last executing test programs: 1m16.332919227s ago: executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="450a00000000000061113c0000000000180000000400000000000000000000009500000000000000d080555a2086b5bf97d81ef3b503266061c540809b0545dcea97aed83aab298ccf397d2a230a3f95e931526549a60bfef2a2b5bb71fd54330170bc1aea90b596d328038cff943b64bc9fa790e37afd6d96aac1b46aa32bcc5c2caca2728e2797f88dd9f7c90272dc1df49662dae4d2f9f307abf374b3add57981ecff61a3e5"], &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x2c}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000121401"], 0x18}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x48) 1m16.049373029s ago: executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = socket(0x10, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x12) r9 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/560]}, 0x2a8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r13}, 0x10) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_script(r14, &(0x7f0000000100), 0xfea7) sendfile(0xffffffffffffffff, r14, &(0x7f0000000000), 0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000840)={0x12c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x6c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x401}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x98}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r11}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r12}, {0x8}, {0x8, 0x1, r14}, {0x8, 0x1, r15}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xac3}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8004) 1m15.748515749s ago: executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r2, 0x33, 0x1, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m15.598517618s ago: executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0xa, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@xdp, &(0x7f0000000140)=0x80) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@newqdisc={0x44, 0x24, 0xf0b, 0xa, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x9, 0x0, 0x0, 0x3}}]}}]}, 0x44}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 59.656156967s ago: executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0xa, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@xdp, &(0x7f0000000140)=0x80) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@newqdisc={0x44, 0x24, 0xf0b, 0xa, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x9, 0x0, 0x0, 0x3}}]}}]}, 0x44}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 45.364860351s ago: executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0xa, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@xdp, &(0x7f0000000140)=0x80) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@newqdisc={0x44, 0x24, 0xf0b, 0xa, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x9, 0x0, 0x0, 0x3}}]}}]}, 0x44}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 34.52764417s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800181100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000850000007d0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cgroup.freeze\x00', 0x100002, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000, 0x1000}, 0x20) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x1000, 0x78, &(0x7f0000000b40)="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", &(0x7f00000001c0)=""/120, 0x7ff, 0x0, 0xc4, 0x10, &(0x7f0000000400)="e850a2b3f208214489acc5d31650615762ac7b76a6a3b77969a6c8b7864a26d8355beff9d461c3b56bd10715cff682348501dfa59919a05694a8fb4e05b56f4dcf7cc260c59b857da705bdb1b62b2b6d33d50ba4f8e40c7371b40bcf86d36af017ebb35258c8e789f43cf1091d073a8d6a8640900a057f40630e9473977a99894ba3d767e2982787edd26ae71c64d521a2c77c640b7a65ee0fd5fadf7c3b90097379db148c73c936521d7d49b98404815a0dbf219c3185a32ecb4b43a75539b97d6e6717", &(0x7f0000000080)="7a1b582cff18c6c5239ff2be0f02fcde", 0x1, 0x0, 0xff}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000ec00000000000000000000e500ffff0000000095"], &(0x7f0000000180)='GPL\x00', 0x9, 0x25f, &(0x7f00000016c0)=""/4112}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffe85) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) ioctl$TUNSETOFFLOAD(r6, 0x4010744d, 0x20000000) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x70, r7, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x1) 34.412082137s ago: executing program 2: write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900028073797a32000000000900010073797a3000000000080005400000000f5c0000000c0a01080000000000000000010000000900020073797a3200000000300003802c000080080003400000000220000b801c0001800a0001006c696d69740000000c00028008000440000000010900010073797a3000000000140000001000010000000000000000000000000a"], 0xe0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x13, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = socket$inet6(0xa, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f0000000940)=[{&(0x7f0000000640)="f5", 