last executing test programs: 23.031564689s ago: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000007b40)=[{&(0x7f0000000200)="e2", 0x1}], 0x1}, 0x700}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)="12", 0x1}], 0x1}}], 0x3, 0x0) recvmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/34, 0x22}], 0x1}, 0x0) 22.11896272s ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000200), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x2, 0x1032, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x20000, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='memory.events\x00', 0x26e1, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) 21.974484145s ago: executing program 0: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@setlink={0x68, 0x13, 0x501, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @remote}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_IFALIASn={0x4}]}, 0x68}}, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) socket(0x0, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x600) ioctl$TUNSETOFFLOAD(r2, 0x40047452, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000d80)={@local, @random="c4bcbcac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd0}}}}}}}, 0x0) 21.805566357s ago: executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES64=0x0, @ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0xba, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[], 0xfdef) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x2}, 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r8, 0x2, 0x2, 0x0, @link_fd=r4}, 0x29) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 20.86465608s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x2000000) write$cgroup_int(r0, &(0x7f0000000380), 0x1040c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000001680)=[{0x0}], 0x1}}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) mmap(&(0x7f000003d000/0x2000)=nil, 0x2000, 0x2000003, 0x2010, r1, 0x28f35000) socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000e800850000004800000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x10) socket$netlink(0x10, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000e1e, 0x0, 0x60e}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x0, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40060}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x20045040) r7 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYRES8=r8], 0x3}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r4, 0x0, r7, 0x0, 0x4ffe2, 0x0) 8.928279842s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x2000000) write$cgroup_int(r0, &(0x7f0000000380), 0x1040c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000001680)=[{0x0}], 0x1}}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) mmap(&(0x7f000003d000/0x2000)=nil, 0x2000, 0x2000003, 0x2010, r1, 0x28f35000) socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000e800850000004800000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x10) socket$netlink(0x10, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000e1e, 0x0, 0x60e}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x0, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40060}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x20045040) r7 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYRES8=r8], 0x3}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r4, 0x0, r7, 0x0, 0x4ffe2, 0x0) 4.879099766s ago: executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x50) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x9) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32", 0x8) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000140)=""/198, 0xc6}], 0x1}}], 0x2, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, 0x0) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x98}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x0, 0x150, 0x150, 0x2b0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x84}}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9}, 0x48) 4.440659256s ago: executing program 4: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@setlink={0x68, 0x13, 0x501, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @remote}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_IFALIASn={0x4}]}, 0x68}}, 0x0) socket(0x0, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) unshare(0x600) ioctl$TUNSETOFFLOAD(r2, 0x40047452, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000d80)={@local, @random="c4bcbcac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd0}}}}}}}, 0x0) 3.9696742s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000016c0)=ANY=[@ANYBLOB="18000000000000000000000000ed000095", @ANYRES32=0x0, @ANYRESDEC=0x0], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000002020000040000800c0001800600000006dd0000"], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = socket$inet6(0xa, 0x6, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000001700)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x4, 0x800009, 0x21, @dev={0xfe, 0x80, '\x00', 0xd}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x0, 0x200020, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001680)={'syztnl2\x00', &(0x7f0000000400)={'ip6gre0\x00', r6, 0x29, 0x3, 0x2, 0x6, 0x60, @local, @mcast1, 0x20, 0x700, 0x80000000, 0x9}}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020200020c000000000000000000000003000600000000000200000000000000000000000000000002000100000000000000090000000000030005000000000002000000ac1414aa00000000000000000200d200080000003400000000000000"], 0x60}, 0x1, 0x7}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @rand_addr=0x64010102, @rand_addr=0x64010101, 0x4}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x99, 0x3}}}, {{@arp={@multicast2, @broadcast, 0xff, 0xff, 0x9, 0xb, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@random="7041b1a4215b", {[0xff, 0x0, 0x0, 0xff, 0xff, 0x101]}}, 0x5, 0x81, 0xe206, 0x5, 0x0, 0x9, 'ip_vti0\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x0, 0x200}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xaf0, 0x6efd}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r9, 0x6, 0xd, &(0x7f0000000080)='>', 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000680003002cbd7000000000000a0006000000000008000500", @ANYRES32=r12, @ANYBLOB="0c000880"], 0x2c}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r8, 0xf505, 0x0) r13 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r13, 0x10d, 0xe8, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="290000000000000000000100000006000a0000000000b4d2fd9f3c04428705000700000000000600080000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) 3.051087773s ago: executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x6c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x6c}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="44c3ff54ac8e6ebabb21d140d81affffffffff", 0x13, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) 2.920264717s ago: executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x20000400) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0xa, &(0x7f0000003540)=0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) socket$qrtr(0x2a, 0x2, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x891b, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001780)=ANY=[@ANYRES16=r3, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0000000000"], 0x3c}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000010000000183300000400000000000000000000009500000000000000a8216bfe319f215d7a40781899fbbb33161d1853f87c1841ec9c0b488740ccd55e1f11b212feb5381eceade385ab2f7169a5650716d6e1e0412e769b80fe383fc906e8e55f1a2c155d41eb24f0adf4a14995a0c6a80a3b60b08d0e6c3d147ff5fc4d7f469c827ef5b7235bbcbf20393ebb90f59584a6025b389cd646d58ac4e161b5cd0a8fb64fab2a489a7042ac2a2ce47252542764717ab3473925d8cdda7e53a3cea4f0675b46bf1738cbf8094a1f7800ddfd80f9ee93c5d9bc951c2c6edbc56a4bfae5"], &(0x7f0000000300)='GPL\x00', 0x1000002, 0xff8, &(0x7f0000000780)=""/4088, 0x0, 0x23}, 0x90) r5 = getpid() r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0x0, 0x3}, 0x6) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00\a', @ANYRES16=r8], 0xd) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000000)="4dcdc7c6223e00000000ffff80f3", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @dev}, 0x14) r11 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="3fb485ec118f5f64a7cba9ba84b1e3e5865da58535d329801f02290c008e09082521f47a0bf3a0a72631a9ac2f2d84f8e11ee26369d58b4cda519d69168284dc12d260859c65d7d677bf24c262591a0e3975a977d600c8d2652bcfbaae28d7d1035f75b6105c98815775c685da6e77c39a0f5f12119e521cd544327d56e77e1c3a957efb381eebfb5f0ef12b5b8461463cbc3b2f3742a99ea9eb0e368b6c883a80282ba18d7540b58adf1dae3974cc98bc9e2b325fcf6ae72eba237d37d9bb", 0xbf}, {&(0x7f0000000140)="d77f2dcd3c4f08261398f3d8a060e50e8c8d563be562a09a68d43a7c3d580f3c43b8b68c227fee04e676090fb33623cd89104063eebebf80bd3f74ade9", 0x3d}], 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000110000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r9, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x4000000}, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYRES32=r0], 0x0, 0x4}, 0x90) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES16=r14, @ANYRES16=r13, @ANYBLOB="010000000000000000002500000008000300", @ANYRES32=r13, @ANYRES8=r3], 0x6c}}, 0x4048801) 2.797338728s ago: executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x0, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000007b40)=[{&(0x7f0000000200)="e2", 0x1}], 0x1}, 0x700}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)="12", 0x1}], 0x1}}], 0x3, 0x0) recvmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/34, 0x22}], 0x1}, 0x0) 2.669250097s ago: executing program 4: socket(0x10, 0x803, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, 0x0) socket$kcm(0x10, 0x2, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000100)=0x58f, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000340)=0x8) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newtclass={0x24, 0x28, 0x10, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0x3, 0xe}, {0x10, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) connect$can_bcm(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x0, 0x2004}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 1.972767128s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x4, 0x6, 0x946, 0x102, r0, 0xfffff800, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2, 0xd}, 0x1a) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x10}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000000), 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8}, 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004c}, 0x90) unshare(0x0) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000080)=0x1, 0x4) r5 = socket(0x2, 0x80802, 0x0) r6 = epoll_create1(0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NFT_BATCH(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000180a0101000000"], 0x2b4}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f00000001c0)={0x20002006}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 1.932834155s ago: executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x50) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x9) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32", 0x8) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000140)=""/198, 0xc6}], 0x1}}], 0x2, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x98}}, 0x0) close(r6) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x0, 0x150, 0x150, 0x2b0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x84}}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e000179630000000000000000", @ANYRES64], 0x1c}}, 0x1804) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9}, 0x48) 1.87737s ago: executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r1, 0x0, 0x0, 0x800) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x1b5, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, 0x8) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) r4 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000080)={'ah\x00'}, &(0x7f0000000040)=0x1e) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) close(r5) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x10001, @bearer=@udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x6000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000300)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000380)={0x1000, 0x96, 0x209, 0x6, 0x7, 0x9c2e, 0x7, 0x5, r6}, &(0x7f00000003c0)=0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000001c0)={'#! ', '\xe9\x1fq\x89Y\x1e\x923aK'}, 0xe) sendfile(r0, r7, &(0x7f00000000c0), 0x4) 1.71608912s ago: executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x20000400) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0xa, &(0x7f0000003540)=0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) socket$qrtr(0x2a, 0x2, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x891b, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001780)=ANY=[@ANYRES16=r3, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0000000000"], 0x3c}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000010000000183300000400000000000000000000009500000000000000a8216bfe319f215d7a40781899fbbb33161d1853f87c1841ec9c0b488740ccd55e1f11b212feb5381eceade385ab2f7169a5650716d6e1e0412e769b80fe383fc906e8e55f1a2c155d41eb24f0adf4a14995a0c6a80a3b60b08d0e6c3d147ff5fc4d7f469c827ef5b7235bbcbf20393ebb90f59584a6025b389cd646d58ac4e161b5cd0a8fb64fab2a489a7042ac2a2ce47252542764717ab3473925d8cdda7e53a3cea4f0675b46bf1738cbf8094a1f7800ddfd80f9ee93c5d9bc951c2c6edbc56a4bfae5"], &(0x7f0000000300)='GPL\x00', 0x1000002, 0xff8, &(0x7f0000000780)=""/4088, 0x0, 0x23}, 0x90) r5 = getpid() r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0x0, 0x3}, 0x6) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00\a', @ANYRES16=r8], 0xd) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000000)="4dcdc7c6223e00000000ffff80f3", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @dev}, 0x14) r11 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="3fb485ec118f5f64a7cba9ba84b1e3e5865da58535d329801f02290c008e09082521f47a0bf3a0a72631a9ac2f2d84f8e11ee26369d58b4cda519d69168284dc12d260859c65d7d677bf24c262591a0e3975a977d600c8d2652bcfbaae28d7d1035f75b6105c98815775c685da6e77c39a0f5f12119e521cd544327d56e77e1c3a957efb381eebfb5f0ef12b5b8461463cbc3b2f3742a99ea9eb0e368b6c883a80282ba18d7540b58adf1dae3974cc98bc9e2b325fcf6ae72eba237d37d9bb", 0xbf}, {&(0x7f0000000140)="d77f2dcd3c4f08261398f3d8a060e50e8c8d563be562a09a68d43a7c3d580f3c43b8b68c227fee04e676090fb33623cd89104063eebebf80bd3f74ade9", 0x3d}], 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000110000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r9, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x4000000}, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYRES32=r0], 0x0, 0x4}, 0x90) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES16=r14, @ANYRES16=r13, @ANYBLOB="010000000000000000002500000008000300", @ANYRES32=r13, @ANYRES8=r3], 0x6c}}, 0x4048801) 1.553714928s ago: executing program 2: socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x8) 1.484329453s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wlan0\x00'}) listen(0xffffffffffffffff, 0xfffffffc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000001c0)={0x0, 0x3, 0x74d4c2ee, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000012300)={r4, "977bf8e4f662db8c9db0f7ff10423c0e"}) ioctl$SIOCX25SCUDMATCHLEN(r3, 0x891a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB='b'], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) write$binfmt_script(r2, &(0x7f00000022c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c) write$binfmt_elf64(r2, 0x0, 0xfffffd88) write$nbd(r2, 0x0, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}]}, 0x38}}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_group_source_req(r8, 0x0, 0x31, &(0x7f0000000080)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x6000, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@gettaction={0x20, 0x32, 0x20b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f00000005c0)={r4, 0x7, 0xfffffffffffffffa, 0x1}) 1.302156772s ago: executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=[@sndrcv={0x30}, @sndinfo={0x20}], 0x50}, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x0, @vifc_lcl_addr=@loopback, @loopback}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@loopback}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r6) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010200000000000000002e0000000c0005002e155f1e24e5098a0a0001007770616e3100000005002b0003"], 0x34}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0xdc, r3, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff27}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7b311e68}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4b}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xedb6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xac07}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) r10 = socket$alg(0x26, 0x5, 0x0) r11 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xf0b, 