533ff6d4b94192294bb92bf6476dea2b0ced54688e961e5112ebaccc754d8acee05399f16e2cd6f7a41e709122cc07643115df3b0012c11756227adbfb6036c5e7c4bacfb2da6c063454ae5b61588213a6f13f0e372198ee7e502af38aab1bdbaa199acfa74b812da5f64993c61cd172a1397fe533ecd2d6d36609e41db6cb683a1507b43760905273bab5987a0865e15c0127603e7fc46c24384a46876c2ea033daacca2f2b9345cbef73e14c74657ce9cf77440631dc685f2d2bdf28087c5dfc66d171b9ba2a570255ce8a2c3479f750c87aef1cef860b8ebb0d50d756acd873611a4ca7a4f313f50e1686b43698143da0473b1db72d37336bbdf5c8df329e55350478f5d127605258d9f5a19588f664c4c910acf393c2906d186ff6b7bc6abd28daae42583061b106e387fe7ce340377e199a04b0b7df4f1d1a14f6a3c79338738f2b1475ae6c2f0e84fd631a4852c82ad21382e6f88af76a87a6570d48f367cadab0df0ad5cc6312c3ecba2e024e8da1e3995571cc57c0e5f85aa18abe7a182368f5acf9f847fafd7965b4d0dc11f45a67a3779713b6586e9531648eab6b293946b0d8f816003e3c8735ea05ba59104071501a7d0adcd0c84c97cdea4907644a8a4d9967bf85128a064ab9147bc324ddf0360420e1e62bb36208fad077e68c14ed84e5656d7742a586de8e4426182f8db8d5db1fec201b3085ddeb34e09c09cee507989cd3135085b562b7b156c644bfaa8809fae665865378e59ffbfb3030d10b21cef9828ad335a7880351fd251dbe7ccb46981bf27eb76672bfae0db6646e39619030f731023fb0a739e408894eb7e21a1b999db67e7e93ab7778f49c92beff8b54140f44432260cf14423854e0bc326947fe5be8b710de393a44fde3a2279252c52c68707530761b27a8efef8ff75e68076d104e6a75d874c6ea96c4d6af29197de49e480b06caf789e7a1525c69487dd271e79550682f12e005e06573ab10189b9cabafd31a5b13b39f5dea40e430bd396b3d92eb1b6e2300847cb5d92b912897957355a1e14bdd1060b1d3e7b4742c03a9d292af8deb0d4abde45af3dc58e7006f65b8108e12d25250b0c96b8112eb38750532417b64de6a340f522c153064423352e9ba55dda41918f24cf9abc1271155041045e1867edfb02a7186380b247039ab1001953d1ba857c24b57aca95618bd672b9cc03579866b825dbf5230d8ec43faef0e57733541ff6e58605bceab7fe8d69fb15c925786d1acf67dbb6b75c2785f0cee9a97ddb51d843461bcc196027d0bb88d90456cbeee3c28631f2372ddb5d9405cee733c8e0f3d5eefa9c2ab00756e95b293ad2105d2da091c37192887a83d4aa71354ea40e3546d065645658a67f36b94cc75fc9e7219750ea8d9dcb731b2388f658123f3dd95710f40ce09c0ab4bcbc33612b06bbccbdb0d2d654d241aaa10ce37c3d5120416f59a642c73650a4b35805d25dfbc9c571514f6ceac53f7fa18bc47c51df3e5f733301d4c3585241a7d9d1d5dd87490ff7f60e62fa68d7ecc47b5ccbf15c305c95afe3e0de7435c5ac6408673284f89f3cc193db441f3ecd1b8b05222ec2bdd32c61c6ada39d2d2a88142873d13303c2f9f296b7d9da50172aad559e595a884f6cab5fa87b10ddd6adec3550d578bc3d4e9a39b1e52c7f9ae0ef73e377e51c6788ae0463a3f0c7a6c58bef099eab482abcf1dee3417c00fb9b2b81363c2643e27bac54ea16126e290f55b854c8e2e3ec6f69498a80b91f3d8699b0ae79ca58d62a96d6c11e14ac8801dae68d9480d8aa16c21385a4bed5ff357d18d2e9c970c0e284455ab37bf0baffa79fe49a3dbf36a8aa1aa7dc80f10ba1f50db71d97f198698f945b40717918ae6332b6bc6a1709ad05ec246e4caf879bb5ee9fa6e382664e734d513335060117cd5a0da0ad2a85fbc3757260d56a8146a545258c579ff535f4d2c29edb6f91e123314318c203a2f5edc4dce1d6c24bc63d6202b572b2388284aeb928ef2a911b88b5cd8c445d3f57c03c01ef7ebb8ed6b730170b6ae4e0e2b964cf136102f254bce2cb8bee9d32438dc101e2682076a7ab03226daea23db0b2aec99b4ff97af6b0e4b6aea931134a47631c463d986ef7f90f26302acb37228b2562faa889dab66f9e077a58be1b6c5c890dfee972408dc0b21a568574ae89015e4e45ac15cf4a6ea7faf336e71152a5f5e7e32dffc56560ecee88a872f6170e0e710072f037b4eebc5d80f4b988f9441d3226b39caca1a4bb54e5fa337e2aa112dcb078f15c33df27199662b040172149922374dfa71dfb39876ec0fe99efa2164cb8b18a2de95c77a321562d11568561bd87ce4b111da5af9322471186d5f7c2882544287a2598034f9a0e72ba3e90f7991200dbff1c7844b719bc90e2df4bb10a76153467f2ef2e729c03fa21a28694a8ee422e1e7d59ef019e39b1c9a41a2b649f1f92b88ad02ed45571719c20577a88a3eb5724185c4f3e0136e89dbe99efde3d1414364b3d49d49efc5809c15c3d0a9f7a437aba3a5315fc86c046b960b02d0eb69037dc6cda50c5aea021a067f4afca56a7a0eadb94e411371952cdb7900bfa41570f2b1dc5b5d17c84d26f60989f2a2fa086d1759d2627d9dad41fc0152b46d33b9e7788225fd5ce945a403e36b79b966826d95ca200d3173392c45c8c0d1e143fdf5eadefd3c51e079733fa59e2cda9cd2c22e713954b12fe8690fad0a23f00e6f984506c6bfd3950ce8cc21c30d4c4cbb4201437ba332c64c12d7be22ade2801e3cc7685e55444329cb644be11efe0a68b1d4814baca2c092026754923745dd41f41beacf7d391dcb7b768f71d4b616b58e5fce2d44717ba0420cf00a367ce8c72acde19cb826e66306dfaabcf4cf8a2fafd8b44553f83dd3ab3362b407b926ca827ad05def499c913c48a62a2952f3d37e2df8f480f67dc60e45f219fefc3c1ae61df82438d424a539a20d3d64982a05ef83a43f5d09ca3b76d94c39347a3fa66e66f8d178ed5f53730a8ce0414b913b96f29a288d54a6d2d6b9e8c7c63a155a28581579537ca388648ca346f3b1de995304b9c687c48041e95427b5a65bde1821adf449489f4abe7dabe2cf755dbad889e4fa5425630b77b6f9f9edca9c6210f93472dde2ce36c7be2771e15afbddf1fef060de4b642de123edc8166d37a1e8fe794eb4610f73d5fa58832d0e1cf7ee1c4f141cf4ee528b2af79f12c5163db80f0f94c7cd2c9c1e895286822a443cda8eaf19533781351457c1ef521e4815095da1bfde05939b58fb157df1982a9b0d9f216ae9418b6536d3dffeef1b227e7b80801b3d4b97103fcb85ed7d58b46e7e9faa10d838a65e008fd89ff00fa5dc8fb8c320ed2e2389675139a9f530d9b1eb491397579ae5f1cbe97e0d5dccaa4e0e026498a6827857c1d85503e46d30b52308e2a6568dc511d064de8d63ea0821d14b306016dd4f11a637f3de1957a1644b307b8056c7e54d8cbb7ffe973ca917a1510c09f8b00ea8af7a996572a6301fd0a5c355800e5508630d86e743c29df8d2dcdced9c302bdda121c88cf5f1090a63176fb2a26690f7dde4a863a61d1d8c8f332215d4f089fb3a574cbaac5f12d280ba528b37fa9479aef647743364ab6278a1f70d6e977bab0179a3a30e5029b0c6dddfec6c80c5269dbf50a7b536766c8f298af0e7235f56e0ad6250d3a631d70dda4fad60aec637524cbb8f23fa407b994c8146c9ff1f0964df399594bf99d48b676d0874e66cf7359ab3eeb1af56a33465197187a137772d1390a936afbf7ecc3cfa58189cff3e6506cb6e02e0a94b9b400007de2bb16a4b72711bf1fb150e1054ef70be20a88a887f842c12949747d2b2284cf9432739c097475f3fe3cee5ae94eb35974d57e17f6963612bacbb8b4728bb3da9fcb2de6cefb1ccdaf4a1364cd795a37460b06dc7f5487e3251d0222b110bb8fa42b04f7589c778d804d8f516742e763a38fc00b13451398449c122cbb52c2f6e06305c37d56729ce2e419c616901d559d3c45ccfee42ba1045f112af3f2c934d7bf49a20f6437eb5d12e6588de3da7e4d675ea81d74d7416e9e3e9e71d6f167b8d4be4c0a4d33db967361b0a4865d47e4b34336126cf8bb3dcd4a2322c264b0d0781c4f34a18a587dc4a644355d003b213066d4a0c127fc4592e3bfe4d5838a4afac3f0aeaf348c7b64e28ea4551d93f848ab2f92312612b97d7a4c7d374dc9ee1a90fdcc129795cec458291e54a80e7de35f2223ea5a52cea32dde7122c92b70fa418b9d56c47ce5c62df932ace11ca6e0d82434a7c14b7e31572827c37ab81c47257a4bad361d5d3b51c52a7926180e08f3d0af4875fb5821b7947237d262749e1ab7b4b99c3dfb56891c88f0aac3ec40f9369bebdabeb6b2714783d569e0585b1657e987a37ac1a4f55291ef1cff9de73d27fc959ea9cd35ebd99aaf312976ed1b042cd92fad328bc64a439a9a7100f06f9da081907a264caafbd0156d46bf9f636ac04c9dddcdd8d9b80111992ccd32d1e8443f1cddcfd48d98dcd46b827116ae61bac5de526f5313b164dfab8e66ae7ff8bc57a17420731e7756c8c1ad85e8eee9133b8a621c46c620c34dce9c20bd8dfaa90b0db29b38f7ae7ab56d2211e556205b2e7dc54ec68ff1ae16b452eb74e0a1e85446f2778a7fd209331ad3d7cd859f5b4666d0fcdf126c671ecf5cc294ffad728e7e6f56c1b87ce7bf48ba5a7194fd45254c6428467c90e325815737e2a6014deacc5709b40b0ba83ccb3a9f1a27b821a8b979f8da273eb0ee1caffb6f2785bc616ad887c3c7b6635d7ec11aa2de85b464132ee74c87432c7212e4a946e83e493061743954a8819d06917ad416b3ecf4231e736e4012b18bed6afa72f56c524efbfda23ceef3cdbaca4660dc16d4e15c7c2a79f0a62d0b8cb742b8e9cfcebbe692173cf0adf185885647646314fa8a35f03347f79233b30db400b650d92ef1560be6c82f6679e8f3280eaf144cfcb2ac23537b87317d2d0b8ae09e5278ca06f1832ac358327674c721a0ff5dbf658f412ce0b2576a19243726d7031c72ed27c07169105e772b8fa3b4e8bd675382bbc01a243d33befad6d18fbdb6ada993c8e7af781b074614edc3ac40f251897e43581257a21d27bd3da89959721b673e6c6ff2e427ab5ff24ef22ba628f710e96332f28ec813e988e22f89757cca1e738dde2a5f6b409"}) kernel console output (not intermixed with test programs): over after parsing attributes in process `syz-executor.4'. [ 115.635427][ T6400] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 116.304278][ T6411] dummy0: entered promiscuous mode [ 116.314598][ T6411] macvtap1: entered promiscuous mode [ 116.330509][ T6411] macvtap1: entered allmulticast mode [ 116.338552][ T6411] dummy0: entered allmulticast mode [ 116.405978][ T6412] dummy0: left allmulticast mode [ 116.411346][ T6412] dummy0: left promiscuous mode [ 116.484207][ T6412] macvtap1: left promiscuous mode [ 116.489312][ T6412] macvtap1: left allmulticast mode [ 117.455097][ T29] audit: type=1804 audit(1718910969.509:7): pid=6448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1161885747/syzkaller.32kTOr/89/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 118.979997][ T6492] __nla_validate_parse: 13 callbacks suppressed [ 118.980019][ T6492] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.184396][ T6499] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 119.441822][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 120.345947][ T6542] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 120.725951][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.167054][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.661265][ T6581] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 121.937608][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 122.736949][ T6613] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.0'. [ 122.755675][ T5167] IPVS: starting estimator thread 0... [ 122.854307][ T6617] IPVS: using max 19 ests per chain, 45600 per kthread [ 122.931110][ T6619] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 123.669077][ T6655] IPVS: Error joining to the multicast group [ 124.346953][ T6683] __nla_validate_parse: 3 callbacks suppressed [ 124.347001][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 124.440249][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.728265][ T6689] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.902725][ T6695] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.138810][ T6702] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.177905][ T6707] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.619445][ T6720] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 126.087799][ T6731] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.134426][ T6731] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.166119][ T6731] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.728867][ T6763] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 128.279209][ T6805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.322163][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.376242][ T6805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.394044][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.961211][ T6864] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 130.053771][ T6866] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 130.123482][ T6866] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 130.284259][ T6870] __nla_validate_parse: 9 callbacks suppressed [ 130.284282][ T6870] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.559580][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 130.636758][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 131.434912][ T6904] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.809678][ T6922] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.134297][ T6932] xt_CONNSECMARK: invalid mode: 0 [ 132.220063][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.617513][ T6946] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 132.764730][ T6949] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 132.997395][ T6958] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 133.016138][ T6964] syz-executor.1: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 133.056033][ T6964] CPU: 1 PID: 6964 Comm: syz-executor.1 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 133.066532][ T6964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 133.076650][ T6964] Call Trace: [ 133.079969][ T6964] [ 133.083029][ T6964] dump_stack_lvl+0x241/0x360 [ 133.087781][ T6964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.093028][ T6964] ? __pfx__printk+0x10/0x10 [ 133.097675][ T6964] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 133.104146][ T6964] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 133.110698][ T6964] warn_alloc+0x278/0x410 [ 133.115181][ T6964] ? stack_depot_save_flags+0x6e4/0x830 [ 133.120778][ T6964] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 133.126894][ T6964] ? __pfx_warn_alloc+0x10/0x10 [ 133.131794][ T6964] ? kasan_save_track+0x3f/0x80 [ 133.136681][ T6964] ? __kasan_kmalloc+0x98/0xb0 [ 133.141504][ T6964] ? xsk_setsockopt+0x598/0x950 [ 133.146405][ T6964] ? do_sock_setsockopt+0x3af/0x720 [ 133.151728][ T6964] ? __sys_setsockopt+0x1ae/0x250 [ 133.156792][ T6964] ? __x64_sys_setsockopt+0xb5/0xd0 [ 133.162074][ T6964] ? do_syscall_64+0xf3/0x230 [ 133.166784][ T6964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.172908][ T6964] __vmalloc_node_range_noprof+0x130/0x1460 [ 133.178980][ T6964] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 133.185360][ T6964] ? __kasan_kmalloc+0x98/0xb0 [ 133.190168][ T6964] ? xskq_create+0x54/0x170 [ 133.194831][ T6964] vmalloc_user_noprof+0x74/0x80 [ 133.199813][ T6964] ? xskq_create+0xb6/0x170 [ 133.204381][ T6964] xskq_create+0xb6/0x170 [ 133.208759][ T6964] xsk_init_queue+0xa1/0x100 [ 133.213401][ T6964] xsk_setsockopt+0x598/0x950 [ 133.218130][ T6964] ? __pfx_xsk_setsockopt+0x10/0x10 [ 133.223374][ T6964] ? __pfx_lock_acquire+0x10/0x10 [ 133.228430][ T6964] ? aa_sock_opt_perm+0x79/0x120 [ 133.233407][ T6964] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 133.238988][ T6964] ? security_socket_setsockopt+0x87/0xb0 [ 133.244756][ T6964] ? __pfx_xsk_setsockopt+0x10/0x10 [ 133.250009][ T6964] do_sock_setsockopt+0x3af/0x720 [ 133.255082][ T6964] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 133.260666][ T6964] ? __fget_files+0x29/0x470 [ 133.265308][ T6964] ? __fget_files+0x3f6/0x470 [ 133.270042][ T6964] __sys_setsockopt+0x1ae/0x250 [ 133.274516][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.274922][ T6964] __x64_sys_setsockopt+0xb5/0xd0 [ 133.281338][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.286165][ T6964] do_syscall_64+0xf3/0x230 [ 133.286195][ T6964] ? clear_bhb_loop+0x35/0x90 [ 133.286225][ T6964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.286265][ T6964] RIP: 0033:0x7fde8f07cf29 [ 133.312039][ T6964] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 133.331770][ T6964] RSP: 002b:00007fde8fd680c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 133.340231][ T6964] RAX: ffffffffffffffda RBX: 00007fde8f1b4120 RCX: 00007fde8f07cf29 [ 133.348244][ T6964] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000017 [ 133.356253][ T6964] RBP: 00007fde8f0ec074 R08: 0000000000000020 R09: 0000000000000000 [ 133.364261][ T6964] R10: 00000000200033c0 R11: 0000000000000246 R12: 0000000000000000 [ 133.372266][ T6964] R13: 000000000000000b R14: 00007fde8f1b4120 R15: 00007ffd470ae918 [ 133.380403][ T6964] [ 133.460455][ T6964] Mem-Info: [ 133.463969][ T6964] active_anon:14215 inactive_anon:0 isolated_anon:0 [ 133.463969][ T6964] active_file:0 inactive_file:46483 isolated_file:0 [ 133.463969][ T6964] unevictable:768 dirty:52 writeback:0 [ 133.463969][ T6964] slab_reclaimable:9772 slab_unreclaimable:95825 [ 133.463969][ T6964] mapped:18371 shmem:1595 pagetables:620 [ 133.463969][ T6964] sec_pagetables:0 bounce:0 [ 133.463969][ T6964] kernel_misc_reclaimable:0 [ 133.463969][ T6964] free:1389625 free_pcp:461 free_cma:0 [ 133.529245][ T6964] Node 0 active_anon:56960kB inactive_anon:0kB active_file:0kB inactive_file:185860kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:73484kB dirty:208kB writeback:0kB shmem:4844kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10232kB pagetables:2480kB sec_pagetables:0kB all_unreclaimable? no [ 133.613227][ T6980] pim6reg: entered allmulticast mode [ 133.651779][ T6980] pim6reg: left allmulticast mode [ 133.655750][ T6964] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 133.695583][ T6964] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 133.724212][ T6964] lowmem_reserve[]: 0 2571 2571 0 0 [ 133.729628][ T6964] Node 0 DMA32 free:1591996kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:57224kB inactive_anon:0kB active_file:0kB inactive_file:185544kB unevictable:1536kB writepending:208kB present:3129332kB managed:2659872kB mlocked:0kB bounce:0kB free_pcp:1628kB local_pcp:724kB free_cma:0kB [ 133.764088][ T6982] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.821882][ T6964] lowmem_reserve[]: 0 0 0 0 0 [ 133.835905][ T6964] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 133.852941][ T6985] bridge1: entered promiscuous mode [ 133.887984][ T6985] bridge1: entered allmulticast mode [ 133.913343][ T6964] lowmem_reserve[]: 0 0 0 0 0 [ 133.918347][ T6964] Node 1 Normal free:3950412kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 133.918530][ T6987] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 133.971677][ T6964] lowmem_reserve[]: 0 0 0 0 0 [ 133.978604][ T6964] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 133.991759][ T6964] Node 0 DMA32: 1*4kB (M) 1*8kB (M) 374*16kB (UME) 252*32kB (UME) 113*64kB (UME) 40*128kB (UME) 19*256kB (UM) 10*512kB (UM) 3*1024kB (UME) 2*2048kB (M) 378*4096kB (UM) = 1591852kB [ 134.017990][ T6964] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 134.062593][ T6964] Node 1 Normal: 1*4kB (M) 5*8kB (UM) 6*16kB (UM) 8*32kB (UM) 1*64kB (U) 3*128kB (U) 2*256kB (UM) 1*512kB (M) 2*1024kB (U) 1*2048kB (U) 963*4096kB (M) = 3950412kB [ 134.100736][ T6964] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.119634][ T6964] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.139545][ T6964] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.177209][ T6964] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.189899][ T6964] 48078 total pagecache pages [ 134.196385][ T6964] 0 pages in swap cache [ 134.200927][ T6964] Free swap = 124996kB [ 134.206008][ T6964] Total swap = 124996kB [ 134.213879][ T6964] 2097051 pages RAM [ 134.222461][ T6964] 0 pages HighMem/MovableOnly [ 134.241566][ T6964] 400873 pages reserved [ 134.261155][ T6964] 0 pages cma reserved [ 134.610596][ T7014] hsr0: VLAN not yet supported [ 134.752231][ T7021] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 134.810765][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.853251][ T7027] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.4'. [ 135.600851][ T7057] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.644285][ T7058] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 135.833877][ T7068] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.413229][ T7057] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 136.863127][ T7101] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 137.236604][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.781131][ T7137] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 137.915757][ T7141] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 137.944642][ T7141] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.031268][ T7148] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 138.549781][ T7167] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 138.700622][ T7171] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.852368][ T7225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.876920][ T7227] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.151664][ T7235] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 140.250015][ T7238] pim6reg: entered allmulticast mode [ 140.299135][ T7239] dummy0: entered promiscuous mode [ 140.310262][ T7239] vlan2: entered promiscuous mode [ 140.335732][ T7239] dummy0: left promiscuous mode [ 140.388111][ T7238] vxcan1: entered allmulticast mode [ 140.403918][ T7242] netlink: 'syz-executor.3': attribute type 33 has an invalid length. [ 140.642527][ T7252] syz-executor.1[7252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.644055][ T7252] syz-executor.1[7252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.685599][ T7252] tipc: Failed to remove unknown binding: 66,1,1/0:1089585850/1089585852 [ 140.830450][ T7252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.862210][ T7252] team0: Port device bond0 added [ 140.873821][ T7259] __nla_validate_parse: 1 callbacks suppressed [ 140.873841][ T7259] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.4'. [ 141.007649][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 141.157226][ T7264] syz-executor.3[7264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.157401][ T7264] syz-executor.3[7264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.367916][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.657925][ T7286] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.891958][ T7294] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.4'. [ 141.915109][ T7295] netlink: 'syz-executor.3': attribute type 33 has an invalid length. [ 142.071731][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 142.161830][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.316417][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.344940][ T7312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.699583][ T7331] syzkaller1: entered promiscuous mode [ 142.720500][ T7331] syzkaller1: entered allmulticast mode [ 142.889414][ T7335] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.063047][ T7346] bond2: entered allmulticast mode [ 143.167967][ T7335] bond2 (unregistering): Released all slaves [ 143.503182][ T7342] syzkaller0: entered promiscuous mode [ 143.536062][ T7342] syzkaller0: entered allmulticast mode [ 143.773940][ T5125] Bluetooth: hci3: command tx timeout [ 146.608164][ T7396] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 146.912740][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 147.256486][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 147.290830][ T7436] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 147.306675][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 147.342798][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 147.436483][ T7436] team1: Mode changed to "activebackup" [ 147.443464][ T7448] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 148.216576][ T7474] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 148.419531][ T7485] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 148.446237][ T7485] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 148.470906][ T7487] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 148.491356][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 148.527797][ T7487] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 148.562890][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 149.135556][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 149.271813][ T7521] IPVS: Error joining to the multicast group [ 149.544906][ T7530] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 149.733518][ T7535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.740888][ T7535] IPv6: NLM_F_CREATE should be set when creating new route [ 150.174472][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 150.588718][ T7571] IPVS: Error connecting to the multicast addr [ 150.922908][ T7587] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 150.946664][ T7587] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 151.224111][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 151.536541][ T7613] IPVS: Error connecting to the multicast addr [ 152.264102][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 152.724168][ T7638] warn_alloc: 1 callbacks suppressed [ 152.724187][ T7638] syz-executor.2: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 152.785348][ T7638] CPU: 1 PID: 7638 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 152.796405][ T7638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 152.806620][ T7638] Call Trace: [ 152.809933][ T7638] [ 152.812894][ T7638] dump_stack_lvl+0x241/0x360 [ 152.818179][ T7638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.824055][ T7638] ? __pfx__printk+0x10/0x10 [ 152.828809][ T7638] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 152.836431][ T7638] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 152.843583][ T7638] warn_alloc+0x278/0x410 [ 152.848247][ T7638] ? stack_depot_save_flags+0x29/0x830 [ 152.854381][ T7638] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 152.860951][ T7638] ? __pfx_warn_alloc+0x10/0x10 [ 152.866293][ T7638] ? kasan_save_track+0x3f/0x80 [ 152.871465][ T7638] ? __kasan_kmalloc+0x98/0xb0 [ 152.876301][ T7638] ? xsk_setsockopt+0x598/0x950 [ 152.881213][ T7638] ? do_sock_setsockopt+0x3af/0x720 [ 152.886471][ T7638] ? __sys_setsockopt+0x1ae/0x250 [ 152.891547][ T7638] ? __x64_sys_setsockopt+0xb5/0xd0 [ 152.896849][ T7638] ? do_syscall_64+0xf3/0x230 [ 152.901843][ T7638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.908160][ T7638] __vmalloc_node_range_noprof+0x130/0x1460 [ 152.914185][ T7638] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 152.920608][ T7638] ? __kasan_kmalloc+0x98/0xb0 [ 152.923943][ T5117] syz-executor.4 (5117) used greatest stack depth: 17712 bytes left [ 152.925398][ T7638] ? xskq_create+0x54/0x170 [ 152.938372][ T7638] vmalloc_user_noprof+0x74/0x80 [ 152.943524][ T7638] ? xskq_create+0xb6/0x170 [ 152.948223][ T7638] xskq_create+0xb6/0x170 [ 152.952877][ T7638] xsk_init_queue+0xa1/0x100 [ 152.957791][ T7638] xsk_setsockopt+0x598/0x950 [ 152.962791][ T7638] ? __pfx_xsk_setsockopt+0x10/0x10 [ 152.968064][ T7638] ? __pfx_lock_acquire+0x10/0x10 [ 152.973144][ T7638] ? aa_sock_opt_perm+0x79/0x120 [ 152.978151][ T7638] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 152.983749][ T7638] ? security_socket_setsockopt+0x87/0xb0 [ 152.989536][ T7638] ? __pfx_xsk_setsockopt+0x10/0x10 [ 152.994782][ T7638] do_sock_setsockopt+0x3af/0x720 [ 152.999862][ T7638] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 153.005450][ T7638] ? __fget_files+0x29/0x470 [ 153.010093][ T7638] ? __fget_files+0x3f6/0x470 [ 153.014836][ T7638] __sys_setsockopt+0x1ae/0x250 [ 153.020294][ T7638] __x64_sys_setsockopt+0xb5/0xd0 [ 153.026038][ T7638] do_syscall_64+0xf3/0x230 [ 153.030756][ T7638] ? clear_bhb_loop+0x35/0x90 [ 153.035476][ T7638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.041507][ T7638] RIP: 0033:0x7fb25e47cf29 [ 153.045963][ T7638] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 153.065613][ T7638] RSP: 002b:00007fb25f2b30c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 153.074081][ T7638] RAX: ffffffffffffffda RBX: 00007fb25e5b3f80 RCX: 00007fb25e47cf29 [ 153.082100][ T7638] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 153.090110][ T7638] RBP: 00007fb25e4ec074 R08: 0000000000000020 R09: 0000000000000000 [ 153.098117][ T7638] R10: 00000000200033c0 R11: 0000000000000246 R12: 0000000000000000 [ 153.106126][ T7638] R13: 000000000000000b R14: 00007fb25e5b3f80 R15: 00007ffe009f1458 [ 153.114161][ T7638] [ 153.194250][ T7638] Mem-Info: [ 153.205860][ T7638] active_anon:16456 inactive_anon:0 isolated_anon:0 [ 153.205860][ T7638] active_file:0 inactive_file:46519 isolated_file:0 [ 153.205860][ T7638] unevictable:768 dirty:35 writeback:0 [ 153.205860][ T7638] slab_reclaimable:10223 slab_unreclaimable:97147 [ 153.205860][ T7638] mapped:17846 shmem:1595 pagetables:576 [ 153.205860][ T7638] sec_pagetables:0 bounce:0 [ 153.205860][ T7638] kernel_misc_reclaimable:0 [ 153.205860][ T7638] free:1386929 free_pcp:1043 free_cma:0 [ 153.259626][ T7638] Node 0 active_anon:65728kB inactive_anon:0kB active_file:0kB inactive_file:186008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:71436kB dirty:156kB writeback:0kB shmem:4844kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10252kB pagetables:2336kB sec_pagetables:0kB all_unreclaimable? no [ 153.294577][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 153.305875][ T2453] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.334715][ T7638] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 153.365573][ T7638] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 153.399091][ T7639] __nla_validate_parse: 5 callbacks suppressed [ 153.399112][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.430356][ T7638] lowmem_reserve[]: 0 2571 2571 0 0 [ 153.435747][ T7638] Node 0 DMA32 free:1575400kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:65900kB inactive_anon:0kB active_file:0kB inactive_file:185692kB unevictable:1536kB writepending:152kB present:3129332kB managed:2659872kB mlocked:0kB bounce:0kB free_pcp:3736kB local_pcp:844kB free_cma:0kB [ 153.440906][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.475994][ T7638] lowmem_reserve[]: 0 0 0 0 0 [ 153.480787][ T7638] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 153.501246][ T7642] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.509233][ T7638] lowmem_reserve[]: [ 153.514876][ T7642] IPv6: NLM_F_CREATE should be set when creating new route [ 153.527243][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.535692][ T7638] 0 0 0 0 0 [ 153.539111][ T7638] Node 1 Normal free:3950412kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 153.571195][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.578375][ T7638] lowmem_reserve[]: 0 0 0 0 0 [ 153.583439][ T7638] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 153.604086][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.615221][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.623576][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.670664][ T7638] Node 0 DMA32: 2*4kB (ME) 8*8kB (E) 16*16kB (UME) 47*32kB (UE) 38*64kB (UME) 84*128kB (UME) 47*256kB (UM) 26*512kB (UME) 10*1024kB (UME) 2*2048kB (M) 372*4096kB (M) = 1578408kB [ 153.692287][ T2453] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.712412][ T7638] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 153.735686][ T7638] Node 1 Normal: 1*4kB (M) 5*8kB (UM) 6*16kB (UM) 8*32kB (UM) 1*64kB (U) 3*128kB (U) 2*256kB (UM) 1*512kB (M) 2*1024kB (U) 1*2048kB (U) 963*4096kB (M) = 3950412kB [ 153.754076][ T7638] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 153.766667][ T7638] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 153.786057][ T7638] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 153.809589][ T7638] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 153.836883][ T7638] 48118 total pagecache pages [ 153.860206][ T7638] 0 pages in swap cache [ 153.874644][ T7638] Free swap = 124996kB [ 153.878862][ T7638] Total swap = 124996kB [ 153.883041][ T7638] 2097051 pages RAM [ 153.914442][ T2453] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.933832][ T7638] 0 pages HighMem/MovableOnly [ 153.938571][ T7638] 400873 pages reserved [ 153.942750][ T7638] 0 pages cma reserved [ 154.099121][ T2453] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.334377][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 154.690750][ T7676] IPVS: Error connecting to the multicast addr [ 154.698816][ T2453] bond1: left allmulticast mode [ 154.704694][ T2453] bond1: left promiscuous mode [ 154.709872][ T2453] bridge0: port 3(bond1) entered disabled state [ 154.757264][ T2453] bridge_slave_1: left allmulticast mode [ 154.763534][ T2453] bridge_slave_1: left promiscuous mode [ 154.800565][ T2453] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.847350][ T2453] bridge_slave_0: left allmulticast mode [ 154.872304][ T2453] bridge_slave_0: left promiscuous mode [ 154.892754][ T2453] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.929198][ T2453] tipc: Resetting bearer [ 155.146739][ T2453] batman_adv: batadv0: Removing interface: ip6gretap1 [ 155.387487][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 155.512902][ T2453] tipc: Disabling bearer [ 155.704125][ T5125] Bluetooth: hci0: command tx timeout [ 156.414173][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 156.458200][ T2453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.470441][ T2453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.481555][ T2453] bond0 (unregistering): Released all slaves [ 156.499284][ T2453] bond1 (unregistering): Released all slaves [ 156.519675][ T2453] bond2 (unregistering): Released all slaves [ 156.552023][ T7701] tipc: Started in network mode [ 156.557631][ T7701] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 156.571438][ T7701] tipc: Enabled bearer , priority 10 [ 156.656503][ T2453] tipc: Left network mode [ 156.886069][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 156.913456][ T7722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.920807][ T7722] IPv6: NLM_F_CREATE should be set when creating new route [ 156.991306][ T7645] chnl_net:caif_netlink_parms(): no params data found [ 157.279208][ T7745] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.292946][ T7731] team_slave_0: entered promiscuous mode [ 157.299056][ T7731] team_slave_1: entered promiscuous mode [ 157.306412][ T7731] macsec1: entered promiscuous mode [ 157.311842][ T7731] team0: entered promiscuous mode [ 157.320266][ T7731] macsec1: entered allmulticast mode [ 157.326012][ T7731] team0: entered allmulticast mode [ 157.331409][ T7731] team_slave_0: entered allmulticast mode [ 157.345020][ T7731] team_slave_1: entered allmulticast mode [ 157.360707][ T7731] team0: left allmulticast mode [ 157.377994][ T7731] team_slave_0: left allmulticast mode [ 157.383769][ T7731] team_slave_1: left allmulticast mode [ 157.389596][ T7731] team0: left promiscuous mode [ 157.395756][ T7731] team_slave_0: left promiscuous mode [ 157.401308][ T7731] team_slave_1: left promiscuous mode [ 157.465832][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 157.628561][ T7754] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 157.669717][ T2453] hsr_slave_0: left promiscuous mode [ 157.683859][ T5169] tipc: Node number set to 15444650 [ 157.692177][ T2453] hsr_slave_1: left promiscuous mode [ 157.719478][ T2453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.726879][ T7767] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 157.744213][ T2453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.754346][ T2453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.762015][ T2453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.773844][ T5125] Bluetooth: hci0: command tx timeout [ 157.836487][ T2453] veth1_macvtap: left promiscuous mode [ 157.844429][ T2453] veth0_macvtap: left promiscuous mode [ 157.850086][ T2453] veth1_vlan: left promiscuous mode [ 157.857449][ T2453] veth0_vlan: left promiscuous mode [ 158.495059][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 158.518392][ T2453] team0 (unregistering): Port device team_slave_1 removed [ 158.571285][ T2453] team0 (unregistering): Port device team_slave_0 removed [ 158.973809][ T7767] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.045880][ T7645] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.053095][ T7645] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.074233][ T7645] bridge_slave_0: entered allmulticast mode [ 159.082638][ T7645] bridge_slave_0: entered promiscuous mode [ 159.092255][ T7784] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.111456][ T7645] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.130281][ T7645] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.143064][ T7645] bridge_slave_1: entered allmulticast mode [ 159.154105][ T7645] bridge_slave_1: entered promiscuous mode [ 159.270853][ T7788] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 159.332793][ T7645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.355244][ T7645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.469825][ T7645] team0: Port device team_slave_0 added [ 159.488529][ T7645] team0: Port device team_slave_1 added [ 159.534754][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 159.559193][ T2453] IPVS: stop unused estimator thread 0... [ 159.600867][ T7645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.610619][ T7645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.638265][ T7645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.652086][ T7645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.660399][ T7645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.701607][ T7645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.767622][ T7645] hsr_slave_0: entered promiscuous mode [ 159.776789][ T7645] hsr_slave_1: entered promiscuous mode [ 159.783343][ T7645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.792075][ T7645] Cannot create hsr debugfs directory [ 159.858671][ T5125] Bluetooth: hci0: command tx timeout [ 160.558594][ T7645] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 160.566284][ T7818] delete_channel: no stack [ 160.574641][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 160.607374][ T7645] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 160.643983][ T7645] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 160.666089][ T7822] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.698757][ T7645] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 160.865092][ T7825] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 161.087982][ T7645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.141232][ T7645] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.180333][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.187670][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.245639][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.253114][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.377645][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.578520][ T7851] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 161.611658][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 161.624498][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 161.700896][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 161.737816][ T7645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.934230][ T5125] Bluetooth: hci0: command tx timeout [ 162.050996][ T7871] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 162.135194][ T7871] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 162.289971][ T7645] veth0_vlan: entered promiscuous mode [ 162.342771][ T7645] veth1_vlan: entered promiscuous mode [ 162.443360][ T7645] veth0_macvtap: entered promiscuous mode [ 162.499755][ T7645] veth1_macvtap: entered promiscuous mode [ 162.558076][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.577205][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.610197][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.623729][ T7903] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 162.643821][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.664385][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 162.687895][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.713720][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.732023][ T7645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.780710][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.798036][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.808353][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.819707][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.835587][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.856086][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.876118][ T7645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.897966][ T7645] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.910806][ T7645] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.928999][ T7645] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.938724][ T7645] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.133319][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.144076][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.232177][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.248942][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.694411][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 163.895057][ T7933] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.946441][ T7933] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.013275][ T7933] tipc: Resetting bearer [ 164.020856][ T7933] tipc: Resetting bearer [ 164.140685][ T7933] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 164.286397][ T7933] __nla_validate_parse: 1 callbacks suppressed [ 164.286418][ T7933] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 164.494317][ T7954] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 164.914076][ T7973] tipc: Resetting bearer [ 164.948829][ T7979] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.033526][ T7973] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 165.108672][ T7986] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 165.128739][ T7986] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 165.143103][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 165.170566][ T7986] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 165.252447][ T7991] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.278399][ T7993] Bluetooth: MGMT ver 1.22 [ 165.288540][ T7993] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 165.381721][ T7993] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 165.392575][ T7993] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 165.406791][ T7993] bond1: (slave vcan1): making interface the new active one [ 165.415514][ T7993] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 165.658845][ T8006] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 166.044390][ T8017] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.489569][ T8034] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 166.866595][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 167.072348][ T8042] tipc: Resetting bearer [ 167.081232][ T29] audit: type=1804 audit(1718911019.149:8): pid=8047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3117321521/syzkaller.xDBWzR/200/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 167.215951][ T8059] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 167.255235][ T8059] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 167.275233][ T8042] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 167.567432][ T29] audit: type=1804 