0x1}], 0x1, 0x1000000) tee(r2, r6, 0xaf5, 0x0) write$binfmt_elf64(r4, &(0x7f0000003380)=ANY=[], 0x18c6) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000000100b0085f7e3aa0cb9c7acfd9ab1f552ce2e9b4f774798ff106087cb1eb8b5cf8a44313670571cb2507c153224f0f1096b76e52c94a4d8ab7259e42f78b9beb7c669b6bdce419f3348d0542a4666f48b79fc09652b1875a5f6e4ae0869df8124d62af813eefae8e9804eeb7e226e3f16d55091ee9f000000002729342c6220a9d6868e1b4699bf430cc1099e80598917ed"], 0x20}}, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xe}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001480)) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000014c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@bloom_filter={0x1e, 0x0, 0x4, 0x0, 0x2000, 0xffffffffffffffff, 0xff, '\x00', 0x0, r8, 0x3}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) 34.074020099s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xe}}}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4000000) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'geneve0\x00', 0x0}) r5 = socket(0x11, 0x3, 0x0) sendto$packet(r5, &(0x7f0000000000)="1412e0c84935a9738e0ff2f788a8", 0x12, 0x0, &(0x7f00000007c0)={0x11, 0x700, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1}, 0x24}}, 0x0) 32.221444566s ago: executing program 1: r0 = socket$kcm(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000100), 0x120) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000980)="f3", 0x1}], 0x1) write$ppp(r4, &(0x7f0000000180)='l', 0x1) write$binfmt_misc(r4, 0x0, 0xfdef) write(r2, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @multicast, 'bridge0\x00'}}, 0x1e) write$cgroup_subtree(r1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) socket$kcm(0xa, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000100), 0x120) (async) socket$kcm(0x10, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) pipe(&(0x7f0000000080)) (async) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) (async) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000980)="f3", 0x1}], 0x1) (async) write$ppp(r4, &(0x7f0000000180)='l', 0x1) (async) write$binfmt_misc(r4, 0x0, 0xfdef) (async) write(r2, 0x0, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) (async) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @multicast, 'bridge0\x00'}}, 0x1e) (async) write$cgroup_subtree(r1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) (async) 31.899575677s ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'batadv_slave_0\x00', 0x100}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000f0000000000003490f82bf77b2a82a671c1209e6e873b9a19135d607149c68d0daa96906e4da3c227a9acb2c3375c46c0ba56dc4f8d9d38b589d9186011473191ed5f2a8ed07eeacc55e3f2ab18e97b0ec7bf5ba59d120dc6aa8139383d1a56ae44e6f30032482a4f1160b92532ba84de32848e8944e29e7ff15ad8901a8d04"], 0x0, 0x26}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8f0cb97907081175f37538e486dd"], 0xfdef) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0xfdef) 31.856452121s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x60, 0x4) sendto$inet(r3, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="0c010000110021040400"/20, @ANYRES32, @ANYRES8=r0], 0x10c}}, 0x4000010) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 31.524539106s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x0, 0xd8, 0xc, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0x18, 0x30, 0x25, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x3c, r3, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000880), 0x12) r7 = syz_open_procfs$namespace(0x0, 0x0) ioctl$TUNSETIFF(r7, 0xb701, 0x0) write$cgroup_int(r5, &(0x7f0000000040), 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="7d8b29"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r11}, 0x10) socket(0x10, 0x3, 0x0) 31.514922205s ago: executing program 3: unshare(0x22020400) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x20000002, 0x4) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000b80)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x90) (rerun: 32) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002240)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x80000001}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) (async, rerun: 64) pselect6(0x40, &(0x7f0000000740)={0x8000000000000001}, &(0x7f00000008c0)={0x4}, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x2, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='memory.swap.high\x00', 0x2, 0x0) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x0, &(0x7f00000001c0), 0x4) (async) r6 = socket$kcm(0x10, 0x2, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r7) (async) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="dd57f595bd8dc1d9fd42fb6c31940862ca7268fd4634c401bcf90667e149a16a7703ab588626f8ffedb2d36f3e1c48210bc372f04aecfec400cc09fb644232890f48965d76782d081e5a256779e8334a2032cdd697a35fab4bd0", 