0x1, 0x0, {0x0, 0x0, 0x12, r12, {0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x400}]}}]}, 0x3c}}, 0x0) bind$alg(r10, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r14 = accept4(r10, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0xa40, 0x30, 0x0, 0xfffffffe, 0x0, {}, [{0xa2c, 0x1, [@m_ipt={0x104, 0x0, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8}]}, {0xc9, 0x6, "57fbe85299683c7d7425433f51365da0062c97cf7df1ce5ffcda1e1eda5de37d60c37f13c0d537317821de1c9c00f3165331095a1ff001bbb780f23ebedd86319a8324a3c1c9d5f14188f182b4f8285c010b9a20848ddd608efb6cb2c79e5dad1fe5122b13e4c3ab1e1a78cdfe19a01f60933f08845611ba9aefbc893a21b7f410934347d762d96b2b00277a7b8f894d98338fde9df041fef935a951bf360dbe2158fe723e72fe76a1d59fb1e88db22c492f3ee442afc6e750e276e4f352c9d9df06094593"}, {0xc}, {0xc}}}, @m_ipt={0xa0, 0x0, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x7fffffff}]}, {0x31, 0x6, "b176df99b05f6b77a316bfc8e283fc48049dda839c90a5ceadad81aedbf42ad55531a586e8c2e5163b0431a344"}, {0xc}, {0xc}}}, @m_ipt={0x884, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x859, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0xa40}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)={0x0, 0x0, 0xffffffffffdf61b3}, &(0x7f0000000240)={0x0, 0xea60}) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast1, @multicast2, 0x0, "b200a06a95c980a6154dfb1e5c22cc42e3c374637bf5d25333abb4ddbe47fa66"}, 0x3c) 1.039235251s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001980)=[{&(0x7f0000001a40)="8e", 0x1}], 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) splice(r0, 0x0, r2, 0x0, 0xfdef, 0xf1) write$binfmt_script(r3, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) 992.703346ms ago: executing program 4: socket(0x10, 0x803, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x0, @random="9f444415c302"}, 0x0, {0x2, 0x0, @broadcast}}) socket$kcm(0x10, 0x2, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000100)=0x58f, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000340)=0x8) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newtclass={0x24, 0x28, 0x10, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0x3, 0xe}, {0x10, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) connect$can_bcm(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x0, 0x2004}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 907.171056ms ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x9}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000020240), 0x10010) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x60, r7, 0x1, 0x0, 0x0, {0x49}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x60}}, 0x0) sendto$inet(r5, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r9}, @call={0x85, 0x0, 0x0, 0x2b}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r10, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r8, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r5}, 0x20) recvmsg(r5, &(0x7f0000000400)={0x0, 0xffffffffffffff4e, &(0x7f0000001900)=[{&(0x7f0000000280)=""/112, 0x61}], 0x1}, 0x142) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x7, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000003c00)=0x90) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r3, 0x0) r12 = socket(0x10, 0x80002, 0x0) gettid() ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @dev}}}}) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="633f9c28096130000000", @ANYRES16=r13, @ANYBLOB="df4800000000000000000c0000000400038018000180140002007369743000"/42], 0x30}}, 0x0) 678.456577ms ago: executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_MULTI_BOOLOPT={0xc}]}}}]}, 0x48}}, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}) 549.245309ms ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x4, 0x6, 0x946, 0x102, r0, 0xfffff800, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2, 0xd}, 0x1a) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x10}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000000), 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8}, 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004c}, 0x90) unshare(0x0) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000080)=0x1, 0x4) r5 = socket(0x2, 0x80802, 0x0) r6 = epoll_create1(0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NFT_BATCH(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000180a0101000000"], 0x2b4}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f00000001c0)={0x20002006}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 286.425365ms ago: executing program 2: unshare(0x20000400) r0 = socket(0x10, 0x80002, 0x2) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) 269.996183ms ago: executing program 3: socket(0x32, 0x1, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x9}}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000002800)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x1f) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff1bfc0d7bb300000000000086dd6000000000483a00fe8000000000000000000000000000aaff02000000000000000000000000000102009078000000006092691700002b0000000000000000000000000000000001ff02000000000000efffffff000800010002040000000000fe8000000000000000000000000000bb"], 0x0) 182.619259ms ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000002100), r2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001400010000000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000100ff01000000000000000000000000100108000800020400001400060000ff07000005000000f9ecffff000000"], 0x48}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$packet(0x11, 0x2, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local}}}}) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001000000000000007f000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f740000000c0a01080000000000000000010000000900020073797a32000000004800038044000080080003400000000238000b80340001800a0001006c696d6974000000240002800c00014000000000000000010c00024000000000efffffff0eeb0340000005f50900010073797a30"], 0xf8}}, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002940)="99d661321aafe161f8daa3aa686b49201e28", 0x12}, {&(0x7f0000002980)="f555c15b70122cd0c98a5b39d975242bce2ae54f0a7ee6f8291bf1887f6fec817c26b1d863c34b037a56faa6dde89b09f5b752b2121b7fad3d1f6b7470ed80fece2a9b225b6f374dfe7761a3e1947198cd2e80db5039319fc789e105efe29c9fed9105d6c33e0349a8e3330282f27a58632de84541cac2cc7b21d99b0fd5ae4bfb5659bbda08606d62763806122f79162c835206d1d7adead527011943d2", 0x9e}, {&(0x7f0000002a40)="cedd02", 0x3}, {&(0x7f0000000640)="ccf4d478f1bf3edcf361d2a56234a5f1d4a77b6a226cb9fffdedfbfe66d04276a5b77781b9d5aaf1df7468d4d9dc830dbf2785f9483318a39085ce0c42697a0db79feb1f6aea03ba242e87fa312419f10be40570264cffeb219c407716f0e67337bd09ec891e71fdae92b12af5def3d26d9b9f4864f25d27d77fcb4f4331c64d50b07191721cd0dd2f50d4eb893e78172bd5708338ce03373eec8d300dacd21b7f9acd6a0360eac1d0690f873727440011ac07f627082060bdf97572abee5e64363ed4201e5eb3fb1754badc0d04171490b2ea7a8f82f9874aeb4696cf3ee69ef5c3312a60187afb7f585286afad37f3023dca1af7fd43b46e0b215504000001e857cc0904a10e62c48c02a6a677d86a51e884a4aa27bdaef2e76fcc30dba967c69ec4a74dc989df7f7ec876057926a5e782413cb35dc16491ac1773567e769b6db493e7656615715118dcbeeb4f5428545210b3052af09b800e51fc28ba4c56576e65eba2a35ab37911b957fc950000171a4c3fc011ae6c00000000f3a740ab13a7e3a25b31ce763e0597559ffa92e310aadfc7c9e1448b727f1393fffc563cdafc3e5724421da6c8d550c46d65e14026b17cf1676b1ccecb", 0x1b9}], 0x4}}], 0x1, 0x48004) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000380)="e1", 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000080)=0x3) splice(r7, 0x0, r6, 0x0, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) 149.651762ms ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x2c}}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000000)) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@private}}, &(0x7f0000000140)=0xe8) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000180)={0x3, @default, r3}) r4 = socket$netlink(0x10, 0x3, 0x12) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="dc000000", @ANYRES16, @ANYBLOB="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"], 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x4000) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f00000003c0)=@bpq0, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x40) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040000}, 0x14) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x140c, 0x8, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x80) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000640)={0x1f, 0x0, 0x2}, 0x6) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netdev_private(r6, 0x89f7, &(0x7f0000000680)="ecfb3a4f3bfaf8c9fa9269373e269cbec35cc3eece26eca22ff5ee8d6b77ed2932486c7122fcb84ff20711a1970e841b149392929924a9657fe50e404525d02c7a90ae98d48de9b7f3bfe124a6f6f646bb913a5170fccdd765193f36aa53bb4b27273da54ac75af9e4339b5f735534b65959c499b6f9f7219a0072e42c80de9fa5f138bd0f699ffef59bb096613e2c94e158b8c6eb0f73682b2e5ab96f95dfa1d25c28246229e0367edd9401e85cfb477a1d3ae152fc474ce0814042ebc60b97ec81e6d2d9b50bdd7fcea957031f590a5a8c7f848775b8a602b41711a08f") r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000980)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000ffdbdf25050000000c00060002000000020000000284b8e77e32630c1abdd523e4858adf47841ccd0465a33fb3369baebc18704e5a65c052f9e24e02cc7783e2b702b620b1558169b39b0bcd871d1a4ca13c8387eb144061bd145f7f6997ac8666d11e77c979a8b830e43329f60cd1250d380e167f367defd4edf174119098fc1d31"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r7) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000900)={0x1f, 0x2}, 0x6) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r10, &(0x7f0000000940)="16339586cabd14edb85ee054abb54bcc008513072d97b952c07829e60ce773bf33ee6711e0a536c1ec07ba7c4310c9a6d6fb421e25f3be299bd0bae011", 0x3d, 0x8000, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$vsock_stream(0x28, 0x1, 0x0) 0s ago: executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="2c385a4706", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="b976975513c53f399ead7999d25ed316e5043ee72a14b6974e120279e48a37db9fcdef24c4736ad4b048a6cb1da0d421863aa81020044d173a6dec7867e71f9ffc23ede86abd741489", 0x74}], 0x1, 0x0, 0x0, 0x24000810}, 0x0) kernel console output (not intermixed with test programs): vtap: entered promiscuous mode [ 78.890306][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.927824][ T5113] veth1_macvtap: entered promiscuous mode [ 78.989613][ T5115] veth0_macvtap: entered promiscuous mode [ 79.003763][ T5115] veth1_macvtap: entered promiscuous mode [ 79.026611][ T5112] veth0_vlan: entered promiscuous mode [ 79.042516][ T5122] veth0_macvtap: entered promiscuous mode [ 79.105491][ T5112] veth1_vlan: entered promiscuous mode [ 79.119933][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.149294][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.175936][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.189151][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.211987][ T5122] veth1_macvtap: entered promiscuous mode [ 79.227846][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.242266][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.253230][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.268971][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.280643][ T5115] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.290590][ T5115] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.299422][ T5115] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.310097][ T5115] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.327704][ T5118] Bluetooth: hci1: command tx timeout [ 79.327757][ T5125] Bluetooth: hci3: command tx timeout [ 79.350343][ T5113] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.360290][ T5113] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.369154][ T5113] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.378442][ T5113] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.395985][ T5125] Bluetooth: hci0: command tx timeout [ 79.397216][ T5118] Bluetooth: hci4: command tx timeout [ 79.401423][ T5125] Bluetooth: hci2: command tx timeout [ 79.489262][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.503829][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.516180][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.527716][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.539662][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.579999][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.591285][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.604220][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.615243][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.626957][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.664294][ T5112] veth0_macvtap: entered promiscuous mode [ 79.672929][ T5114] veth0_vlan: entered promiscuous mode [ 79.692047][ T5122] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.701194][ T5122] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.710120][ T5122] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.720083][ T5122] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.734233][ T5112] veth1_macvtap: entered promiscuous mode [ 79.765071][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.772694][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.789753][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.799829][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.835075][ T5114] veth1_vlan: entered promiscuous mode [ 79.882482][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.899546][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.909057][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.920584][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.930889][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.942461][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.952997][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.964465][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.977587][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.031544][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.050303][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.060718][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.071571][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.081724][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.094366][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.108239][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.119946][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.134218][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.162645][ T5112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.176972][ T5112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.191161][ T5112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.224085][ T5112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.258768][ T5199] Zero length message leads to an empty skb [ 80.273830][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.295038][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.323667][ T5114] veth0_macvtap: entered promiscuous mode [ 80.360268][ T5114] veth1_macvtap: entered promiscuous mode [ 80.458131][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.489448][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.623005][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.642258][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.662363][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.674393][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.685671][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.699674][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.711041][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.730198][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.761533][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.779146][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.795018][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.821027][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.843993][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.870935][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.895993][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.917506][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.947280][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.976707][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.007430][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.039311][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.076051][ T5213] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 81.152316][ T5224] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.184591][ T5213] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 81.261874][ T5229] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 81.301396][ T5114] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.344371][ T5114] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.375786][ T5114] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.397260][ T5125] Bluetooth: hci3: command tx timeout [ 81.407373][ T5125] Bluetooth: hci1: command tx timeout [ 81.424169][ T5114] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.476466][ T5125] Bluetooth: hci4: command tx timeout [ 81.476587][ T5118] Bluetooth: hci0: command tx timeout [ 81.481903][ T5125] Bluetooth: hci2: command tx timeout [ 81.510516][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.565714][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.809643][ T5235] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.0'. [ 81.916358][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.932906][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.942961][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.952828][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.994848][ T5242] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 82.133272][ T5242] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 82.446532][ T5254] vlan0: entered promiscuous mode [ 82.451628][ T5254] vlan0: entered allmulticast mode [ 82.507845][ T5254] veth0_vlan: entered allmulticast mode [ 82.554929][ T5254] team0: Port device vlan0 added [ 82.820097][ T5262] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 83.059978][ T5279] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 83.643595][ T5292] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 83.656680][ T5292] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 83.667658][ T5292] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 84.662403][ T5301] xt_recent: Unsupported userspace flags (00000076) [ 84.797847][ T5301] lo: entered allmulticast mode [ 85.922622][ T5348] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.109525][ T5359] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 86.155681][ T5359] __nla_validate_parse: 3 callbacks suppressed [ 86.155700][ T5359] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.362303][ T5378] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 86.392402][ T5377] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.434621][ T5378] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 86.466607][ T5377] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 86.491938][ T5378] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 86.500012][ T5377] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.769324][ T5168] IPVS: starting estimator thread 0... [ 86.867198][ T5389] IPVS: using max 16 ests per chain, 38400 per kthread [ 87.020392][ T57] cfg80211: failed to load regulatory.db [ 87.350375][ T5410] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.394807][ T5410] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 88.000345][ T5438] netdevsim netdevsim4 €: renamed from netdevsim0 (while UP) [ 88.066395][ T5438] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.199298][ T5445] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 88.242905][ T5445] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.311803][ T5452] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 89.088194][ T5484] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 89.109785][ T5484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 90.066467][ T5527] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 90.092981][ T5527] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 90.146426][ T5534] bridge0: port 3(team0) entered blocking state [ 90.163688][ T5534] bridge0: port 3(team0) entered disabled state [ 90.181535][ T5534] team0: entered allmulticast mode [ 90.191315][ T5534] team_slave_0: entered allmulticast mode [ 90.270819][ T5534] team_slave_1: entered allmulticast mode [ 90.299459][ T5534] team0: entered promiscuous mode [ 90.312642][ T5534] team_slave_0: entered promiscuous mode [ 90.327082][ T5534] team_slave_1: entered promiscuous mode [ 90.352114][ T5534] bridge0: port 3(team0) entered blocking state [ 90.358808][ T5534] bridge0: port 3(team0) entered forwarding state [ 90.377919][ T5542] Bluetooth: MGMT ver 1.22 [ 90.419206][ T5533] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.653485][ T5547] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 90.710180][ T5547] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.799136][ T5555] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 90.859469][ T5555] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 90.895753][ T5555] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 91.485118][ T5577] Cannot find map_set index 0 as target [ 91.722393][ T5581] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 92.285897][ T5619] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 92.336589][ T5619] veth1_macvtap: left promiscuous mode [ 92.350754][ T5623] Illegal XDP return value 4294967294 on prog (id 26) dev N/A, expect packet loss! [ 92.360979][ T5619] macsec0: entered promiscuous mode [ 92.369394][ T5619] macsec0: entered allmulticast mode [ 92.412356][ T5624] veth1_macvtap: entered promiscuous mode [ 92.432160][ T5624] veth1_macvtap: entered allmulticast mode [ 92.455471][ T5624] macsec0: left promiscuous mode [ 92.466165][ T5624] macsec0: left allmulticast mode [ 92.471410][ T5624] veth1_macvtap: left allmulticast mode [ 92.596672][ T5628] sock: sock_timestamping_bind_phc: sock not bind to device [ 92.688286][ T5630] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 92.844074][ T5633] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 92.859376][ T5633] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 92.876494][ T5637] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.082097][ T5643] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 93.121585][ T5649] batman_adv: batadv0: Adding interface: gretap1 [ 93.128220][ T5649] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.155992][ T5649] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 93.168308][ T5648] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 93.207755][ T5648] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 93.304398][ T29] audit: type=1804 audit(1718287339.905:2): pid=5658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2579979168/syzkaller.j1WAbf/26/memory.events" dev="sda1" ino=1948 res=1 errno=0 [ 93.387651][ T29] audit: type=1804 audit(1718287339.905:3): pid=5658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2579979168/syzkaller.j1WAbf/26/memory.events" dev="sda1" ino=1948 res=1 errno=0 [ 93.426235][ T5664] sock: sock_timestamping_bind_phc: sock not bind to device [ 93.436175][ T5667] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.501816][ T29] audit: type=1804 audit(1718287339.915:4): pid=5658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2579979168/syzkaller.j1WAbf/26/memory.events" dev="sda1" ino=1948 res=1 errno=0 [ 93.697455][ T5675] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 93.727885][ T5680] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.935268][ T5689] batman_adv: batadv0: Adding interface: gretap1 [ 93.981229][ T5689] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.053234][ T5689] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 94.117256][ T5646] tc_dump_action: action bad kind [ 94.327639][ T5703] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 94.347462][ T5706] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.396080][ T5701] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 94.612882][ T5719] sctp: [Deprecated]: syz-executor.4 (pid 5719) Use of int in max_burst socket option deprecated. [ 94.612882][ T5719] Use struct sctp_assoc_value instead [ 94.821201][ T5731] netlink: 'syz-executor.2': attribute type 64 has an invalid length. [ 95.179442][ T5751] xt_TCPMSS: Only works on TCP SYN packets [ 95.228612][ T5751] Bluetooth: MGMT ver 1.22 [ 95.368567][ T5759] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 95.509951][ T5768] netlink: 'syz-executor.2': attribute type 64 has an invalid length. [ 96.023769][ T5808] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 96.212991][ T5814] pim6reg: entered allmulticast mode [ 96.417806][ T5814] syzkaller0: entered promiscuous mode [ 96.423355][ T5814] syzkaller0: entered allmulticast mode [ 96.512402][ T35] syzkaller0: tun_net_xmit 48 [ 96.696317][ T5837] macvlan2: entered allmulticast mode [ 96.721898][ T5837] team_slave_0: entered promiscuous mode [ 96.728066][ T5837] team_slave_1: entered promiscuous mode [ 96.742830][ T5837] team0: entered allmulticast mode [ 96.755916][ T5837] team_slave_0: entered allmulticast mode [ 96.769956][ T5837] team_slave_1: entered allmulticast mode [ 96.783957][ T5837] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 96.813365][ T5837] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 96.957468][ T5848] __nla_validate_parse: 19 callbacks suppressed [ 96.957489][ T5848] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 97.971129][ T5838] bond0: entered promiscuous mode [ 97.976766][ T5838] bond_slave_0: entered promiscuous mode [ 97.982591][ T5838] bond_slave_1: entered promiscuous mode [ 97.988660][ T5838] macvlan2: entered promiscuous mode [ 97.994040][ T5838] team0: entered promiscuous mode [ 98.081130][ T5850] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 98.269671][ T5864] veth1_macvtap: left promiscuous mode [ 98.275208][ T5864] macsec0: entered promiscuous mode [ 98.321802][ T5864] macsec0: entered allmulticast mode [ 98.416069][ T5864] veth1_macvtap: entered promiscuous mode [ 98.428420][ T5864] veth1_macvtap: entered allmulticast mode [ 98.442195][ T5864] macsec0: left promiscuous mode [ 98.448207][ T5864] macsec0: left allmulticast mode [ 98.454537][ T5864] veth1_macvtap: left allmulticast mode [ 98.794852][ T5892] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 98.806007][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 98.919069][ T5899] netlink: 'syz-executor.2': attribute type 64 has an invalid length. [ 98.936653][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 98.965764][ T5899] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.074570][ T5908] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 99.088244][ T5911] sctp: [Deprecated]: syz-executor.0 (pid 5911) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.088244][ T5911] Use struct sctp_sack_info instead [ 99.123990][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 99.125478][ T5908] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 99.151045][ T5913] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 99.171010][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 99.192483][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 99.544096][ T5937] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 99.580254][ T5939] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 99.690478][ T5946] netlink: 'syz-executor.2': attribute type 64 has an invalid length. [ 99.867178][ T5906] syz-executor.0 (5906) used greatest stack depth: 17072 bytes left [ 99.905739][ T5957] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 100.245755][ T5979] netlink: 'syz-executor.0': attribute type 64 has an invalid length. [ 100.486655][ T5995] netlink: 'syz-executor.0': attribute type 309 has an invalid length. [ 100.541943][ T5997] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 100.579124][ T6000] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 100.594332][ T5995] macsec0: entered promiscuous mode [ 100.619335][ T5995] macsec1: entered promiscuous mode [ 100.702435][ T11] tipc: Subscription rejected, illegal request [ 100.732284][ T6002] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 100.753912][ T6002] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 100.818819][ T6010] sctp: [Deprecated]: syz-executor.4 (pid 6010) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.818819][ T6010] Use struct sctp_sack_info instead [ 100.856844][ T6015] sock: sock_timestamping_bind_phc: sock not bind to device [ 101.328345][ T6039] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 101.700047][ T6057] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 101.939761][ T6074] openvswitch: netlink: Key type 29 is not supported [ 101.963064][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.976970][ T6076] __nla_validate_parse: 21 callbacks suppressed [ 101.976990][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 102.134040][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.321485][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.528921][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.709674][ T6096] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 102.737717][ T6096] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 102.821510][ T11] bridge_slave_1: left allmulticast mode [ 102.835869][ T11] bridge_slave_1: left promiscuous mode [ 102.856962][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.910934][ T11] bridge_slave_0: left allmulticast mode [ 102.919558][ T4489] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.922435][ T11] bridge_slave_0: left promiscuous mode [ 102.933775][ T4489] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.944556][ T4489] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.954334][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.964089][ T4489] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.974455][ T4489] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 102.982212][ T4489] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.060489][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 103.263555][ T6120] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 103.315398][ T11] batman_adv: batadv0: Removing interface: gretap1 [ 103.542728][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.566184][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.584416][ T11] bond0 (unregistering): Released all slaves [ 103.643670][ T6127] IPVS: length: 192 != 8 [ 103.773606][ T6125] syzkaller0: entered allmulticast mode [ 103.828137][ T6132] veth0_vlan: entered allmulticast mode [ 104.196850][ T6148] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 104.240673][ T11] hsr_slave_0: left promiscuous mode [ 104.262139][ T11] hsr_slave_1: left promiscuous mode [ 104.278850][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.306182][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.319884][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.330883][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.362554][ T11] veth1_macvtap: left promiscuous mode [ 104.376342][ T11] veth0_macvtap: left promiscuous mode [ 104.382071][ T11] veth1_vlan: left promiscuous mode [ 104.387821][ T11] veth0_vlan: left promiscuous mode [ 105.046352][ T11] team0 (unregistering): Port device team_slave_1 removed [ 105.081815][ T11] team0 (unregistering): Port device team_slave_0 removed [ 105.090132][ T5118] Bluetooth: hci3: command tx timeout [ 105.462793][ T6160] validate_nla: 1 callbacks suppressed [ 105.462813][ T6160] netlink: 'syz-executor.1': attribute type 64 has an invalid length. [ 105.495716][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.510997][ T6160] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.534080][ T6177] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 105.545953][ T6177] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 105.651681][ T6180] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2097153 (only 8 groups) [ 105.680112][ T6182] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.803884][ T6105] chnl_net:caif_netlink_parms(): no params data found [ 105.890574][ T6105] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.898487][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.907835][ T6105] bridge_slave_0: entered allmulticast mode [ 105.931492][ T6105] bridge_slave_0: entered promiscuous mode [ 105.954900][ T6105] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.976439][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.989471][ T6105] bridge_slave_1: entered allmulticast mode [ 105.997374][ T6105] bridge_slave_1: entered promiscuous mode [ 106.133306][ T6201] veth1_macvtap: left promiscuous mode [ 106.173508][ T6201] macsec0: entered allmulticast mode [ 106.231495][ T6105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.282950][ T6105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.305791][ T6206] veth1_macvtap: entered promiscuous mode [ 106.311587][ T6206] veth1_macvtap: entered allmulticast mode [ 106.342442][ T6206] macsec0: left allmulticast mode [ 106.361953][ T6206] veth1_macvtap: left allmulticast mode [ 106.398922][ T6213] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 106.557427][ T6105] team0: Port device team_slave_0 added [ 106.584767][ T6105] team0: Port device team_slave_1 added [ 106.659380][ T6223] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 106.692016][ T6223] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.706827][ T6105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.713851][ T6105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.742643][ T6105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.800030][ T6105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.807367][ T6105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.849577][ T6105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.007955][ T6105] hsr_slave_0: entered promiscuous mode [ 107.015040][ T6105] hsr_slave_1: entered promiscuous mode [ 107.033256][ T6105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.043757][ T6105] Cannot create hsr debugfs directory [ 107.054553][ T6231] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 107.155751][ T5118] Bluetooth: hci3: command 0x041b tx timeout [ 107.387384][ T12] tipc: Subscription rejected, illegal request [ 107.472762][ T6253] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 107.567108][ T6253] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 108.013590][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.079593][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 108.086446][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 108.093011][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 108.099498][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 108.106076][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 108.112517][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 108.119153][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 108.125641][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.588925][ T6277] veth1_macvtap: left promiscuous mode [ 108.594551][ T6277] macsec0: entered allmulticast mode [ 108.704249][ T6277] veth1_macvtap: entered promiscuous mode [ 108.726035][ T6277] veth1_macvtap: entered allmulticast mode [ 108.750059][ T6277] macsec0: left allmulticast mode [ 108.755167][ T6277] veth1_macvtap: left allmulticast mode [ 108.855101][ T6286] veth0_vlan: entered allmulticast mode [ 108.927088][ T6288] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 109.003555][ T6105] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.038789][ T6105] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.068742][ T6105] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.136418][ T6105] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 109.235857][ T4489] Bluetooth: hci3: command 0x041b tx timeout [ 109.343634][ T6105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.390749][ T6300] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 109.411572][ T6300] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 109.441745][ T6105] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.460462][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.468113][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.492680][ T1089] tipc: Subscription rejected, illegal request [ 109.499141][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.506336][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.544294][ T6305] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 109.589526][ T6305] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 109.682913][ T6310] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 109.717315][ T6310] bond1: entered promiscuous mode [ 109.743876][ T6312] bond0: (slave bond_slave_0): Releasing backup interface [ 109.771994][ T6312] bond1: (slave bond_slave_0): making interface the new active one [ 109.782800][ T6312] bond_slave_0: entered promiscuous mode [ 109.791631][ T6312] bond1: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.957102][ T6318] sock: sock_timestamping_bind_phc: sock not bind to device [ 110.068239][ T6105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.086409][ T6322] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 110.133996][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 110.152883][ T6325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.161127][ T6325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.172727][ T6325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.196275][ T6325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.217731][ T6325] batman_adv: batadv0: Removing interface: gretap1 [ 110.307244][ T6330] veth0Wvlan: renamed from syz_tun [ 110.479320][ T6105] veth0_vlan: entered promiscuous mode [ 110.549994][ T6105] veth1_vlan: entered promiscuous mode [ 110.623978][ T6105] veth0_macvtap: entered promiscuous mode [ 110.659134][ T6349] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 110.705958][ T6353] sock: sock_timestamping_bind_phc: sock not bind to device [ 110.717842][ T6349] bond1: entered promiscuous mode [ 110.732323][ T6105] veth1_macvtap: entered promiscuous mode [ 110.751079][ T6355] bond0: (slave bond_slave_0): Releasing backup interface [ 110.840697][ T6355] bond1: (slave bond_slave_0): making interface the new active one [ 110.862712][ T6355] bond_slave_0: entered promiscuous mode [ 110.875335][ T6355] bond1: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.908165][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 110.919862][ T6360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.930920][ T6360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.971203][ T6360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.005659][ T6360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.093633][ T6369] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 111.104527][ T6369] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.161558][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.176279][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.190973][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.204526][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.220973][ T6105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.227377][ T6371] rdma_op ffff88805eb8a1f0 conn xmit_rdma 0000000000000000 [ 111.252928][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.277034][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.287763][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.298987][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.312223][ T6105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.330550][ T4489] Bluetooth: hci3: command 0x041b tx timeout [ 111.343489][ T6105] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.361660][ T6105] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.373749][ T6105] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.374119][ T6378] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.382951][ T6105] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.681927][ T6391] sock: sock_timestamping_bind_phc: sock not bind to device [ 111.701180][ T6393] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 111.776344][ T6393] bond2: entered promiscuous mode [ 111.853804][ T6394] bond1: (slave bond_slave_0): Releasing active interface [ 111.858958][ T6400] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 111.869438][ T6400] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.878633][ T6394] bond_slave_0: left promiscuous mode [ 111.901447][ T6394] bond2: (slave bond_slave_0): making interface the new active one [ 111.949057][ T6394] bond_slave_0: entered promiscuous mode [ 111.970423][ T6403] rdma_op ffff888021fec1f0 conn xmit_rdma 0000000000000000 [ 111.977063][ T6394] bond2: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.051073][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.086707][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.229286][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.254174][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.589753][ T6437] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 112.607586][ T6436] __nla_validate_parse: 1 callbacks suppressed [ 112.607607][ T6436] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 112.634156][ T6437] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.644993][ T6436] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 112.692951][ T6436] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 112.739438][ T6446] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 112.756328][ T6436] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 112.797559][ T6436] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 113.264844][ T6479] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 113.289522][ T6479] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.396344][ T4489] Bluetooth: hci3: command 0x041b tx timeout [ 113.513472][ T6486] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 113.575770][ T6486] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 113.694005][ T6508] IPv6: sit1: Disabled Multicast RS [ 114.004785][ T6526] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 114.086251][ T6533] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 114.136736][ T11] tipc: Subscription rejected, illegal request [ 114.488909][ T6564] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 114.871159][ T1104] tipc: Subscription rejected, illegal request [ 115.051908][ T6590] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 116.288228][ T6606] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 116.399219][ T6614] lo: left allmulticast mode [ 116.465960][ T2922] tipc: Subscription rejected, illegal request [ 116.505467][ T6616] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 116.539545][ T6616] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 116.916680][ T6639] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 116.931541][ T6642] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 117.421229][ T1099] tipc: Subscription rejected, illegal request [ 117.498949][ T6668] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 117.527857][ T6668] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 118.038719][ T29] audit: type=1804 audit(1718287364.645:5): pid=6707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1500512820/syzkaller.p9S8Le/99/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 118.521445][ T6734] __nla_validate_parse: 19 callbacks suppressed [ 118.521466][ T6734] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.581037][ T6736] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.831469][ T6745] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 118.839961][ T6745] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 119.300879][ T6764] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 119.502665][ T6774] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 119.637967][ T6780] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 119.660993][ T6780] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.228703][ T6782] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 120.248770][ T6802] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 120.304789][ T6802] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 120.401392][ T6803] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 120.477786][ T6782] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.3'. [ 120.748396][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.757166][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.201799][ T29] audit: type=1800 audit(1718287367.805:6): pid=6834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1956 res=0 errno=0 [ 121.277667][ T29] audit: type=1804 audit(1718287367.845:7): pid=6834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir4229240973/syzkaller.8dDfYZ/115/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 121.304629][ T29] audit: type=1804 audit(1718287367.875:8): pid=6834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir4229240973/syzkaller.8dDfYZ/115/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 121.345119][ T6839] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 122.290361][ T6870] trusted_key: syz-executor.3 sent an empty control message without MSG_MORE. [ 122.387694][ T6874] Cannot find map_set index 0 as target [ 123.281174][ T6905] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 123.315928][ T5118] Bluetooth: hci3: command 0x041b tx timeout [ 123.983247][ T6923] __nla_validate_parse: 14 callbacks suppressed [ 123.983270][ T6923] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.038585][ T6923] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.059470][ T6923] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.084822][ T6923] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.104975][ T6934] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 124.123669][ T6923] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.284092][ T6940] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.323307][ T29] audit: type=1804 audit(1718287370.925:9): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3498201282/syzkaller.rzdGaa/33/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 124.563299][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.748424][ T6960] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.006328][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.046968][ T29] audit: type=1800 audit(1718287371.645:10): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 125.113874][ T29] audit: type=1804 audit(1718287371.675:11): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3498201282/syzkaller.rzdGaa/36/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 125.163230][ T29] audit: type=1804 audit(1718287371.695:12): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3498201282/syzkaller.rzdGaa/36/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 125.524247][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.676632][ T7007] veth1_macvtap: left promiscuous mode [ 125.692019][ T7007] macsec0: entered promiscuous mode [ 125.709212][ T7007] macsec0: entered allmulticast mode [ 125.806435][ T7002] veth1_macvtap: entered promiscuous mode [ 125.815813][ T7002] veth1_macvtap: entered allmulticast mode [ 125.841074][ T7002] macsec0: left promiscuous mode [ 125.868326][ T7002] macsec0: left allmulticast mode [ 125.896063][ T7002] veth1_macvtap: left allmulticast mode [ 126.081456][ T7029] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 126.216171][ T7037] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 126.828753][ T7072] xt_policy: output policy not valid in PREROUTING and INPUT [ 126.876048][ T7070] ip6gre1: entered allmulticast mode [ 126.993130][ T7041] tc_dump_action: action bad kind [ 127.693667][ T7118] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 127.722711][ T7116] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 127.737717][ T7118] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 127.950480][ T7130] batman_adv: batadv0: Adding interface: gretap1 [ 127.963194][ T7130] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.990588][ T7130] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 128.161370][ T7147] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 128.263089][ T7153] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 128.271963][ T7153] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 128.280751][ T7153] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 128.536478][ T7159] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 128.816235][ T7175] lo: entered allmulticast mode [ 128.892422][ T7177] netlink: 'syz-executor.0': attribute type 63 has an invalid length. [ 129.264060][ T7203] __nla_validate_parse: 9 callbacks suppressed [ 129.264081][ T7203] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 129.325082][ T7208] batman_adv: batadv0: Adding interface: gretap1 [ 129.340338][ T7208] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.382323][ T7208] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 129.614753][ T7222] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 129.636359][ T7222] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.758157][ T7226] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 129.776269][ T7226] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 129.793011][ T7226] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 130.125460][ T7238] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 130.204406][ T7240] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 130.546382][ T7251] vlan0: entered promiscuous mode [ 130.551990][ T7251] vlan0: entered allmulticast mode [ 130.565694][ T7251] veth0_vlan: entered allmulticast mode [ 130.579432][ T7251] team0: Port device vlan0 added [ 130.672135][ T7230] tc_dump_action: action bad kind [ 130.705356][ T7259] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 130.958668][ T7274] veth1_macvtap: left promiscuous mode [ 130.964219][ T7274] macsec0: entered promiscuous mode [ 130.981756][ T7274] macsec0: entered allmulticast mode [ 131.086626][ T7274] veth1_macvtap: entered promiscuous mode [ 131.092422][ T7274] veth1_macvtap: entered allmulticast mode [ 131.123486][ T7274] macsec0: left promiscuous mode [ 131.134069][ T7274] macsec0: left allmulticast mode [ 131.146646][ T7274] veth1_macvtap: left allmulticast mode [ 131.198756][ T7285] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.221076][ T7285] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 131.234491][ T7286] netlink: 'syz-executor.1': attribute type 63 has an invalid length. [ 131.253069][ T7286] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 131.352576][ T29] audit: type=1804 audit(1718287377.955:13): pid=7288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4229240973/syzkaller.8dDfYZ/149/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 131.686961][ T7306] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 131.732676][ T7306] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.323528][ T7329] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 132.347194][ T7329] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.645203][ T7351] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 132.845400][ T7367] veth1_macvtap: left promiscuous mode [ 132.858896][ T7367] macsec0: entered promiscuous mode [ 132.868162][ T7367] macsec0: entered allmulticast mode [ 132.939343][ T7360] veth1_macvtap: entered promiscuous mode [ 132.946754][ T7360] veth1_macvtap: entered allmulticast mode [ 132.953087][ T7360] macsec0: left promiscuous mode [ 132.963308][ T7360] macsec0: left allmulticast mode [ 132.969130][ T7360] veth1_macvtap: left allmulticast mode [ 132.982805][ T7373] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 133.082860][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.132328][ T7381] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 133.149775][ T7376] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 133.173380][ T7376] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 133.201178][ T7376] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 133.583817][ T7401] pim6reg1: entered promiscuous mode [ 133.611763][ T7401] pim6reg1: entered allmulticast mode [ 133.837008][ T7410] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 134.261220][ T7429] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.261818][ T7429] Cannot find add_set index 0 as target [ 134.284331][ T7429] __nla_validate_parse: 7 callbacks suppressed [ 134.284354][ T7429] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 134.612057][ T7446] pim6reg1: entered promiscuous mode [ 134.625331][ T7446] pim6reg1: entered allmulticast mode [ 134.650973][ T7448] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 134.669611][ T7448] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.802605][ T7448] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 134.812530][ T7448] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 134.821783][ T7448] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 134.912086][ T7454] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.924889][ T7454] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.935255][ T7454] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.945947][ T7454] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.106741][ T7463] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.122502][ T7465] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.310183][ T7460] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.906420][ T7488] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.980267][ T7496] tun0: tun_chr_ioctl cmd 1074025675 [ 136.010366][ T7496] tun0: persist disabled [ 136.171905][ T7506] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 137.886092][ T7554] veth0_vlan: left allmulticast mode [ 137.975755][ T7554] veth0_vlan: entered allmulticast mode [ 138.864350][ T7593] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 138.896131][ T7597] veth0_vlan: left allmulticast mode [ 138.988194][ T7597] veth0_vlan: entered allmulticast mode [ 139.049324][ T7603] IPv6: Can't replace route, no match found [ 139.240950][ T7610] sock: sock_timestamping_bind_phc: sock not bind to device [ 139.322873][ T7612] __nla_validate_parse: 19 callbacks suppressed [ 139.322895][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 139.666875][ T7624] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 139.836215][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.240004][ T7647] team0: entered promiscuous mode [ 140.248471][ T7647] team_slave_0: entered promiscuous mode [ 140.256647][ T7647] team_slave_1: entered promiscuous mode [ 140.264211][ T7647] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 140.274268][ T7647] team0: left promiscuous mode [ 140.295223][ T7647] team_slave_0: left promiscuous mode [ 140.295581][ T7646] syz-executor.3[7646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.301107][ T7647] team_slave_1: left promiscuous mode [ 140.324012][ T7646] syz-executor.3[7646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.374651][ T7649] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 140.464760][ T7646] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.498271][ T7646] bond0: (slave bond1): Enslaving as an active interface with an up link [ 140.517481][ T7628] tc_dump_action: action bad kind [ 140.729958][ T7664] vlan0: entered allmulticast mode [ 140.775236][ T7667] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 140.835333][ T7664] veth0_vlan: entered allmulticast mode [ 140.956341][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.982884][ T7675] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.994155][ T7675] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 141.002817][ T7675] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.131429][ T7687] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.134518][ T7688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.164339][ T7688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.176965][ T7688] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 141.193044][ T7688] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 141.280302][ T7690] team0: entered promiscuous mode [ 141.297155][ T7690] team_slave_0: entered promiscuous mode [ 141.324358][ T7690] team_slave_1: entered promiscuous mode [ 141.353460][ T7690] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 141.374045][ T7690] team0: left promiscuous mode [ 141.381406][ T7690] team_slave_0: left promiscuous mode [ 141.388795][ T7690] team_slave_1: left promiscuous mode [ 141.438969][ T7697] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.711516][ T7718] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 141.781001][ T7721] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 141.902173][ T7727] netlink: 'syz-executor.2': attribute type 309 has an invalid length. [ 141.951054][ T7727] macsec0: entered promiscuous mode [ 141.964886][ T7727] macsec1: entered promiscuous mode [ 142.064537][ T7737] rdma_op ffff88802ed8d9f0 conn xmit_rdma 0000000000000000 [ 142.082005][ T7735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.092243][ T7735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.104681][ T7735] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 142.120687][ T7735] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 142.404181][ T7757] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 142.963640][ T7791] syz-executor.2[7791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.963809][ T7791] syz-executor.2[7791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.054079][ T7794] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 143.161750][ T7801] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 143.297814][ T7803] team0: entered promiscuous mode [ 143.311999][ T7811] sock: sock_timestamping_bind_phc: sock not bind to device [ 143.323220][ T7803] team_slave_0: entered promiscuous mode [ 143.329792][ T7803] team_slave_1: entered promiscuous mode [ 143.348003][ T7803] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 143.968363][ T7838] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 144.234140][ T7852] nbd: must specify at least one socket [ 144.425840][ T7849] __nla_validate_parse: 19 callbacks suppressed [ 144.425861][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.569582][ T7862] sock: sock_timestamping_bind_phc: sock not bind to device [ 144.781367][ T1099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.842125][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 145.016108][ T1099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.142459][ T1099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.235147][ T1099] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.430230][ T1099] team0: left allmulticast mode [ 145.450480][ T1099] team_slave_0: left allmulticast mode [ 145.456833][ T1099] team_slave_1: left allmulticast mode [ 145.462482][ T1099] team0: left promiscuous mode [ 145.484178][ T1099] team_slave_0: left promiscuous mode [ 145.493811][ T1099] team_slave_1: left promiscuous mode [ 145.509098][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.519110][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.527185][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.536362][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.545687][ T5118] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.551949][ T1099] vlan0: left promiscuous mode [ 145.557769][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.560343][ T1099] bridge0: port 3(team0) entered disabled state [ 145.580489][ T7895] sock: sock_timestamping_bind_phc: sock not bind to device [ 145.609506][ T1099] bridge_slave_1: left allmulticast mode [ 145.634147][ T1099] bridge_slave_1: left promiscuous mode [ 145.655095][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.687954][ T1099] bridge_slave_0: left allmulticast mode [ 145.708870][ T1099] bridge_slave_0: left promiscuous mode [ 145.760085][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.254976][ T1099] batman_adv: batadv0: Removing interface: gretap1 [ 146.270757][ T4489] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.281247][ T4489] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.290317][ T4489] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.309239][ T4489] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.318806][ T4489] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 146.330834][ T4489] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.600663][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.617846][ T1099] bond0 (unregistering): Released all slaves [ 146.633517][ T1099] bond1 (unregistering): Released all slaves [ 146.650127][ T1099] bond2 (unregistering): (slave bond_slave_0): Releasing active interface [ 146.658891][ T1099] bond_slave_0: left promiscuous mode [ 146.675269][ T1099] bond2 (unregistering): Released all slaves [ 146.713771][ T7913] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 146.722512][ T7913] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 146.971135][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 147.147586][ T1099] hsr_slave_0: left promiscuous mode [ 147.153975][ T1099] hsr_slave_1: left promiscuous mode [ 147.165147][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.177925][ T7939] sock: sock_timestamping_bind_phc: sock not bind to device [ 147.180373][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.206725][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.214587][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.252772][ T1099] veth1_macvtap: left promiscuous mode [ 147.258521][ T1099] veth0_macvtap: left promiscuous mode [ 147.264264][ T1099] veth1_vlan: left promiscuous mode [ 147.270357][ T1099] veth0_vlan: left promiscuous mode [ 147.523635][ T1099] team0 (unregistering): Port device vlan0 removed [ 147.774783][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 147.864476][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 148.164735][ T7957] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 148.173284][ T7957] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.437066][ T4489] Bluetooth: hci4: command tx timeout [ 148.661346][ T7974] sock: sock_timestamping_bind_phc: sock not bind to device [ 148.701483][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 148.756352][ T7917] chnl_net:caif_netlink_parms(): no params data found [ 149.068246][ T7990] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 149.097678][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 149.139612][ T7917] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.166510][ T7917] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.183100][ T7917] bridge_slave_0: entered allmulticast mode [ 149.190901][ T7917] bridge_slave_0: entered promiscuous mode [ 149.203646][ T7955] tc_dump_action: action bad kind [ 149.212022][ T7917] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.223198][ T7917] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.233656][ T7917] bridge_slave_1: entered allmulticast mode [ 149.245325][ T7997] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 149.246340][ T7917] bridge_slave_1: entered promiscuous mode [ 149.274017][ T7997] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.314458][ T7917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.353563][ T7917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.576819][ T7917] team0: Port device team_slave_0 added [ 149.591135][ T7917] team0: Port device team_slave_1 added [ 149.673534][ T7917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.685633][ T7917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.716645][ T7917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.778574][ T7917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.794040][ T7917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.847444][ T8010] sock: sock_timestamping_bind_phc: sock not bind to device [ 149.854983][ T7917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.040329][ T7917] hsr_slave_0: entered promiscuous mode [ 150.060368][ T7917] hsr_slave_1: entered promiscuous mode [ 150.076624][ T7917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.084230][ T7917] Cannot create hsr debugfs directory [ 150.182930][ T7999] tc_dump_action: action bad kind [ 150.424062][ T8026] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 150.433601][ T8026] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 150.444463][ T8026] netlink: 'syz-executor.3': attribute type 14 has an invalid length. [ 150.466106][ T8026] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.475042][ T8026] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.483829][ T8026] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.492614][ T8026] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.502929][ T8026] vxlan0: entered promiscuous mode [ 150.515650][ T4489] Bluetooth: hci4: command tx timeout [ 150.523274][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.721777][ T7917] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 150.733347][ T7917] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 150.745076][ T7917] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 150.760532][ T7917] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 150.827444][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 150.893633][ T7917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.940213][ T7917] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.960157][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.967438][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.986972][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.994265][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.038087][ T8032] tc_dump_action: action bad kind [ 151.379473][ T7917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.549551][ T7917] veth0_vlan: entered promiscuous mode [ 151.591940][ T7917] veth1_vlan: entered promiscuous mode [ 151.666623][ T7917] veth0_macvtap: entered promiscuous mode [ 151.699619][ T7917] veth1_macvtap: entered promiscuous mode [ 151.762405][ T7917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.794309][ T7917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.826237][ T7917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.845589][ T7917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.872309][ T7917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.909211][ T7917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.933477][ T7917] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.966102][ T7917] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.985571][ T7917] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.999995][ T7917] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.145329][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.170953][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.227517][ T3821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.239656][ T3821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.315149][ T8087] sock: sock_timestamping_bind_phc: sock not bind to device [ 152.551154][ T8070] tc_dump_action: action bad kind [ 152.595932][ T5118] Bluetooth: hci4: command tx timeout [ 152.909472][ T8099] netlink: 'syz-executor.3': attribute type 22 has an invalid length. [ 152.951347][ T8099] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.040947][ T8101] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 153.161699][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.329494][ T8115] can: request_module (can-proto-0) failed. [ 153.433595][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 153.457436][ T8127] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 153.467148][ T8127] netlink: 'syz-executor.4': attribute type 14 has an invalid length. [ 153.483276][ T8127] netdevsim netdevsim4 €: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.491479][ T8127] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.500363][ T8127] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.509229][ T8127] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.525117][ T8127] vxlan0: entered promiscuous mode [ 153.542663][ T8132] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 153.572540][ T29] audit: type=1804 