audit(1718911019.639:9): pid=8076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3622631815/syzkaller.197es3/128/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 167.743067][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 168.008170][ T8089] team0: Port device virt_wifi0 added [ 168.357714][ T8089] team0 (unregistering): Port device team_slave_0 removed [ 168.392023][ T8089] team0 (unregistering): Port device team_slave_1 removed [ 168.484636][ T8089] team0 (unregistering): Port device virt_wifi0 removed [ 168.695555][ T29] audit: type=1804 audit(1718911020.769:10): pid=8111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1161885747/syzkaller.32kTOr/222/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 168.852552][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.895338][ T8119] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.949243][ T8122] Dead loop on virtual device ipvlan1, fix it urgently! [ 169.168865][ T8119] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 169.671853][ T8122] syz-executor.2 (8122) used greatest stack depth: 8344 bytes left [ 170.034450][ T8162] __nla_validate_parse: 1 callbacks suppressed [ 170.034470][ T8162] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 170.548944][ T8182] ip6gretap1: entered allmulticast mode [ 170.857049][ T29] audit: type=1804 audit(1718911022.929:11): pid=8191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2850097239/syzkaller.QlvDXa/159/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 171.025358][ T8201] netem: incorrect ge model size [ 171.032369][ T8201] netem: change failed [ 171.036726][ T8202] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 171.192985][ T8208] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 171.245050][ T8209] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 171.253168][ T8209] nbd: illegal input index -1708589048 [ 171.270841][ T8209] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 171.365024][ T8214] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 171.485219][ T29] audit: type=1804 audit(1718911023.549:12): pid=8224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1161885747/syzkaller.32kTOr/228/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 171.863146][ T8239] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 171.891672][ T8241] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 171.904204][ T8241] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 171.936435][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 172.048850][ T8249] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 172.063488][ T8249] geneve0: entered promiscuous mode [ 172.085768][ T8248] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 172.114767][ T8249] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 172.554281][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 172.570369][ T8268] netlink: 'syz-executor.2': attribute type 18 has an invalid length. [ 172.580134][ T8268] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 172.627380][ T8268] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.637745][ T8268] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.646566][ T8268] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.655476][ T8268] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.705260][ T8268] vxlan0: entered promiscuous mode [ 173.161812][ T8293] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 173.182898][ T8293] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 173.356341][ T8303] Dead loop on virtual device ipvlan1, fix it urgently! [ 173.523235][ T8314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.989941][ T8339] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 174.034444][ T8339] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 174.337912][ T8363] Bluetooth: hci3: invalid length 0, exp 2 for type 25 [ 174.370081][ T8364] Bluetooth: hci3: invalid length 0, exp 2 for type 25 [ 174.375877][ T8367] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 174.774111][ T8382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.472434][ T8418] __nla_validate_parse: 10 callbacks suppressed [ 175.472459][ T8418] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.615932][ T8422] vlan1: entered promiscuous mode [ 175.621515][ T8422] batadv0: entered promiscuous mode [ 175.669834][ T8422] team0: Port device vlan1 added [ 175.684310][ T8426] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.724240][ T8425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.766136][ T8428] openvswitch: netlink: Key type 10250 is out of range max 32 [ 175.852874][ T8429] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.035522][ T8440] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 176.427695][ T8457] ieee802154 phy1 wpan1: encryption failed: -22 [ 176.610940][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 176.621058][ T8469] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.663949][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 176.677314][ T8466] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 176.685762][ T8466] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 176.694214][ T8466] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 176.702462][ T8466] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 176.711127][ T8466] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 177.069764][ T8486] tipc: Invalid UDP bearer configuration [ 177.069845][ T8486] tipc: Enabling of bearer rejected, failed to enable media [ 177.158642][ T29] audit: type=1800 audit(1718911029.229:13): pid=8491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 177.227224][ T29] audit: type=1804 audit(1718911029.229:14): pid=8492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3622631815/syzkaller.197es3/156/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 177.342992][ T8504] ieee802154 phy1 wpan1: encryption failed: -22 [ 177.353726][ T29] audit: type=1804 audit(1718911029.229:15): pid=8492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3622631815/syzkaller.197es3/156/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 177.453106][ T29] audit: type=1804 audit(1718911029.229:16): pid=8492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3622631815/syzkaller.197es3/156/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 177.498428][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 177.526719][ T29] audit: type=1804 audit(1718911029.229:17): pid=8491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3622631815/syzkaller.197es3/156/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 177.569770][ T29] audit: type=1804 audit(1718911029.229:18): pid=8492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3622631815/syzkaller.197es3/156/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 177.598131][ T29] audit: type=1804 audit(1718911029.229:19): pid=8492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3622631815/syzkaller.197es3/156/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 177.634698][ T8524] netlink: 199356 bytes leftover after parsing attributes in process `syz-executor.3'. [ 177.637499][ T29] audit: type=1804 audit(1718911029.229:20): pid=8492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3622631815/syzkaller.197es3/156/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 177.670773][ T29] audit: type=1804 audit(1718911029.229:21): pid=8492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3622631815/syzkaller.197es3/156/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 177.700026][ T29] audit: type=1804 audit(1718911029.229:22): pid=8492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3622631815/syzkaller.197es3/156/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 178.138256][ T8553] validate_nla: 3 callbacks suppressed [ 178.138278][ T8553] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 178.350572][ T8559] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 178.447577][ T8568] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 178.520049][ T8569] Dead loop on virtual device ipvlan1, fix it urgently! [ 179.075543][ T8587] vlan2: entered promiscuous mode [ 179.118502][ T8587] macvtap0: entered promiscuous mode [ 179.150612][ T8587] vlan2: entered allmulticast mode [ 179.180083][ T8587] macvtap0: entered allmulticast mode [ 179.208297][ T8587] veth0_macvtap: entered allmulticast mode [ 179.225304][ T8587] team0: Device vlan2 is up. Set it down before adding it as a team port [ 179.265895][ T8587] macvtap0: left allmulticast mode [ 179.273765][ T8587] veth0_macvtap: left allmulticast mode [ 179.279482][ T8587] macvtap0: left promiscuous mode [ 179.318059][ T8581] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 179.731642][ T8607] tipc: Started in network mode [ 179.736750][ T8607] tipc: Node identity , cluster identity 4711 [ 179.742864][ T8607] tipc: Failed to set node id, please configure manually [ 179.804347][ T8607] tipc: Enabling of bearer rejected, failed to enable media [ 179.839635][ T8609] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 180.044094][ T8617] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 180.288691][ T8630] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 180.404542][ T8638] xt_hashlimit: overflow, try lower: 18446465897267724288/2047 [ 180.486746][ T8642] __nla_validate_parse: 7 callbacks suppressed [ 180.486766][ T8642] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.984051][ T8663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.007864][ T8663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.028604][ T8663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.347039][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.499489][ T8669] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.861313][ T8681] xt_hashlimit: overflow, try lower: 18446465897267724288/2047 [ 182.076869][ T8701] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 182.118273][ T8700] xt_TCPMSS: Only works on TCP SYN packets [ 182.216887][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 182.272710][ T8709] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 182.560262][ T8715] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 182.712013][ T8720] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.017609][ T8731] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 183.034705][ T8731] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 183.052744][ T8731] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 183.079788][ T8731] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 183.118373][ T8731] tun0: tun_chr_ioctl cmd 1074025677 [ 183.138996][ T8731] tun0: linktype set to 768 [ 183.487288][ T8754] xt_hashlimit: overflow, try lower: 18446465897267724288/2047 [ 183.523339][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.693906][ T5125] Bluetooth: hci0: command 0x0401 tx timeout [ 183.884281][ T8772] pim6reg1: entered promiscuous mode [ 183.893859][ T8772] pim6reg1: entered allmulticast mode [ 184.030082][ T8788] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.060566][ T8788] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.365152][ T8806] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 184.395078][ T8806] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 184.890296][ T8829] pim6reg1: entered promiscuous mode [ 184.912631][ T8829] pim6reg1: entered allmulticast mode [ 185.904391][ T8878] __nla_validate_parse: 3 callbacks suppressed [ 185.904415][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.148237][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.395985][ T8904] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.974742][ T5125] Bluetooth: hci0: command 0x0401 tx timeout [ 187.140352][ T8941] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 187.212480][ T8941] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 187.251208][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 187.276585][ T8941] syzkaller1: entered promiscuous mode [ 187.284036][ T8941] syzkaller1: entered allmulticast mode [ 187.593433][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 187.593454][ T29] audit: type=1804 audit(1718911039.659:59): pid=8953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3117321521/syzkaller.xDBWzR/262/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 187.828859][ T8959] sctp: [Deprecated]: syz-executor.1 (pid 8959) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.828859][ T8959] Use struct sctp_sack_info instead [ 188.736208][ T9004] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.747180][ T8999] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 188.758157][ T8999] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 188.773282][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.053852][ T5125] Bluetooth: hci0: command tx timeout [ 189.133409][ T9020] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 189.198251][ T9022] geneve2: entered promiscuous mode [ 189.213052][ T9022] geneve2: entered allmulticast mode [ 189.587392][ T9041] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 190.068592][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 190.082323][ T9050] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 190.187068][ T9043] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 190.257056][ T9079] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 190.280574][ T9079] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 190.432544][ T9083] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 190.572049][ T9087] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 190.966630][ T9101] __nla_validate_parse: 4 callbacks suppressed [ 190.966654][ T9101] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 191.134376][ T5125] Bluetooth: hci0: command tx timeout [ 191.282821][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 191.384463][ T9118] Dead loop on virtual device ipvlan1, fix it urgently! [ 191.473538][ T9117] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 