0x5a}, {&(0x7f0000000200)="09ccd750f1cc53f4e9e00e36d4674b19e97bece3c29fe7f67ec9cb612164c2d2cb2932b199db463fe2788076e128408ca40344c5189585576cd1f9ac5c6b91d6f5694b6fea3ef8bfbe792ad235bd40cc2a818c55d4358a0861bd26fd3ff312143d26ad7982cb04d3598cfa18381682b7769ceeb5239431e1", 0x78}, {&(0x7f0000000280)="72fad1923591af69c948ce91a7a5a5ad44275d561b2bfd91f6001d0fdf634500bf20d96eb5653e9c6f3713310954837a45027025dffe87d93d398092198150ae87e9332c407c4386ef278fc67c5864bfb3708ad34cc227dc189d3dcd3eb27cb2f6c9306dccb5e808c0b44560a6eff4d876a8611281fb693a38a5f5f536e8f3ff5928e1b2ef35d7689d161d26c969", 0x8e}, {&(0x7f0000000340)="433330ee76b50d52f8d69d2cf8c636", 0xf}, {&(0x7f0000000380)="8d90f61ef80aca32c1b078170660656da0b9d8a15949fc414a980575fab41178050fff4a978ff9b3a9edbcdf92fae6e7c7381423711e864be85f2f37401503b5618185c239e3df760a92cd25a3302b816693d2f9b9cde0b10ca8c948c7d7c8b414ed3c2cd4a9f35401f7c80336f218a633d641946ef76ca2a80699c586cbfcaae19b3a2dd4f1f0c95c5cd28886ecd91e6958a8629a85934af409d222b4f38ca0a6718f31d878e580c3da1cd8850a556362bf6368ff83ee7d251a95453318a05037c7ee92f217009b8095d50d3b57138cfc4cd3246ef89742bef51c29", 0xdc}], 0x5}, 0x4) r9 = socket(0x1e, 0x4, 0x0) getsockopt$MRT(r9, 0x0, 0x0, 0x0, &(0x7f0000000580)) 31.329608569s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000005580)=[{&(0x7f0000000380)='p', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f0000005700)='7', 0x1}], 0x1, &(0x7f0000005a40)=[{0x10}, {0x10, 0x1, 0x1}], 0x20}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x5, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x2c, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010e90204000000100000000000000000", @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x220001, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) 31.255088054s ago: executing program 4: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x200, 0x0, 0x8}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x200, 0x0, 0x8}) accept4$alg(r0, 0x0, 0x0, 0x80800) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x9}, 0x90) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x9}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) read(r4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) (async) r5 = socket$netlink(0x10, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r7 = socket$rxrpc(0x21, 0x2, 0xa) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000ffff04850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r8}, 0x10) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x400000000000009) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', r6, 0xffffffffffffffff, 0xfffffffc, 0x2}, 0xab) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@cgroup=r4, r11, 0x26}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) (async) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) poll(&(0x7f00000000c0)=[{r7}], 0x1, 0xf49) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000240), 0x4) (async) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000240), 0x4) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090800000000000000000900000008000300", @ANYRES32=0x0, @ANYBLOB="0c0100000000000000"], 0x28}}, 0x0) 31.144568278s ago: executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = socket(0x10, 0x5, 0xfff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x12) r9 = socket(0xa, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000030000000000000081006e7230000000000000002000000000007465616d300000000000000000000000766c616e30000000000000010001000000000068307b746f5f7465616d000000aaaaaaaaaabb000000000000aaaaaaaaaabb0000000000000000d0000000d000000000010000766c616e0069df4e5100000000000000000000079ba31300000000000000000008000000000001010000650000000700636f6e6e6c6162656c0000000000000000000000000000000000000020000000080000000000000000000000000000004e4651544555450000000000007f000000000000000000000000000000000000080000000000000000000000000000040000000000000000000000004b5d0000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000004000000000000000000000000000000000000000000000000000001000000feffffff010000000b000000000000000000626f6e643000000000000000000000007465616d300000000000000000000000626f6e64300000000000006c73c387735cc18268315f746f5f62726964676500aaaaaaaaaabb000000000000ffffffffffff00000008000000007000000070000000a0000000434f4e4e5345434d41524b0000000000827900000000000000000000000000000800"/560]}, 0x2a8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r13}, 0x10) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_script(r14, &(0x7f0000000100), 0xfea7) sendfile(0xffffffffffffffff, r14, &(0x7f0000000000), 