audit(1718287400.175:14): pid=8134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2241027547/syzkaller.am98p4/3/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 153.599940][ T29] audit: type=1804 audit(1718287400.205:15): pid=8132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2241027547/syzkaller.am98p4/3/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 153.639416][ T29] audit: type=1804 audit(1718287400.205:16): pid=8132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2241027547/syzkaller.am98p4/3/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 153.827919][ T8137] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.835958][ T8137] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.963798][ T8121] tc_dump_action: action bad kind [ 154.119787][ T8142] team0: Port device vlan0 added [ 154.256647][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 154.279564][ T8144] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.676142][ T5118] Bluetooth: hci4: command 0x0419 tx timeout [ 155.055956][ T8189] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 155.085598][ T8189] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 155.183292][ T8194] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.199316][ T8163] tc_dump_action: action bad kind [ 155.636628][ T8210] __nla_validate_parse: 8 callbacks suppressed [ 155.636648][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 155.894531][ T8230] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 155.922457][ T8230] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 156.034890][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 156.044917][ T8236] team0: Port device vlan0 removed [ 156.354721][ T8249] Cannot find map_set index 0 as target [ 156.609654][ T8255] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 156.640049][ T8255] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 156.765621][ T4489] Bluetooth: hci4: command 0x0419 tx timeout [ 156.879109][ T8260] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 156.910011][ T8260] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 156.942493][ T8260] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.816571][ T8287] x_tables: duplicate underflow at hook 2 [ 158.044577][ T5118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.073108][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.082905][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.096552][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.107489][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.124912][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.138034][ T5118] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 158.145608][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.176680][ T8305] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 158.222375][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 158.299261][ T8305] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.311647][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.337038][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.422304][ T8319] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 158.437313][ T8319] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 158.482840][ T8319] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.491881][ T8319] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.500710][ T8319] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.509922][ T8319] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.551525][ T8319] vxlan0: entered promiscuous mode [ 158.659415][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.680379][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.802844][ T12] netdevsim netdevsim4 € (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.814254][ T12] netdevsim netdevsim4 € (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.020099][ T12] bridge_slave_1: left allmulticast mode [ 159.026984][ T12] bridge_slave_1: left promiscuous mode [ 159.032804][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.044516][ T12] bridge_slave_0: left allmulticast mode [ 159.050504][ T12] bridge_slave_0: left promiscuous mode [ 159.058765][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.502174][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.511703][ T12] bond_slave_0: left promiscuous mode [ 159.527485][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.539881][ T12] bond_slave_1: left promiscuous mode [ 159.548363][ T29] audit: type=1804 audit(1718287406.155:17): pid=8341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3498201282/syzkaller.rzdGaa/126/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 159.580076][ T12] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 159.589310][ T12] macvlan2: left promiscuous mode [ 159.594560][ T12] team0: left promiscuous mode [ 159.600033][ T12] vlan0: left promiscuous mode [ 159.609850][ T12] team0: left allmulticast mode [ 159.614879][ T12] team_slave_0: left allmulticast mode [ 159.621507][ T12] team_slave_1: left allmulticast mode [ 159.632624][ T12] team_slave_0: left promiscuous mode [ 159.638361][ T12] team_slave_1: left promiscuous mode [ 159.654261][ T12] bond0 (unregistering): Released all slaves [ 159.669094][ T8309] tc_dump_action: action bad kind [ 159.690108][ T8301] chnl_net:caif_netlink_parms(): no params data found [ 159.746547][ T29] audit: type=1804 audit(1718287406.335:18): pid=8345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3498201282/syzkaller.rzdGaa/126/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 159.848537][ T8347] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 160.094762][ T8354] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 160.114562][ T8354] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 160.124165][ T8354] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 160.168242][ T8361] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 160.185488][ T8301] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.194453][ T8301] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.201702][ T4489] Bluetooth: hci2: command tx timeout [ 160.209606][ T8301] bridge_slave_0: entered allmulticast mode [ 160.217082][ T8301] bridge_slave_0: entered promiscuous mode [ 160.225081][ T8363] netlink: 'syz-executor.2': attribute type 22 has an invalid length. [ 160.293001][ T8301] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.302517][ T8301] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.310023][ T8301] bridge_slave_1: entered allmulticast mode [ 160.318652][ T8301] bridge_slave_1: entered promiscuous mode [ 160.367765][ T12] hsr_slave_0: left promiscuous mode [ 160.374786][ T12] hsr_slave_1: left promiscuous mode [ 160.416837][ T12] veth1_macvtap: left promiscuous mode [ 160.422440][ T12] veth0_macvtap: left promiscuous mode [ 160.439934][ T12] veth1_vlan: left promiscuous mode [ 160.445254][ T12] veth0_vlan: left promiscuous mode [ 160.518193][ T8373] IPVS: set_ctl: invalid protocol: 98 172.20.20.36:20000 [ 160.725145][ T12] team0 (unregistering): Port device vlan0 removed [ 160.992258][ T12] team0 (unregistering): Port device team_slave_1 removed [ 161.040704][ T12] team0 (unregistering): Port device team_slave_0 removed [ 161.582780][ T8301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.627166][ T8301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.760959][ T8384] ÿÿÿ: renamed from vlan1 [ 161.800166][ T8301] team0: Port device team_slave_0 added [ 161.812862][ T8301] team0: Port device team_slave_1 added [ 161.822023][ T8384] __nla_validate_parse: 2 callbacks suppressed [ 161.822042][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 162.064761][ T8301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.116938][ T8301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.212850][ T8301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.233095][ T8301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.243458][ T8401] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 162.260832][ T8401] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 162.271900][ T8301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.315807][ T4489] Bluetooth: hci2: command tx timeout [ 162.341677][ T8301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.428139][ T8407] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 162.489148][ T8407] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 162.528032][ T8407] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 162.549601][ T29] audit: type=1804 audit(1718287409.145:19): pid=8402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2241027547/syzkaller.am98p4/24/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 162.769551][ T29] audit: type=1804 audit(1718287409.375:20): pid=8414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2241027547/syzkaller.am98p4/24/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 162.929938][ T8301] hsr_slave_0: entered promiscuous mode [ 162.942215][ T8301] hsr_slave_1: entered promiscuous mode [ 162.953065][ T8301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.970643][ T8301] Cannot create hsr debugfs directory [ 163.027915][ T12] IPVS: stop unused estimator thread 0... [ 163.280386][ T8417] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 163.359807][ T8419] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 163.395915][ T8419] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 163.896554][ T8431] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 163.912791][ T8431] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 163.921248][ T8431] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 163.929693][ T8431] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 163.975640][ T8431] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 163.989224][ T8431] netlink: 'syz-executor.2': attribute type 37 has an invalid length. [ 164.015709][ T8431] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 164.027551][ T8431] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.120857][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.141509][ T8447] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 164.270182][ T8447] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 164.287473][ T8457] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 164.301281][ T8447] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 164.326709][ T8447] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 164.365612][ T4489] Bluetooth: hci2: command tx timeout [ 164.394404][ T8457] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 164.408961][ T8457] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 164.411782][ T8461] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.422141][ T8457] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 164.561113][ T8301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 164.572277][ T8301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 164.591467][ T8301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 164.606491][ T8301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 164.677347][ T8467] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 164.776081][ T8301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.803266][ T8301] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.815414][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.822588][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.871263][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.878486][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.932434][ T8301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.300341][ T8491] veth1_macvtap: left promiscuous mode [ 165.318938][ T8491] macsec0: entered promiscuous mode [ 165.334808][ T8491] macsec0: entered allmulticast mode [ 165.418413][ T8498] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 165.431167][ T8301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.439392][ T8486] veth1_macvtap: entered promiscuous mode [ 165.445167][ T8486] veth1_macvtap: entered allmulticast mode [ 165.471787][ T8486] macsec0: left promiscuous mode [ 165.481886][ T8486] macsec0: left allmulticast mode [ 165.496503][ T8486] veth1_macvtap: left allmulticast mode [ 165.662791][ T8506] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 165.696170][ T8508] validate_nla: 1 callbacks suppressed [ 165.696191][ T8508] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 166.013804][ T8301] veth0_vlan: entered promiscuous mode [ 166.094718][ T8301] veth1_vlan: entered promiscuous mode [ 166.195104][ T8301] veth0_macvtap: entered promiscuous mode [ 166.234949][ T8301] veth1_macvtap: entered promiscuous mode [ 166.299052][ T8301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.310678][ T8301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.337650][ T8301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.367722][ T8533] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 166.418422][ T8534] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 166.436623][ T4489] Bluetooth: hci2: command tx timeout [ 166.467897][ T8301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.522515][ T8301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.580255][ T8301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.614100][ T8301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.624734][ T8301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.637686][ T8301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.651724][ T8301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.712790][ T8547] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 166.718398][ T8301] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.730601][ T8301] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.743284][ T8301] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.753081][ T8301] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.026849][ T3821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.060493][ T3821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.089009][ T8569] veth1_macvtap: left promiscuous mode [ 167.100343][ T8569] macsec0: entered promiscuous mode [ 167.110510][ T8569] macsec0: entered allmulticast mode [ 167.177641][ T8571] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 167.189784][ T8571] __nla_validate_parse: 8 callbacks suppressed [ 167.189804][ T8571] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 167.203720][ T8569] veth1_macvtap: entered promiscuous mode [ 167.219238][ T8569] veth1_macvtap: entered allmulticast mode [ 167.227002][ T8569] macsec0: left promiscuous mode [ 167.233135][ T8569] macsec0: left allmulticast mode [ 167.241799][ T8569] veth1_macvtap: left allmulticast mode [ 167.268138][ T2922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.285466][ T2922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.412647][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 167.471123][ T8586] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 167.492809][ T8586] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 167.827944][ T8605] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.835269][ T8605] IPv6: NLM_F_CREATE should be set when creating new route [ 167.842645][ T8605] IPv6: NLM_F_CREATE should be set when creating new route [ 167.911859][ T8610] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 167.922055][ T8610] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.000916][ T8614] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 168.030338][ T8614] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.347444][ T8634] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 168.387517][ T8634] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.427520][ T8640] veth1_macvtap: left promiscuous mode [ 168.443359][ T8640] macsec0: entered promiscuous mode [ 168.453500][ T8640] macsec0: entered allmulticast mode [ 168.502308][ T8642] veth1_macvtap: left promiscuous mode [ 168.511046][ T8642] macsec0: entered allmulticast mode [ 168.523671][ T8643] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 168.532948][ T8643] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.4'. [ 168.542928][ T8646] veth1_macvtap: entered promiscuous mode [ 168.558358][ T8646] veth1_macvtap: entered allmulticast mode [ 168.564691][ T8646] macsec0: left allmulticast mode [ 168.570038][ T8646] veth1_macvtap: left allmulticast mode [ 168.577581][ T8640] veth1_macvtap: entered promiscuous mode [ 168.585819][ T8640] veth1_macvtap: entered allmulticast mode [ 168.592060][ T8640] macsec0: left promiscuous mode [ 168.597901][ T8640] macsec0: left allmulticast mode [ 168.604012][ T8640] veth1_macvtap: left allmulticast mode [ 168.783114][ T8658] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 168.948532][ T8668] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 169.154959][ T8676] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.321925][ T8684] batman_adv: batadv0: Adding interface: gretap2 [ 169.355751][ T8684] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.389339][ T8684] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 169.660548][ T8706] geneve3: entered promiscuous mode [ 169.668146][ T8706] geneve3: entered allmulticast mode [ 169.688018][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.797382][ T8714] veth1_macvtap: left promiscuous mode [ 169.815129][ T8714] macsec0: entered promiscuous mode [ 169.823691][ T8714] macsec0: entered allmulticast mode [ 169.897790][ T8714] veth1_macvtap: entered promiscuous mode [ 169.928604][ T8714] veth1_macvtap: entered allmulticast mode [ 169.945045][ T8714] macsec0: left promiscuous mode [ 169.958939][ T8714] macsec0: left allmulticast mode [ 169.966910][ T8714] veth1_macvtap: left allmulticast mode [ 170.087073][ T8724] x_tables: duplicate underflow at hook 3 [ 170.553298][ T8749] syzkaller1: entered promiscuous mode [ 170.593748][ T8749] syzkaller1: entered allmulticast mode [ 170.657166][ T8753] xt_nat: multiple ranges no longer supported [ 171.439649][ T8780] veth1_macvtap: left promiscuous mode [ 171.445205][ T8780] macsec0: entered allmulticast mode [ 171.527921][ T8780] veth1_macvtap: entered promiscuous mode [ 171.533716][ T8780] veth1_macvtap: entered allmulticast mode [ 171.546103][ T8780] macsec0: left allmulticast mode [ 171.559978][ T8780] veth1_macvtap: left allmulticast mode [ 171.581150][ T8794] validate_nla: 4 callbacks suppressed [ 171.581202][ T8794] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 171.644238][ T8794] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 172.466725][ T8832] netlink: 'syz-executor.3': attribute type 22 has an invalid length. [ 172.504201][ T8836] __nla_validate_parse: 5 callbacks suppressed [ 172.504236][ T8836] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 172.568148][ T8841] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 172.947621][ T8854] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 173.122143][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 174.149232][ T8876] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 174.573972][ T8885] netlink: 1760 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.629588][ T8885] netlink: 1760 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.872007][ T8883] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.033565][ T8903] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 175.207604][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 175.464718][ T8923] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 175.589039][ T8931] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 175.609023][ T8931] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 175.631338][ T8931] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 175.642835][ T8934] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 175.682266][ T8933] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 176.143362][ T8954] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 176.257474][ T8919] tc_dump_action: action bad kind [ 177.136181][ T8999] netlink: 'syz-executor.3': attribute type 22 has an invalid length. [ 177.210324][ T8995] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 177.270928][ T8995] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.280104][ T8995] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.290020][ T8995] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.299846][ T8995] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.315447][ T8995] vxlan0: entered promiscuous mode [ 177.701925][ T9017] __nla_validate_parse: 17 callbacks suppressed [ 177.701949][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.853054][ T9024] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 177.861756][ T9024] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.3'. [ 178.016347][ T9028] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.184338][ T9034] netlink: 'syz-executor.4': attribute type 22 has an invalid length. [ 178.216483][ T9034] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.588969][ T9042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.639556][ T9038] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.758229][ T9046] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 178.783160][ T9046] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 179.105193][ T9057] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 179.114154][ T9057] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.409834][ T9066] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 179.418085][ T9066] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.0'. [ 179.479854][ T9068] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 179.712654][ T9072] netlink: 'syz-executor.0': attribute type 22 has an invalid length. [ 179.739335][ T9072] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 179.833284][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 180.271148][ T9092] sock: sock_timestamping_bind_phc: sock not bind to device [ 180.870211][ T9096] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 181.701613][ T9135] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.580810][ T9168] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.833736][ T9174] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 183.365208][ T9190] __nla_validate_parse: 16 callbacks suppressed [ 183.365224][ T9190] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.518656][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 183.588854][ T9197] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.634920][ T9199] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 183.784881][ T9203] sock: sock_timestamping_bind_phc: sock not bind to device [ 184.903921][ T9223] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.926615][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.128712][ T9230] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 185.164167][ T2922] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.182232][ T29] audit: type=1804 audit(1718287431.785:21): pid=9234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2573020314/syzkaller.GDtTkq/52/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 185.194935][ T2922] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.444974][ T2922] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.487153][ T2922] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.673989][ T2922] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.732036][ T2922] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.959214][ T2922] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.008545][ T2922] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.147573][ T9254] pim6reg1: entered promiscuous mode [ 186.155785][ T9254] pim6reg1: entered allmulticast mode [ 186.420981][ T5118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.430794][ T2922] bridge_slave_1: left allmulticast mode [ 186.435608][ T5118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.444263][ T2922] bridge_slave_1: left promiscuous mode [ 186.455821][ T5118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.463253][ T2922] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.476494][ T5118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.486149][ T5118] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 186.496754][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 186.498087][ T5118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.538062][ T2922] bridge_slave_0: left allmulticast mode [ 186.551718][ T2922] bridge_slave_0: left promiscuous mode [ 186.559854][ T2922] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.021539][ T9273] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 187.128284][ T2922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.141433][ T2922] bond0 (unregistering): Released all slaves [ 187.160709][ T2922] bond1 (unregistering): (slave bond_slave_0): Releasing active interface [ 187.170399][ T2922] bond_slave_0: left promiscuous mode [ 187.179935][ T2922] bond1 (unregistering): Released all slaves [ 187.199150][ T2922] bond2 (unregistering): Released all slaves [ 187.213571][ T2922] bond3 (unregistering): Released all slaves [ 187.227777][ T9262] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.239898][ T9263] validate_nla: 2 callbacks suppressed [ 187.239911][ T9263] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 187.257167][ T9263] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 187.288862][ T9271] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 187.341528][ T9271] team0: Port device netdevsim0 added [ 187.671560][ T9281] tipc: Trying to set illegal importance in message [ 188.127874][ T9294] bridge_slave_1: left promiscuous mode [ 188.156188][ T9294] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.353333][ T9258] chnl_net:caif_netlink_parms(): no params data found [ 188.501102][ T9315] __nla_validate_parse: 2 callbacks suppressed [ 188.501128][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.593707][ T9311] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 188.605844][ T5118] Bluetooth: hci1: command tx timeout [ 189.208577][ T2922] hsr_slave_0: left promiscuous mode [ 189.228435][ T2922] hsr_slave_1: left promiscuous mode [ 189.311251][ T2922] veth1_macvtap: left promiscuous mode [ 189.322459][ T2922] veth0_macvtap: left promiscuous mode [ 189.346331][ T2922] veth1_vlan: left promiscuous mode [ 189.716500][ T2922] pim6reg (unregistering): left allmulticast mode [ 189.844898][ T9340] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.078344][ T9345] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 190.107124][ T9345] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 190.307603][ T9356] tipc: Trying to set illegal importance in message [ 190.645266][ T2922] team0 (unregistering): Port device team_slave_1 removed [ 190.675990][ T5118] Bluetooth: hci1: command tx timeout [ 190.739849][ T2922] team0 (unregistering): Port device team_slave_0 removed [ 191.059683][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.379688][ T9258] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.391950][ T9258] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.401263][ T9258] bridge_slave_0: entered allmulticast mode [ 191.418788][ T9258] bridge_slave_0: entered promiscuous mode [ 191.539540][ T9258] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.554907][ T9258] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.581871][ T9258] bridge_slave_1: entered allmulticast mode [ 191.612946][ T9258] bridge_slave_1: entered promiscuous mode [ 191.637697][ T9364] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 191.689299][ T9364] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 191.711143][ T9258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.714473][ T9364] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 191.764304][ T9258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.910437][ T9258] team0: Port device team_slave_0 added [ 191.923694][ T9258] team0: Port device team_slave_1 added [ 191.983834][ T9258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.993209][ T9258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.019365][ T9258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.038187][ T9258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.045296][ T9258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.072089][ T9258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.173800][ T9258] hsr_slave_0: entered promiscuous mode [ 192.186384][ T9258] hsr_slave_1: entered promiscuous mode [ 192.486764][ T9372] sock: sock_timestamping_bind_phc: sock not bind to device [ 192.630687][ T9374] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 192.755857][ T5118] Bluetooth: hci1: command tx timeout [ 192.765366][ T9379] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 192.929441][ T9258] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 192.969291][ T9258] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 193.004421][ T9385] smc: net device erspan0 applied user defined pnetid SYZ2 [ 193.004540][ T9258] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 193.065662][ T9258] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 193.191389][ T9393] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.379379][ T9402] sock: sock_timestamping_bind_phc: sock not bind to device [ 193.399368][ T9258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.409735][ T9403] TCP: tcp_parse_options: Illegal window scaling value 31 > 14 received [ 193.482050][ T9258] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.519062][ T6138] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.526290][ T6138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.555121][ T9408] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 193.569975][ T9408] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.588880][ T5203] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.596264][ T5203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.814262][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 193.893816][ T9258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.961572][ T9258] veth0_vlan: entered promiscuous mode [ 193.989212][ T9258] veth1_vlan: entered promiscuous mode [ 194.039432][ T9258] veth0_macvtap: entered promiscuous mode [ 194.050502][ T9258] veth1_macvtap: entered promiscuous mode [ 194.073999][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.086377][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.097065][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.107676][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.120903][ T9258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.136314][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.159815][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.171878][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.184710][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.196669][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.208055][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.218965][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.229076][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.239683][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.252196][ T9258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.276755][ T9258] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.290872][ T9258] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.301506][ T9258] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.312572][ T9258] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.378176][ T9430] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.490096][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.512164][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.546708][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.625058][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.650432][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.037250][ T9457] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 195.066696][ T9457] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 195.087330][ T9457] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 195.256676][ T9469] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 195.286661][ T9469] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 195.498463][ T9475] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 195.655685][ T9447] tc_dump_action: action bad kind [ 195.855960][ T9483] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 195.912764][ T9488] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.3'. [ 195.942546][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 196.027645][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 196.145362][ T9498] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 196.178258][ T9501] --map-set only usable from mangle table [ 196.413645][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 196.475322][ T9513] team0: Port device vlan0 added [ 196.605757][ T5118] Bluetooth: hci0: command 0x0406 tx timeout [ 196.744970][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.147786][ T9529] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 197.247129][ T4489] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 197.259114][ T4489] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 197.278137][ T4489] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 197.288562][ T4489] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 197.306170][ T4489] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 197.317642][ T4489] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 197.359226][ T9517] tc_dump_action: action bad kind [ 197.401323][ T9535] batman_adv: batadv0: Adding interface: gretap3 [ 197.413093][ T9535] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.438894][ T9535] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 197.761122][ T9530] chnl_net:caif_netlink_parms(): no params data found [ 197.921730][ T9556] sock: sock_timestamping_bind_phc: sock not bind to device [ 197.935027][ T9530] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.943447][ T9530] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.964488][ T9530] bridge_slave_0: entered allmulticast mode [ 197.987406][ T9530] bridge_slave_0: entered promiscuous mode [ 198.023731][ T9530] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.041237][ T9530] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.058442][ T9530] bridge_slave_1: entered allmulticast mode [ 