192.049672][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 192.056920][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 192.063694][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 192.106094][ T9118] syz-executor.2 (9118) used greatest stack depth: 7920 bytes left [ 192.197538][ T9145] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 192.334957][ T9150] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 192.345269][ T9141] team0: Port device wlan1 added [ 192.380752][ T9140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.548080][ T9138] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 192.560508][ T9138] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 192.579209][ T9138] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 192.680370][ T9164] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 192.820302][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802bd7a800: rx timeout, send abort [ 193.238517][ T9179] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.249174][ T9179] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.259149][ T9179] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.268527][ T9179] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.290803][ T9179] vxlan0: entered promiscuous mode [ 193.311155][ T9179] vxlan0: entered allmulticast mode [ 193.330418][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802bd7a800: abort rx timeout. Force session deactivation [ 193.372904][ T9179] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.383457][ T9179] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.393075][ T9179] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.402261][ T9179] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.006305][ T9232] Dead loop on virtual device ipvlan1, fix it urgently! [ 194.065719][ T9232] Dead loop on virtual device ipvlan1, fix it urgently! [ 194.122561][ T9230] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 194.196555][ T9232] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 194.219285][ T9235] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 194.259246][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.275364][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.452156][ T9252] sit0: entered allmulticast mode [ 194.523742][ T29] audit: type=1804 audit(1718911046.569:60): pid=9249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3117321521/syzkaller.xDBWzR/274/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 194.546406][ T9256] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 194.559889][ T9256] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.576878][ T9252] sit0: entered promiscuous mode [ 194.663059][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.761635][ T9259] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 194.929345][ T9271] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 195.516790][ T9302] validate_nla: 1 callbacks suppressed [ 195.516813][ T9302] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 195.556003][ T9300] openvswitch: netlink: Missing key (keys=40, expected=80) [ 195.666226][ T9308] sit0: entered allmulticast mode [ 195.738169][ T9316] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 195.889366][ T9308] sit0: entered promiscuous mode [ 196.310222][ T9342] __nla_validate_parse: 1 callbacks suppressed [ 196.310245][ T9342] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 196.574013][ T5128] Bluetooth: hci3: command 0x0c1a tx timeout [ 196.579810][ T5125] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 196.735617][ T5128] Bluetooth: hci4: command 0x0405 tx timeout [ 196.736389][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 196.928739][ T45] Dead loop on virtual device ipvlan1, fix it urgently! [ 197.042824][ T9359] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 197.327071][ T9366] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 197.409078][ T9381] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 197.616176][ T5167] Dead loop on virtual device ipvlan1, fix it urgently! [ 197.782510][ T9395] xt_CT: No such helper "syz1" [ 197.898540][ T9404] xt_l2tp: v2 doesn't support IP mode [ 197.940285][ T9401] dummy0: entered promiscuous mode [ 197.946166][ T9401] vlan2: entered promiscuous mode [ 197.962394][ T9401] dummy0: left promiscuous mode [ 198.083185][ T9408] syzkaller0: entered allmulticast mode [ 198.125020][ T9408] syzkaller0 (unregistering): left allmulticast mode [ 198.150569][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 198.288913][ T9418] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 198.653975][ T5121] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.724526][ T9437] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 198.918844][ T9443] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 198.928055][ T9443] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 198.938793][ T9443] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 199.139987][ T9451] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 199.225074][ T9454] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.537493][ T9461] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.866245][ T9468] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.4'. [ 200.450516][ T9495] team0: Port device team_slave_0 removed [ 200.641541][ T9505] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 200.707115][ T9505] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 200.817149][ T9514] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 200.841638][ T29] audit: type=1804 audit(1718911052.909:61): pid=9518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3622631815/syzkaller.197es3/216/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 200.916367][ T29] audit: type=1804 audit(1718911052.919:62): pid=9518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3622631815/syzkaller.197es3/216/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 200.951641][ T29] audit: type=1804 audit(1718911052.919:63): pid=9518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3622631815/syzkaller.197es3/216/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 201.066764][ T29] audit: type=1804 audit(1718911053.139:64): pid=9528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3622631815/syzkaller.197es3/216/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 201.104372][ T29] audit: type=1804 audit(1718911053.139:65): pid=9528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3622631815/syzkaller.197es3/216/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 201.814588][ T9548] team0: Port device team_slave_0 removed [ 201.969220][ T9562] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 202.006874][ T9564] __nla_validate_parse: 5 callbacks suppressed [ 202.006898][ T9564] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 202.150840][ T9570] ɶƣ0GC¦: entered promiscuous mode [ 202.318563][ T9578] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 202.466539][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 202.530425][ T9588] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.645516][ T9588] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.740638][ T9588] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.845940][ T9588] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.018649][ T9588] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.045667][ T9588] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.065704][ T9588] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.106437][ T9588] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.321591][ T9605] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.566390][ T9623] netlink: 67 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.592425][ T9623] IPv6: NLM_F_CREATE should be specified when creating new route [ 203.602644][ T9623] IPv6: Can't replace route, no match found [ 203.782848][ T9633] team0: Port device team_slave_0 removed [ 204.357476][ T9672] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 204.367368][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 204.542364][ T9683] hsr0: entered promiscuous mode [ 204.679123][ T9689] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 204.899856][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 204.910940][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 205.681495][ T9734] sch_tbf: burst 7 is lower than device lo mtu (18) ! [ 205.925987][ T9741] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 206.136320][ T9744] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 206.334065][ T5125] Bluetooth: hci1: command 0x0401 tx timeout [ 206.394939][ T9765] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 206.414445][ T9765] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 206.462111][ T9765] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 206.615118][ T9774] sch_tbf: burst 7 is lower than device lo mtu (18) ! [ 206.658116][ T9778] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 207.340917][ T9805] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 207.467993][ T9811] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 207.489469][ T9811] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.598866][ T9815] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 207.635674][ T9815] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 207.726207][ T9817] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 207.744473][ T9822] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.840112][ T9815] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 208.005001][ T9830] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 208.197290][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 208.340966][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 208.519066][ T9857] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 208.651980][ T9861] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 208.703450][ T9861] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 208.833038][ T9871] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 208.855768][ T9861] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 208.873867][ T9874] syzkaller1: entered promiscuous mode [ 208.880198][ T9874] syzkaller1: entered allmulticast mode [ 209.473158][ T9895] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 209.648257][ T9901] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.762254][ T9907] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 210.041330][ T9913] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 210.549236][ T9940] sch_tbf: burst 7 is lower than device lo mtu (18) ! [ 210.565834][ T9942] syzkaller1: entered promiscuous mode [ 210.571402][ T9942] syzkaller1: entered allmulticast mode [ 211.042233][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.078888][ T9963] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 211.751034][ T9987] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 212.481775][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.524044][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.535577][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.556770][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.581909][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.591607][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.604697][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.612699][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.726886][T10032] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 212.868370][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.895362][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.029632][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.060614][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.102339][T10048] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 213.145448][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.163104][T10048] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 213.197999][T10048] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.206899][T10048] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.216047][T10048] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.224340][T10048] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.237172][T10048] vxlan0: entered promiscuous mode [ 213.277556][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.299611][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.318856][T10061] x_tables: duplicate underflow at hook 2 [ 213.489702][T10069] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 213.539731][T10069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.558128][T10069] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 213.630775][T10023] chnl_net:caif_netlink_parms(): no params data found [ 213.850840][ T12] bridge_slave_1: left allmulticast mode [ 213.861849][ T12] bridge_slave_1: left promiscuous mode [ 213.878011][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.920949][ T12] bridge_slave_0: left allmulticast mode [ 213.937311][ T12] bridge_slave_0: left promiscuous mode [ 213.947359][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.975115][ T12] tipc: Resetting bearer [ 214.325830][ T12] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 214.367836][ T12] tipc: Disabling bearer [ 214.710512][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.722456][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.733879][ T12] bond0 (unregistering): Released all slaves [ 214.744093][ T5125] Bluetooth: hci2: command tx timeout [ 214.859721][T10103] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 215.005440][ T12] tipc: Left network mode [ 215.040853][T10023] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.076967][T10023] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.101405][T10023] bridge_slave_0: entered allmulticast mode [ 215.109914][T10023] bridge_slave_0: entered promiscuous mode [ 