0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000840)={0x12c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x6c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x401}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x98}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r11}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r12}, {0x8}, {0x8, 0x1, r14}, {0x8, 0x1, r15}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xac3}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8004) 31.085581802s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x484, &(0x7f0000000000)={0x11, @multicast1, 0x1e01, 0x3, 'dh\x00'}, 0x2c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x200, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20}}, [0xff, 0x3, 0xce, 0x8, 0x10000, 0x6, 0x1, 0x40, 0x5, 0x9, 0xf6, 0x200, 0x1, 0x7, 0x2]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={r4, 0x8, 0x173}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x74, 0x30, 0x400, 0x70bd2c, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private2}, @TCA_CT_LABELS={0x14, 0x7, "ef6a8457727885e48ed2c9915addd5aa"}, @TCA_CT_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={r4, 0x6}, 0x8) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x4e21, @local}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000b80)=[@in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e24, @private=0xa010100}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0x55, @dev={0xfe, 0x80, '\x00', 0x17}, 0x2}, @in6={0xa, 0x4e24, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}], 0x78) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r4, 0x357d, 0x7}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000340), &(0x7f0000000380)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000840)='cgroup.threads\x00', 0x2, 0x0) r9 = getpid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r9, 0x12) write$cgroup_int(r8, &(0x7f0000000100)=0x795e, 0x38) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, 0x7fffffff, 0x20, 0x7, 0x100, 0xb, 0x40280080, r10}) r11 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100018000000000000000a0000000000000095000000000000eebea00000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x90) sendmsg$inet_sctp(r11, &(0x7f0000000740)={&(0x7f00000004c0)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000500)="57e94dcb7c7bec14f91579f145b3bc8ee959a12e3e571972468c2a01c68a379c8baaf106dd0443ff7cf00a44b9638d41b6a43147000c121358afca674a61516ad2c39deac205c0e135fcf93b23ef66e87c4d129a8d1477ed7b58db0270406358a5ccccb86aa19694d62dcac83d136fb626abce027e9b0ecbbd2b7c3e54bf4e31504d360b130fd79bfabbd0cc28b23846b71b59a1d68d8b6e022486becb081f3b6977ad1100d79f46053394a8aeadeeb7f32ea2ac533b53af385ba8487e2d903e", 0xc0}, {&(0x7f00000005c0)="ae51d80cd95350a6c6d9eddf2d75186a5732b869984ff75a329f403661ac1fb1f50b56ef4780564141183ea2a7064c9463392f0c9a2f8d1b9336c0033ba8fdb1699de37844abaf1cbe040646e233f5189ae718c76661e24a90a00f7133c4cfa8", 0x60}], 0x2, &(0x7f0000000a00)=ANY=[@ANYRESOCT=r3, @ANYRES32=r6, @ANYBLOB="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"], 0xa0, 0x20000040}, 0x4000000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000780)={r6, 0x7d, "2be6bf968078b2274f454e19bfe41109e029c9552e6a10ea12accc366adcda3990cb71e1d2806632b851e83427183e545e4d34f34b23ba90d50cc0a6a042eb93eb342aa9e38eac7862e9846e5f07ddaf6e2b917760d5d1b088669032ed36b015ec13b372cd534e5dfab8816e9d9072867e9d6021b41fe962ee59825fb0"}, &(0x7f0000000840)=0x85) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000880)=@assoc_value={0x0}, &(0x7f00000008c0)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r11, 0x84, 0x6, &(0x7f0000000900)={r12, @in6={{0xa, 0x4e22, 0x1000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}}}, &(0x7f00000009c0)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r12, 0x1f, 0x30}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104000010000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002c0002000000050024"], 0x44}}, 0x0) 30.822791183s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x20000000000001ba, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (async) bind$unix(0xffffffffffffffff, &(0x7f0000001a40)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) listen(r0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) (async, rerun: 32) r3 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) (async) bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0) (async, rerun: 64) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) (async, rerun: 64) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000100)=0x1) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000280)={'geneve0\x00'}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x1}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xcc7e, '\x00', r1, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x48) (async) ioctl$TUNSETTXFILTER(r8, 0x400454cb, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000020240)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x50, r9, 