198.073831][ T9530] bridge_slave_1: entered promiscuous mode [ 198.148555][ T9530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.165444][ T9530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.329588][ T9530] team0: Port device team_slave_0 added [ 198.350011][ T9530] team0: Port device team_slave_1 added [ 198.457510][ T9530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.464598][ T9530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.501451][ T9530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.524298][ T9565] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 198.543184][ T9530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.557132][ T9530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.585364][ T9563] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 198.593683][ T9530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.614461][ T9563] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 198.623434][ T9563] __nla_validate_parse: 4 callbacks suppressed [ 198.623453][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 198.935936][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.009796][ T9530] hsr_slave_0: entered promiscuous mode [ 199.035356][ T9530] hsr_slave_1: entered promiscuous mode [ 199.055345][ T9530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.071541][ T9530] Cannot create hsr debugfs directory [ 199.134103][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.292203][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.344377][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.396478][ T5118] Bluetooth: hci1: command tx timeout [ 199.773603][ T35] bridge_slave_1: left allmulticast mode [ 199.787309][ T35] bridge_slave_1: left promiscuous mode [ 199.789801][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 199.799739][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.812041][ T9601] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 199.836523][ T9601] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 199.857700][ T35] bridge_slave_0: left allmulticast mode [ 199.865729][ T35] bridge_slave_0: left promiscuous mode [ 199.871535][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.881378][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 200.599513][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.611051][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.623278][ T35] bond0 (unregistering): Released all slaves [ 200.967941][ T9640] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 200.983519][ T9640] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 200.998083][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.092670][ T35] hsr_slave_0: left promiscuous mode [ 201.107419][ T35] hsr_slave_1: left promiscuous mode [ 201.114484][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.129367][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.141388][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.154104][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.182830][ T35] veth1_macvtap: left promiscuous mode [ 201.188728][ T35] veth0_macvtap: left promiscuous mode [ 201.194395][ T35] veth1_vlan: left promiscuous mode [ 201.210115][ T35] veth0_vlan: left promiscuous mode [ 201.476948][ T4489] Bluetooth: hci1: command tx timeout [ 201.723814][ T9659] x_tables: duplicate underflow at hook 1 [ 201.950693][ T9657] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 201.951454][ T35] team0 (unregistering): Port device team_slave_1 removed [ 202.009683][ T35] team0 (unregistering): Port device team_slave_0 removed [ 202.415023][ T9647] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 202.681144][ T9678] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 202.691834][ T9675] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 202.695908][ T9678] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 202.712224][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 202.731847][ T9530] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 202.756617][ T9530] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 202.858825][ T9530] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 202.889569][ T9530] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 202.983574][ T9691] veth0_vlan: entered allmulticast mode [ 203.122467][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 203.252567][ T9530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.299573][ T9530] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.314721][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.321945][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.361246][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.368553][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.555640][ T4489] Bluetooth: hci1: command 0x040f tx timeout [ 203.773494][ T9530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.881747][ T9719] pim6reg: entered allmulticast mode [ 203.896817][ T9530] veth0_vlan: entered promiscuous mode [ 203.920885][ T9719] pim6reg: left allmulticast mode [ 204.039232][ T9530] veth1_vlan: entered promiscuous mode [ 204.130735][ T9530] veth0_macvtap: entered promiscuous mode [ 204.142496][ T9530] veth1_macvtap: entered promiscuous mode [ 204.172385][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.183181][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.193678][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.204451][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.217780][ T9530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.232803][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.244060][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.255097][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.270093][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.280329][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.290906][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.301302][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.312033][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.333044][ T9530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.345018][ T9738] lo: entered allmulticast mode [ 204.354632][ T9530] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.364216][ T9530] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.373277][ T9530] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.382821][ T9530] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.514177][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.544989][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.590839][ T2922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.634232][ T2922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.045155][ T9730] tc_dump_action: action bad kind [ 205.540262][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 205.611224][ T9760] ================================================================== [ 205.619353][ T9760] BUG: KASAN: slab-use-after-free in ax25_release+0x877/0x950 [ 205.626877][ T9760] Read of size 1 at addr ffff888021c6d4cc by task syz-executor.3/9760 [ 205.635055][ T9760] [ 205.637414][ T9760] CPU: 0 PID: 9760 Comm: syz-executor.3 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 205.647858][ T9760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 205.657959][ T9760] Call Trace: [ 205.661279][ T9760] [ 205.664241][ T9760] dump_stack_lvl+0x241/0x360 [ 205.668961][ T9760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.674192][ T9760] ? __pfx__printk+0x10/0x10 [ 205.678826][ T9760] ? _printk+0xd5/0x120 [ 205.683020][ T9760] ? __virt_addr_valid+0x183/0x520 [ 205.688164][ T9760] ? __virt_addr_valid+0x183/0x520 [ 205.693330][ T9760] print_report+0x169/0x550 [ 205.697872][ T9760] ? __virt_addr_valid+0x183/0x520 [ 205.703026][ T9760] ? __virt_addr_valid+0x183/0x520 [ 205.708174][ T9760] ? __virt_addr_valid+0x44e/0x520 [ 205.713322][ T9760] ? __phys_addr+0xba/0x170 [ 205.717860][ T9760] ? ax25_release+0x877/0x950 [ 205.722557][ T9760] kasan_report+0x143/0x180 [ 205.727517][ T9760] ? ax25_release+0x877/0x950 [ 205.732205][ T9760] ax25_release+0x877/0x950 [ 205.736723][ T9760] sock_close+0xbc/0x240 [ 205.740974][ T9760] ? __pfx_sock_close+0x10/0x10 [ 205.745829][ T9760] __fput+0x406/0x8b0 [ 205.749830][ T9760] task_work_run+0x24f/0x310 [ 205.754436][ T9760] ? __pfx_task_work_run+0x10/0x10 [ 205.759555][ T9760] ? syscall_exit_to_user_mode+0xa3/0x370 [ 205.765285][ T9760] syscall_exit_to_user_mode+0x168/0x370 [ 205.770941][ T9760] do_syscall_64+0x100/0x230 [ 205.775534][ T9760] ? clear_bhb_loop+0x35/0x90 [ 205.780215][ T9760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.786124][ T9760] RIP: 0033:0x7fbc5487cea9 [ 205.790544][ T9760] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 205.810150][ T9760] RSP: 002b:00007ffc8523d5f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 205.818589][ T9760] RAX: 0000000000000000 RBX: 00007fbc549b5980 RCX: 00007fbc5487cea9 [ 205.826583][ T9760] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 205.834557][ T9760] RBP: 00007fbc549b5980 R08: 000000008136572d R09: 0000001e00000000 [ 205.842581][ T9760] R10: 0000000080000000 R11: 0000000000000246 R12: 00000000000325b4 [ 205.850638][ T9760] R13: 00007fbc549b405c R14: 0000000000000032 R15: 00007fbc549b5980 [ 205.858620][ T9760] [ 205.861725][ T9760] [ 205.864050][ T9760] Allocated by task 9426: [ 205.868378][ T9760] kasan_save_track+0x3f/0x80 [ 205.873059][ T9760] __kasan_kmalloc+0x98/0xb0 [ 205.877651][ T9760] kmalloc_trace_noprof+0x19c/0x2c0 [ 205.882845][ T9760] ax25_dev_device_up+0x58/0x620 [ 205.887785][ T9760] ax25_device_event+0x4ed/0x570 [ 205.892720][ T9760] notifier_call_chain+0x19f/0x3e0 [ 205.897834][ T9760] __dev_notify_flags+0x207/0x400 [ 205.902892][ T9760] dev_change_flags+0xf0/0x1a0 [ 205.907662][ T9760] dev_ifsioc+0x7c8/0xe70 [ 205.911996][ T9760] dev_ioctl+0x719/0x1340 [ 205.916332][ T9760] sock_do_ioctl+0x240/0x460 [ 205.920929][ T9760] sock_ioctl+0x629/0x8e0 [ 205.925289][ T9760] __se_sys_ioctl+0xfc/0x170 [ 205.929885][ T9760] do_syscall_64+0xf3/0x230 [ 205.934384][ T9760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.940319][ T9760] [ 205.942646][ T9760] Freed by task 9767: [ 205.946618][ T9760] kasan_save_track+0x3f/0x80 [ 205.951293][ T9760] kasan_save_free_info+0x40/0x50 [ 205.956347][ T9760] poison_slab_object+0xe0/0x150 [ 205.961293][ T9760] __kasan_slab_free+0x37/0x60 [ 205.966060][ T9760] kfree+0x149/0x360 [ 205.969962][ T9760] ax25_device_event+0x523/0x570 [ 205.974898][ T9760] notifier_call_chain+0x19f/0x3e0 [ 205.980011][ T9760] __dev_notify_flags+0x207/0x400 [ 205.985040][ T9760] dev_change_flags+0xf0/0x1a0 [ 205.989835][ T9760] dev_ifsioc+0x7c8/0xe70 [ 205.994163][ T9760] dev_ioctl+0x719/0x1340 [ 205.998490][ T9760] sock_do_ioctl+0x240/0x460 [ 206.003082][ T9760] sock_ioctl+0x629/0x8e0 [ 206.007423][ T9760] __se_sys_ioctl+0xfc/0x170 [ 206.012014][ T9760] do_syscall_64+0xf3/0x230 [ 206.016529][ T9760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.022430][ T9760] [ 206.024757][ T9760] The buggy address belongs to the object at ffff888021c6d400 [ 206.024757][ T9760] which belongs to the cache kmalloc-256 of size 256 [ 206.038811][ T9760] The buggy address is located 204 bytes inside of [ 206.038811][ T9760] freed 256-byte region [ffff888021c6d400, ffff888021c6d500) [ 206.052602][ T9760] [ 206.054919][ T9760] The buggy address belongs to the physical page: [ 206.061357][ T9760] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21c6c [ 206.070153][ T9760] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 206.078662][ T9760] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 206.086656][ T9760] page_type: 0xffffefff(slab) [ 206.091339][ T9760] raw: 00fff00000000040 ffff888015041b40 ffffea0000a5cc00 dead000000000003 [ 206.099922][ T9760] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 206.108505][ T9760] head: 00fff00000000040 ffff888015041b40 ffffea0000a5cc00 dead000000000003 [ 206.117296][ T9760] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 206.125979][ T9760] head: 00fff00000000001 ffffea0000871b01 ffffffffffffffff 0000000000000000 [ 206.134651][ T9760] head: ffff888000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 206.143315][ T9760] page dumped because: kasan: bad access detected [ 206.149728][ T9760] page_owner tracks the page as allocated [ 206.155437][ T9760] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5115, tgid 5115 (syz-executor.3), ts 75925089521, free_ts 75915082958 [ 206.176993][ T9760] post_alloc_hook+0x1f3/0x230 [ 206.181767][ T9760] get_page_from_freelist+0x2e2d/0x2ee0 [ 206.187308][ T9760] __alloc_pages_noprof+0x256/0x6c0 [ 206.192500][ T9760] alloc_slab_page+0x5f/0x120 [ 206.197191][ T9760] allocate_slab+0x5a/0x2e0 [ 206.201702][ T9760] ___slab_alloc+0xcd1/0x14b0 [ 206.206380][ T9760] __slab_alloc+0x58/0xa0 [ 206.210706][ T9760] __kmalloc_noprof+0x257/0x400 [ 206.215558][ T9760] __register_sysctl_table+0xb53/0x1460 [ 206.221105][ T9760] neigh_sysctl_register+0x3f8/0x4e0 [ 206.226391][ T9760] devinet_sysctl_register+0xaf/0x1f0 [ 206.231771][ T9760] inetdev_init+0x296/0x4d0 [ 206.236282][ T9760] inetdev_event+0x338/0x15c0 [ 206.240965][ T9760] notifier_call_chain+0x19f/0x3e0 [ 206.246074][ T9760] register_netdevice+0x1570/0x19e0 [ 206.251269][ T9760] veth_newlink+0x628/0xcd0 [ 206.255796][ T9760] page last free pid 5115 tgid 5115 stack trace: [ 206.262150][ T9760] free_unref_page+0xd22/0xea0 [ 206.266955][ T9760] __put_partials+0xeb/0x130 [ 206.271556][ T9760] put_cpu_partial+0x17c/0x250 [ 206.276326][ T9760] __slab_free+0x2ea/0x3d0 [ 206.280753][ T9760] qlist_free_all+0x9e/0x140 [ 206.285350][ T9760] kasan_quarantine_reduce+0x14f/0x170 [ 206.290812][ T9760] __kasan_slab_alloc+0x23/0x80 [ 206.295668][ T9760] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 206.301565][ T9760] __alloc_skb+0x1c3/0x440 [ 206.305978][ T9760] netlink_sendmsg+0x631/0xcb0 [ 206.310741][ T9760] __sock_sendmsg+0x221/0x270 [ 206.315424][ T9760] __sys_sendto+0x3a4/0x4f0 [ 206.319928][ T9760] __x64_sys_sendto+0xde/0x100 [ 206.324697][ T9760] do_syscall_64+0xf3/0x230 [ 206.329198][ T9760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.335094][ T9760] [ 206.337416][ T9760] Memory state around the buggy address: [ 206.343040][ T9760] ffff888021c6d380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 206.351101][ T9760] ffff888021c6d400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 206.359158][ T9760] >ffff888021c6d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 206.367223][ T9760] ^ [ 206.373652][ T9760] ffff888021c6d500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 206.381736][ T9760] ffff888021c6d580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 206.389802][ T9760] ================================================================== [ 206.405938][ T9760] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 206.413274][ T9760] CPU: 1 PID: 9760 Comm: syz-executor.3 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 206.423714][ T9760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 206.433789][ T9760] Call Trace: [ 206.437086][ T9760] [ 206.440045][ T9760] dump_stack_lvl+0x241/0x360 [ 206.444762][ T9760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.449990][ T9760] ? __pfx__printk+0x10/0x10 [ 206.454609][ T9760] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 206.460618][ T9760] ? vscnprintf+0x5d/0x90 [ 206.464988][ T9760] panic+0x349/0x860 [ 206.468913][ T9760] ? check_panic_on_warn+0x21/0xb0 [ 206.474050][ T9760] ? __pfx_panic+0x10/0x10 [ 206.478483][ T9760] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 206.484485][ T9760] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 206.490861][ T9760] check_panic_on_warn+0x86/0xb0 [ 206.495818][ T9760] ? ax25_release+0x877/0x950 [ 206.500512][ T9760] end_report+0x77/0x160 [ 206.504769][ T9760] kasan_report+0x154/0x180 [ 206.509282][ T9760] ? ax25_release+0x877/0x950 [ 206.513974][ T9760] ax25_release+0x877/0x950 [ 206.518507][ T9760] sock_close+0xbc/0x240 [ 206.522758][ T9760] ? __pfx_sock_close+0x10/0x10 [ 206.527633][ T9760] __fput+0x406/0x8b0 [ 206.531621][ T9760] task_work_run+0x24f/0x310 [ 206.536220][ T9760] ? __pfx_task_work_run+0x10/0x10 [ 206.541343][ T9760] ? syscall_exit_to_user_mode+0xa3/0x370 [ 206.547096][ T9760] syscall_exit_to_user_mode+0x168/0x370 [ 206.552862][ T9760] do_syscall_64+0x100/0x230 [ 206.557474][ T9760] ? clear_bhb_loop+0x35/0x90 [ 206.562186][ T9760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.568170][ T9760] RIP: 0033:0x7fbc5487cea9 [ 206.572593][ T9760] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 206.592215][ T9760] RSP: 002b:00007ffc8523d5f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 206.600647][ T9760] RAX: 0000000000000000 RBX: 00007fbc549b5980 RCX: 00007fbc5487cea9 [ 206.608618][ T9760] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 206.616588][ T9760] RBP: 00007fbc549b5980 R08: 000000008136572d R09: 0000001e00000000 [ 206.624555][ T9760] R10: 0000000080000000 R11: 0000000000000246 R12: 00000000000325b4 [ 206.632523][ T9760] R13: 00007fbc549b405c R14: 0000000000000032 R15: 00007fbc549b5980 [ 206.640503][ T9760] [ 206.643747][ T9760] Kernel Offset: disabled [ 206.648070][ T9760] Rebooting in 86400 seconds..