215.272663][T10023] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.291590][T10023] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.308761][T10023] bridge_slave_1: entered allmulticast mode [ 215.320208][T10023] bridge_slave_1: entered promiscuous mode [ 215.334982][T10124] hsr0: entered promiscuous mode [ 215.626060][T10146] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 215.684540][T10023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.709969][T10023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.857224][T10153] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 215.916857][T10023] team0: Port device team_slave_0 added [ 215.980129][ T12] hsr_slave_0: left promiscuous mode [ 215.988287][ T12] hsr_slave_1: left promiscuous mode [ 216.018809][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.033412][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.042072][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.054007][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.096421][ T12] batadv0: left promiscuous mode [ 216.102523][ T12] veth1_macvtap: left promiscuous mode [ 216.108403][ T12] veth0_macvtap: left promiscuous mode [ 216.114924][ T12] veth1_vlan: left promiscuous mode [ 216.120344][ T12] veth0_vlan: left promiscuous mode [ 216.418472][ T12] team0 (unregistering): Port device vlan1 removed [ 216.828907][ T5125] Bluetooth: hci2: command tx timeout [ 216.980573][ T12] team0 (unregistering): Port device team_slave_1 removed [ 217.447388][T10023] team0: Port device team_slave_1 added [ 217.554241][T10023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.561239][T10023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.592577][T10023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.605901][T10023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.612898][T10023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.653970][T10023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.700729][T10191] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 217.998554][T10023] hsr_slave_0: entered promiscuous mode [ 218.028480][T10023] hsr_slave_1: entered promiscuous mode [ 218.040012][T10215] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 218.081068][T10023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.104158][T10023] Cannot create hsr debugfs directory [ 218.114427][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 218.141492][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 218.702706][T10248] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 218.765730][T10254] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.1'. [ 218.777381][T10254] openvswitch: netlink: Flow actions attr not present in new flow. [ 218.879334][T10258] pimreg12: entered allmulticast mode [ 218.893978][ T5125] Bluetooth: hci2: command tx timeout [ 219.091591][T10270] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 219.135500][T10023] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 219.159425][T10023] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.298605][T10023] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 220.983832][ T5125] Bluetooth: hci2: command tx timeout [ 221.090619][T10023] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 221.126258][T10298] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 221.502145][T10023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.588708][T10320] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 221.600903][T10023] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.605139][T10319] trusted_key: syz-executor.0 sent an empty control message without MSG_MORE. [ 221.662109][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.669499][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.744733][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.751998][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.074695][T10342] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 222.320935][T10355] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 222.348869][T10355] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 222.362859][T10023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.432954][T10361] vxcan0: entered allmulticast mode [ 222.463079][T10363] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 222.491596][T10361] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 222.605451][T10023] veth0_vlan: entered promiscuous mode [ 222.651381][T10023] veth1_vlan: entered promiscuous mode [ 222.842764][T10023] veth0_macvtap: entered promiscuous mode [ 222.877801][T10023] veth1_macvtap: entered promiscuous mode [ 222.966745][T10023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.991007][T10023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.012239][T10023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.025732][T10391] syz-executor.0[10391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.025997][T10391] syz-executor.0[10391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.032063][T10023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.061475][T10023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.073187][T10023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.087839][T10023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.122818][T10023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.142313][T10023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.153691][T10023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.164717][T10023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.214051][T10023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.231669][T10023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.246251][T10023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.291416][T10023] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.322118][T10023] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.355867][T10023] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.378415][T10023] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.412075][T10408] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 223.566422][T10413] hsr0: entered promiscuous mode [ 223.695927][T10418] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 223.728073][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.760684][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.870567][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.894807][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.042857][T10433] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 224.075707][T10435] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 224.296089][T10445] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 224.393468][T10450] hsr0: entered promiscuous mode [ 224.576769][T10455] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 224.657773][T10463] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 224.729122][T10465] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 224.789156][T10465] cannot load conntrack support for proto=3 [ 224.981276][T10475] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 225.200592][T10487] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 225.263534][T10486] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 225.381057][T10492] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 225.424569][T10492] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 225.438449][T10492] bond2: (slave vcan1): making interface the new active one [ 225.448164][T10492] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 225.459627][T10498] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 225.460593][ T29] audit: type=1800 audit(1718911077.529:66): pid=10502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 225.508425][ T29] audit: type=1804 audit(1718911077.569:67): pid=10502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3622631815/syzkaller.197es3/290/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 225.746095][T10509] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 225.782195][T10509] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 225.896549][T10522] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 225.916534][T10522] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 226.000426][T10524] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 226.062889][ T29] audit: type=1800 audit(1718911078.129:68): pid=10531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 226.139758][ T29] audit: type=1804 audit(1718911078.129:69): pid=10531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3117321521/syzkaller.xDBWzR/373/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 226.652273][ T29] audit: type=1800 audit(1718911078.719:70): pid=10567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 226.693072][T10570] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 226.706360][ T29] audit: type=1804 audit(1718911078.779:71): pid=10567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3117321521/syzkaller.xDBWzR/375/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 226.763214][ T29] audit: type=1804 audit(1718911078.779:72): pid=10567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3117321521/syzkaller.xDBWzR/375/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 226.804865][ T29] audit: type=1804 audit(1718911078.779:73): pid=10567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3117321521/syzkaller.xDBWzR/375/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 226.834897][ T29] audit: type=1804 audit(1718911078.889:74): pid=10573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3117321521/syzkaller.xDBWzR/375/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 226.861238][ T29] audit: type=1804 audit(1718911078.889:75): pid=10573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3117321521/syzkaller.xDBWzR/375/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 227.078916][T10583] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 227.096821][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 227.215541][T10583] bond2: entered promiscuous mode [ 227.248823][T10589] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 227.272299][T10591] bond0: (slave bond_slave_0): Releasing backup interface [ 227.379170][T10591] bond2: (slave bond_slave_0): making interface the new active one [ 227.389270][T10591] bond_slave_0: entered promiscuous mode [ 227.406501][T10591] bond2: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.416907][T10595] tap0: tun_chr_ioctl cmd 2147767511 [ 227.915450][T10635] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 228.306484][T10649] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 228.467421][T10649] bond3: entered promiscuous mode [ 228.532730][T10651] bond2: (slave bond_slave_0): Releasing active interface [ 228.564254][T10651] bond_slave_0: left promiscuous mode [ 228.635667][T10651] bond3: (slave bond_slave_0): making interface the new active one [ 228.659926][T10651] bond_slave_0: entered promiscuous mode [ 228.686782][T10651] bond3: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.715786][T10655] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 228.939023][T10665] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 228.964565][T10667] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 229.059153][T10667] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 229.104613][T10667] macsec1: entered promiscuous mode [ 229.125389][T10667] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 229.196747][T10679] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.0'. [ 229.224561][T10678] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.0'. [ 229.302808][T10677] wg2: entered promiscuous mode [ 229.321480][T10677] wg2: entered allmulticast mode [ 229.358787][T10678] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 229.788614][T10702] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 230.009414][T10707] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 230.030766][T10708] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 230.046291][T10708] bond0: (slave bond_slave_0): Releasing backup interface [ 230.758956][T10732] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 231.424057][T10737] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 231.600716][T10743] hsr0: entered promiscuous mode [ 231.610691][T10741] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 231.875116][T10755] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 231.908540][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 231.908560][ T29] audit: type=1800 audit(1718911083.979:80): pid=10755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1944 res=0 errno=0 [ 232.092589][T10764] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 232.110662][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 232.548380][T10768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.896918][T10778] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 233.109872][T10783] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 233.141429][T10788] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 233.405690][T10797] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 234.060840][T10823] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 234.270146][T10831] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 234.516001][T10846] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 234.719156][T10850] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 235.093383][T10873] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 235.246102][T10881] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 235.357232][T10881] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 235.380762][T10881] macsec1: entered promiscuous mode [ 235.434041][T10881] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 235.671334][T10901] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 235.725208][T10902] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 235.800205][T10907] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 236.528639][T10938] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.3'. [ 236.600825][T10939] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 236.691993][T10952] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. [ 236.726139][T10954] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. [ 237.263481][T11005] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 237.281968][T11005] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 237.290739][T11005] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 237.431046][T11011] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.494944][T11013] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 237.754758][T11020] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 238.286947][T11040] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 238.313879][T11040] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.321620][T11040] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.328881][T11040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.832384][T11059] vlan2: entered promiscuous mode [ 238.844327][T11059] dummy0: entered promiscuous mode [ 238.876262][T11059] team0: Port device vlan2 added [ 239.021739][T11067] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.357951][T11115] __nla_validate_parse: 5 callbacks suppressed [ 240.357976][T11115] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 241.744909][T11149] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 242.199114][T11154] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 242.814100][ T5121] Bluetooth: hci1: command 0x0401 tx timeout [ 242.820373][T11171] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 243.494738][T11187] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 243.707515][T11191] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.350083][ T29] audit: type=1804 audit(1718911096.419:81): pid=11205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1161885747/syzkaller.32kTOr/417/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 245.230523][T11224] sch_tbf: burst 7 is lower than device lo mtu (18) ! [ 245.485419][T11228] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 245.691447][T11236] ip6gretap0: entered promiscuous mode [ 245.744144][T11236] batadv_slave_0: entered promiscuous mode [ 245.984355][T11239] bridge0: port 3(vlan2) entered blocking state [ 245.990797][T11239] bridge0: port 3(vlan2) entered disabled state [ 246.034234][T11239] vlan2: entered allmulticast mode [ 246.065233][T11239] vlan2: left allmulticast mode [ 246.075971][T11242] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 246.253282][T11244] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 246.274171][T11244] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 246.282393][T11244] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 246.378707][T11244] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 246.851643][T11256] sch_tbf: burst 7 is lower than device lo mtu (18) ! [ 246.915350][T11259] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 247.254582][T11271] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 247.448672][T11276] bridge0: port 3(vlan2) entered blocking state [ 247.463440][T11276] bridge0: port 3(vlan2) entered disabled state [ 247.478427][T11276] vlan2: entered allmulticast mode [ 247.497566][T11276] vlan2: left allmulticast mode [ 247.520008][T11277] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 247.724196][T11279] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 248.064210][T11281] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 248.074434][T11285] tipc: Enabling of bearer rejected, failed to enable media [ 248.094042][T11281] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 248.133701][T11281] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 248.208695][T11281] nlmon0: Master is either lo or non-ether device [ 248.789750][T11299] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 248.978034][T11304] Dead loop on virtual device ipvlan1, fix it urgently! [ 249.291653][T11317] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 249.583717][T11326] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.088879][T11341] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 250.170687][T11341] bridge: RTM_NEWNEIGH bridge3 with NTF_USE is not supported [ 250.237104][T11347] openvswitch: netlink: nsh attr 2048 is out of range max 3 [ 250.458891][T11353] netlink: 144316 bytes leftover after parsing attributes in process `syz-executor.4'. [ 250.633410][T11350] tipc: Started in network mode [ 250.651794][T11350] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 250.693532][T11350] tipc: Enabling of bearer rejected, failed to enable media [ 250.780783][T11371] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.156233][T11389] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 251.285738][T11397] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 251.350929][T11399] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.369909][T11399] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.405384][T11398] ɶƣ0GC¦: entered promiscuous mode [ 251.588341][T11409] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 252.221154][T11423] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 252.478562][T11430] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 252.565048][T11430] bond3: entered promiscuous mode [ 252.585014][T11437] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 252.873856][T11447] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 252.913883][T11447] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 252.928204][T11454] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 253.058371][T11460] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 253.223234][T11467] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 253.328116][T11473] ieee802154 phy1 wpan1: encryption failed: -22 [ 253.377260][T11476] tc_dump_action: action bad kind [ 253.479629][T11486] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 254.333756][T11527] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 255.532027][T11587] tipc: Started in network mode [ 255.542418][T11587] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 255.561317][T11587] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 255.572414][T11587] tipc: Enabled bearer , priority 10 [ 255.812045][T11598] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 256.097631][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.275907][T11618] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 256.353485][T11622] __nla_validate_parse: 9 callbacks suppressed [ 256.353505][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.418261][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.548210][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.564084][ T45] tipc: Node number set to 1 [ 256.570951][T11633] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.770288][T11640] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 256.796779][T11640] vlan2: entered promiscuous mode [ 257.123375][T11659] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.395725][T11680] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 257.519937][T11686] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 257.704993][T11694] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 257.737311][T11694] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 258.015029][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 258.464890][T11735] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 258.814653][ T5125] Bluetooth: hci0: command tx timeout [ 259.042929][T11753] macvtap0: entered promiscuous mode [ 259.054468][T11753] team0: entered promiscuous mode [ 259.060568][T11753] team_slave_0: entered promiscuous mode [ 259.067247][T11753] team_slave_1: entered promiscuous mode [ 259.073276][T11753] macvtap0: entered allmulticast mode [ 259.082086][T11753] team0: entered allmulticast mode [ 259.097340][T11753] team_slave_0: entered allmulticast mode [ 259.107465][T11753] team_slave_1: entered allmulticast mode [ 259.118820][T11753] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 259.197629][T11751] team0: left allmulticast mode [ 259.202556][T11751] team_slave_0: left allmulticast mode [ 259.223019][T11751] team_slave_1: left allmulticast mode [ 259.230654][T11751] team0: left promiscuous mode [ 259.238073][T11751] team_slave_0: left promiscuous mode [ 259.244578][T11751] team_slave_1: left promiscuous mode [ 259.250785][T11751] macvtap0: left promiscuous mode [ 259.258024][T11751] macvtap0: left allmulticast mode [ 259.652843][T11771] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 260.320123][ T5121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.332279][ T5121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.342764][ T5121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.359372][ T5121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.369560][ T5121] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 260.377293][ T5121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.775271][T11793] chnl_net:caif_netlink_parms(): no params data found [ 261.055955][T11793] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.063330][T11793] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.071495][T11793] bridge_slave_0: entered allmulticast mode [ 261.086659][T11793] bridge_slave_0: entered promiscuous mode [ 261.104619][T11793] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.111885][T11793] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.128464][T11793] bridge_slave_1: entered allmulticast mode [ 261.142056][T11793] bridge_slave_1: entered promiscuous mode [ 261.239190][T11793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.265822][T11793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.372038][T11793] team0: Port device team_slave_0 added [ 261.412678][T11793] team0: Port device team_slave_1 added [ 261.545556][T11793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.569539][T11793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.603383][T11793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.617754][T11793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.625409][T11793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.653160][T11793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.665275][T11833] __nla_validate_parse: 9 callbacks suppressed [ 261.665293][T11833] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. [ 261.704476][T11833] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 261.836539][T11793] hsr_slave_0: entered promiscuous mode [ 261.844223][T11793] hsr_slave_1: entered promiscuous mode [ 261.858229][T11793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.874242][T11793] Cannot create hsr debugfs directory [ 261.952546][T11840] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 262.192594][T11793] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.227686][T11793] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.368984][T11793] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.399189][T11793] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.414260][ T5121] Bluetooth: hci0: command tx timeout [ 262.488513][T11793] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.512552][T11793] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.578686][T11793] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.600326][T11793] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.631268][T11853] bond0: entered promiscuous mode [ 262.644189][T11853] bond_slave_0: entered promiscuous mode [ 262.650095][T11853] bond_slave_1: entered promiscuous mode [ 262.668707][T11853] batadv0: entered promiscuous mode [ 262.683893][T11853] bond0: entered allmulticast mode [ 262.691618][T11853] bond_slave_0: entered allmulticast mode [ 262.698158][T11853] bond_slave_1: entered allmulticast mode [ 262.704178][T11853] batadv0: entered allmulticast mode [ 262.711935][T11853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.016763][T11793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 263.082027][T11793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 263.161290][T11793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 263.199937][T11793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 263.285112][T11865] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.0'. [ 263.314276][T11865] af_packet: tpacket_rcv: packet too big, clamped from 212980 to 3952. macoff=96 [ 263.520814][T11793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.543849][ T5166] IPVS: starting estimator thread 0... [ 263.610552][T11793] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.636746][T11872] IPVS: using max 16 ests per chain, 38400 per kthread [ 263.657082][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.664378][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.727475][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.734769][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.936027][T11886] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 264.032273][T11891] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 264.322675][T11793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.494775][ T5121] Bluetooth: hci0: command tx timeout [ 264.667024][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.730266][T11905] macvtap1: entered promiscuous mode [ 264.750910][T11905] macvtap1: entered allmulticast mode [ 264.769794][T11905] dummy0: entered allmulticast mode [ 264.790811][T11908] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.805599][T11920] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 264.822545][T11920] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 264.860644][T11908] dummy0: left allmulticast mode [ 264.881192][T11908] macvtap1: left promiscuous mode [ 264.914052][T11908] macvtap1: left allmulticast mode [ 265.148698][T11793] veth0_vlan: entered promiscuous mode [ 265.206458][T11793] veth1_vlan: entered promiscuous mode [ 265.275909][T11931] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 265.361465][T11937] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 265.401656][T11793] veth0_macvtap: entered promiscuous mode [ 265.464228][T11793] veth1_macvtap: entered promiscuous mode [ 265.537625][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.565786][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.593349][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.624340][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.663431][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.686616][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.712616][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.761533][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.786608][T11793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.826977][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.880226][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.910766][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.931884][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.955654][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.978581][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.999036][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.021477][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.046417][T11793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.077467][T11793] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.100370][T11793] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.119783][T11793] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.158820][T11793] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.272316][T11970] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 266.375223][T11975] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 266.519952][T11977] netlink: 54 bytes leftover after parsing attributes in process `syz-executor.0'. [ 266.526336][T10976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.538870][T10976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.574333][ T5121] Bluetooth: hci0: command tx timeout [ 266.627079][T10959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.664019][T10959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.764624][T11985] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 267.466473][T12005] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 267.573366][T12010] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 267.632291][T11999] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 267.782836][T12015] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 268.763905][T12041] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 269.069392][T10968] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.627956][T12074] sctp: [Deprecated]: syz-executor.1 (pid 12074) Use of int in max_burst socket option deprecated. [ 269.627956][T12074] Use struct sctp_assoc_value instead [ 269.740918][ T5125] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.752445][ T5125] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.761673][ T5125] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.771592][ T5125] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.780389][ T5125] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 269.791394][ T5125] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.855211][ T5121] Bluetooth: hci0: command tx timeout [ 273.933771][ T5121] Bluetooth: hci0: command tx timeout [ 276.013903][ T5121] Bluetooth: hci0: command tx timeout [ 278.094856][ T5121] Bluetooth: hci0: command tx timeout [ 299.513009][ T5125] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.533980][ T5125] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.595189][ T5125] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.608338][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.624467][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 299.633956][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.643062][ T5126] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 299.664819][ T5121] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 299.673430][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 299.698094][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 299.734093][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 299.741638][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.939820][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.950836][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.959356][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 299.969332][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 299.984666][ T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 299.992085][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.142990][ T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 300.157122][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 300.165846][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 300.174541][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 300.192985][ T53] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 300.200931][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 301.693729][ T53] Bluetooth: hci5: command tx timeout [ 301.773921][ T53] Bluetooth: hci6: command tx timeout [ 302.013821][ T53] Bluetooth: hci7: command tx timeout [ 302.255494][ T53] Bluetooth: hci8: command tx timeout [ 303.783995][ T53] Bluetooth: hci5: command tx timeout [ 303.854273][ T53] Bluetooth: hci6: command tx timeout [ 304.094946][ T5125] Bluetooth: hci7: command tx timeout [ 304.334400][ T53] Bluetooth: hci8: command tx timeout [ 305.853685][ T53] Bluetooth: hci5: command tx timeout [ 305.933704][ T53] Bluetooth: hci6: command tx timeout [ 306.180068][ T53] Bluetooth: hci7: command tx timeout [ 306.414275][ T53] Bluetooth: hci8: command tx timeout [ 307.933881][ T5125] Bluetooth: hci5: command tx timeout [ 308.024182][ T53] Bluetooth: hci6: command tx timeout [ 308.254823][ T53] Bluetooth: hci7: command tx timeout [ 308.494017][ T53] Bluetooth: hci8: command tx timeout [ 317.537484][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.641583][ T5125] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 334.652309][ T5125] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 334.661510][ T5125] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 334.674787][ T5125] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 334.682624][ T5125] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 334.690166][ T5125] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 336.734300][ T5125] Bluetooth: hci9: command tx timeout [ 338.823808][ T5125] Bluetooth: hci9: command tx timeout [ 340.899170][ T5125] Bluetooth: hci9: command tx timeout [ 342.973696][ T5125] Bluetooth: hci9: command tx timeout [ 364.652509][ T5121] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 364.677076][ T5121] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 364.693784][ T5126] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 364.702821][ T5128] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 364.723914][ T5128] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 364.745296][ T5126] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 364.753306][ T5126] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 364.763750][ T5126] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 364.773240][ T5126] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 364.786063][ T5126] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 364.794648][ T5128] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 364.802913][ T5126] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 365.050937][ T5125] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 365.067396][ T5125] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 365.077380][ T5125] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 365.089820][ T5125] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 365.099939][ T5125] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 365.114058][ T5125] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 365.269287][ T5125] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 365.281173][ T5125] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 365.294209][ T5125] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 365.308686][ T5125] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 365.317290][ T5125] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 365.325014][ T5125] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 365.701204][ T53] Bluetooth: hci2: command 0x0405 tx timeout [ 366.894639][ T5125] Bluetooth: hci10: command tx timeout [ 366.912626][ T5125] Bluetooth: hci11: command tx timeout [ 367.213969][ T5125] Bluetooth: hci12: command tx timeout [ 367.374378][ T5125] Bluetooth: hci13: command tx timeout [ 368.973790][ T5125] Bluetooth: hci11: command tx timeout [ 368.974192][ T53] Bluetooth: hci10: command tx timeout [ 369.293801][ T53] Bluetooth: hci12: command tx timeout [ 369.471811][ T53] Bluetooth: hci13: command tx timeout [ 371.054044][ T5125] Bluetooth: hci10: command tx timeout [ 371.059662][ T53] Bluetooth: hci11: command tx timeout [ 371.373613][ T53] Bluetooth: hci12: command tx timeout [ 371.533825][ T53] Bluetooth: hci13: command tx timeout [ 373.139207][ T53] Bluetooth: hci11: command tx timeout [ 373.139228][ T5125] Bluetooth: hci10: command tx timeout [ 373.453978][ T53] Bluetooth: hci12: command tx timeout [ 373.624070][ T53] Bluetooth: hci13: command tx timeout [ 378.978351][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.413718][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 399.736615][ T53] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 399.747111][ T53] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 399.755876][ T53] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 399.775259][ T53] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 399.788812][ T53] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 399.804066][ T53] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 401.854368][ T5125] Bluetooth: hci14: command tx timeout [ 403.934127][ T5125] Bluetooth: hci14: command tx timeout [ 406.015487][ T5125] Bluetooth: hci14: command tx timeout [ 408.094232][ T5125] Bluetooth: hci14: command tx timeout [ 417.373775][ T30] INFO: task kworker/u8:15:10968 blocked for more than 143 seconds. [ 417.381839][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 417.389838][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.398569][ T30] task:kworker/u8:15 state:D stack:24184 pid:10968 tgid:10968 ppid:2 flags:0x00004000 [ 417.411754][ T30] Workqueue: netns cleanup_net [ 417.416950][ T30] Call Trace: [ 417.420254][ T30] 2024/06/20 19:21:09 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 417.423217][ T30] __schedule+0x17e8/0x4a20 [ 417.427836][ T30] ? __pfx___schedule+0x10/0x10 [ 417.432728][ T30] ? __pfx_lock_release+0x10/0x10 [ 417.473645][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 417.479200][ T30] ? kthread_data+0x52/0xd0 [ 417.493589][ T30] ? schedule+0x90/0x320 [ 417.497897][ T30] ? wq_worker_sleeping+0x66/0x240 [ 417.515969][ T30] ? schedule+0x90/0x320 [ 417.520285][ T30] schedule+0x14b/0x320 [ 417.533661][ T30] schedule_preempt_disabled+0x13/0x30 [ 417.539188][ T30] __mutex_lock+0x6a4/0xd70 [ 417.553561][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 417.558828][ T30] ? __mutex_lock+0x527/0xd70 [ 417.573848][ T30] ? nsim_destroy+0x71/0x5c0 [ 417.578512][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 417.593551][ T30] ? __pfx_mntput_no_expire+0x10/0x10 [ 417.598990][ T30] ? _raw_spin_unlock+0x28/0x50 [ 417.613625][ T30] ? simple_release_fs+0x9c/0xd0 [ 417.618641][ T30] nsim_destroy+0x71/0x5c0 [ 417.623109][ T30] __nsim_dev_port_del+0x14b/0x1b0 [ 417.653561][ T30] nsim_dev_reload_destroy+0x28a/0x490 [ 417.659100][ T30] nsim_dev_reload_down+0x98/0xd0 [ 417.673868][ T30] devlink_reload+0x18b/0x870 [ 417.678612][ T30] ? __pfx_devlink_reload+0x10/0x10 [ 417.694381][ T30] devlink_pernet_pre_exit+0x1f3/0x440 [ 417.699928][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 417.713572][ T30] ? class_remove_file_ns+0x121/0x160 [ 417.719025][ T30] cleanup_net+0x615/0xcc0 [ 417.733859][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 417.738876][ T30] ? process_scheduled_works+0x945/0x1830 [ 417.763546][ T30] process_scheduled_works+0xa2c/0x1830 [ 417.769206][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 417.783594][ T30] ? assign_work+0x364/0x3d0 [ 417.788256][ T30] worker_thread+0x86d/0xd70 [ 417.792986][ T30] ? __kthread_parkme+0x169/0x1d0 [ 417.813939][ T30] ? __pfx_worker_thread+0x10/0x10 [ 417.819122][ T30] kthread+0x2f0/0x390 [ 417.823351][ T30] ? __pfx_worker_thread+0x10/0x10 [ 417.843929][ T30] ? __pfx_kthread+0x10/0x10 [ 417.848597][ T30] ret_from_fork+0x4b/0x80 [ 417.853141][ T30] ? __pfx_kthread+0x10/0x10 [ 417.873886][ T30] ret_from_fork_asm+0x1a/0x30 [ 417.878748][ T30] [ 417.893689][ T30] INFO: task kworker/u8:23:10980 blocked for more than 143 seconds. [ 417.901730][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 417.923687][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.932417][ T30] task:kworker/u8:23 state:D stack:24592 pid:10980 tgid:10980 ppid:2 flags:0x00004000 [ 417.966143][ T30] Workqueue: ipv6_addrconf addrconf_verify_work [ 417.972466][ T30] Call Trace: [ 417.983561][ T30] [ 417.986638][ T30] __schedule+0x17e8/0x4a20 [ 417.991209][ T30] ? __pfx___schedule+0x10/0x10 [ 418.013862][ T30] ? __pfx_lock_release+0x10/0x10 [ 418.019484][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 418.033635][ T30] ? kthread_data+0x52/0xd0 [ 418.038201][ T30] ? schedule+0x90/0x320 [ 418.042474][ T30] ? wq_worker_sleeping+0x66/0x240 [ 418.052913][ T30] ? schedule+0x90/0x320 [ 418.057633][ T30] schedule+0x14b/0x320 [ 418.061921][ T30] schedule_preempt_disabled+0x13/