0x4ae96000) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) 30.818953362s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xfffffe1f, &(0x7f00000004c0)=""/153}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x12, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b688a8", 0x0, 0x4, 0x0, 0x20, 0x0, &(0x7f0000000240)="7028bf1f2eb36d942194261b81b3f1c3c1641dc71dea27044ca76e52479752acb2b6d28deb9520c0685b17ccad5060545b9d36b271fdeaea64eb9fbe6d20614987a653afe43d561d8d6618f01c70c9accaf84ee83cf58b4d953e0c", &(0x7f0000000000), 0x0, 0x0, 0xc}, 0x31) 30.676120585s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xe}}}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4000000) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'geneve0\x00', 0x0}) r5 = socket(0x11, 0x3, 0x0) sendto$packet(r5, &(0x7f0000000000)="1412e0c84935a9738e0ff2f788a8", 0x12, 0x0, &(0x7f00000007c0)={0x11, 0x700, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 30.638886412s ago: executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x5, 0x4, 0xadd, 0x5, r2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000300), 0x20000000}, 0x20) close(r2) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={r3, &(0x7f0000000240), 0x0}, 0x20) write(r1, &(0x7f0000000200)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0x1fc0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x68, 0x30, 0xc808e8d6fcb00ba1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 30.574761083s ago: executing program 2: sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="034886dd020027000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 30.507356762s ago: executing program 1: connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x7, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.415730414s ago: executing program 4: unshare(0x20600) unshare(0x42000000) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 30.021776729s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800181100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000850000007d0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cgroup.freeze\x00', 0x100002, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000, 0x1000}, 0x20) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x1000, 0x78, &(0x7f0000000b40)="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", &(0x7f00000001c0)=""/120, 0x7ff, 0x0, 0xc4, 0x10, &(0x7f0000000400)="e850a2b3f208214489acc5d31650615762ac7b76a6a3b77969a6c8b7864a26d8355beff9d461c3b56bd10715cff682348501dfa59919a05694a8fb4e05b56f4dcf7cc260c59b857da705bdb1b62b2b6d33d50ba4f8e40c7371b40bcf86d36af017ebb35258c8e789f43cf1091d073a8d6a8640900a057f40630e9473977a99894ba3d767e2982787edd26ae71c64d521a2c77c640b7a65ee0fd5fadf7c3b90097379db148c73c936521d7d49b98404815a0dbf219c3185a32ecb4b43a75539b97d6e6717", &(0x7f0000000080)="7a1b582cff18c6c5239ff2be0f02fcde", 0x1, 0x0, 0xff}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000ec00000000000000000000e500ffff0000000095"], &(0x7f0000000180)='GPL\x00', 0x9, 0x25f, &(0x7f00000016c0)=""/4112}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffe85) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) ioctl$TUNSETOFFLOAD(r6, 0x4010744d, 0x20000000) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x70, r7, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x1) 549.658854ms ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x0, 0xd8, 0xc, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0x18, 0x30, 0x25, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x3c, r3, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000880), 0x12) r7 = syz_open_procfs$namespace(0x0, 0x0) ioctl$TUNSETIFF(r7, 0xb701, 0x0) write$cgroup_int(r5, &(0x7f0000000040), 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="7d8b29"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r11}, 0x10) socket(0x10, 0x3, 0x0) 479.528403ms ago: executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x5c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x6f3c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0xfffffffc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0xfe7d, &(0x7f0000000000)=[@in]}, &(0x7f00000002c0)=0x10) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)=""/78, &(0x7f0000000180)=0x4e) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0}, 0x90) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x9}, 0x1c) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2c, 0x0, "6970db5e1a5e59ab54053861b182c1aa5bfa09d21b699379ab04eb29ee95bfd4aa2e83662eefcca878e3677208de36650006bfdf10d35ddf3148573cbc274287f6f94c55fc2a25f51f91b69e87873ea1"}, 0xd8) syz_emit_ethernet(0x17b, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000001450600fe8000000000000000000000000000bbff02000000000000000000000000000100004e22"], 0x0) 384.700374ms ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xe00, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000054000000030a01030000000000000000050000000900010073797a30000000000900030073797a32000000002800048008000140000000001400030076657468315f746f5f626f6e64000000080002400002000014000000020a090100000000000000000000000014000000110001"], 0xb0}}, 0x0) 0s ago: executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000004c001280110001006272696467655f736c617665000000003400058005001900020000000500090000000000050001"], 0x98}, 0x1, 0x0, 0x0, 0x400c045}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f0000000000), 0x4) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x17, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'macvlan0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x3, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x2, &(0x7f0000000280)={r9, 0x3, 0x6, @multicast}, 0x10) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlinkprop={0xdc, 0x6c, 0x4, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, 0x200, 0x2200}, [@IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ipvlan0\x00'}, {0x14, 0x35, 'macvlan1\x00'}, {0x14, 0x35, 'macvtap0\x00'}, {0x14, 0x35, 'veth0\x00'}, {0x14, 0x35, 'ip6erspan0\x00'}, {0x14, 0x35, 'pimreg\x00'}]}, @IFLA_MTU={0x8, 0x4, 0x1e0}, @IFLA_CARRIER={0x5, 0x21, 0x2}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "0470474dc6ed8e89c50cf2e08c0826a0"}]}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_NUM_RX_QUEUES={0x27, 0x20, 0xffff}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x60e4e}]}, 0xdc}, 0x1, 0xffffffea}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000040)={'batadv_slave_0\x00', 0x7f}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000004c001280110001006272696467655f736c617665000000003400058005001900020000000500090000000000050001"], 0x98}, 0x1, 0x0, 0x0, 0x400c045}, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f0000000000), 0x4) (async) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x17, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'macvlan0\x00'}) (async) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x3, 0x6, @multicast}, 0x10) (async) setsockopt$packet_add_memb(r7, 0x107, 0x2, &(0x7f0000000280)={r9, 0x3, 0x6, @multicast}, 0x10) (async) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlinkprop={0xdc, 0x6c, 0x4, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, 0x200, 0x2200}, [@IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ipvlan0\x00'}, {0x14, 0x35, 'macvlan1\x00'}, {0x14, 0x35, 'macvtap0\x00'}, {0x14, 0x35, 'veth0\x00'}, {0x14, 0x35, 'ip6erspan0\x00'}, {0x14, 0x35, 'pimreg\x00'}]}, @IFLA_MTU={0x8, 0x4, 0x1e0}, @IFLA_CARRIER={0x5, 0x21, 0x2}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "0470474dc6ed8e89c50cf2e08c0826a0"}]}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_NUM_RX_QUEUES={0x27, 0x20, 0xffff}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x60e4e}]}, 0xdc}, 0x1, 0xffffffea}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) (async) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000040)={'batadv_slave_0\x00', 0x7f}) (async) kernel console output (not intermixed with test programs): w IBSS network, BSSID 50:50:50:50:50:50 [ 385.521544][ T2419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.556412][ T2419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.575350][ T4492] Bluetooth: hci3: command tx timeout [ 385.707591][T16580] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 385.831875][T16585] syz-executor.3[16585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.832132][T16585] syz-executor.3[16585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.876522][T16585] syz-executor.3[16585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.903913][T16585] syz-executor.3[16585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.955774][T16585] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 386.012058][T16594] tipc: Started in network mode [ 386.026993][T16594] tipc: Node identity fec0ffff00000000000000000000001, cluster identity 4711 [ 386.046600][T16594] tipc: Enabling of bearer rejected, failed to enable media [ 386.068953][T16585] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 386.249517][T16608] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 386.261723][T16611] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 386.281021][T16608] nbd: couldn't find device at index 20 [ 386.306396][T16611] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 386.355932][T16611] cannot load conntrack support for proto=3 [ 386.406765][T16608] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 386.434088][T16611] lo speed is unknown, defaulting to 1000 [ 386.452010][T16611] lo speed is unknown, defaulting to 1000 [ 387.645960][T16661] lo speed is unknown, defaulting to 1000 [ 387.658460][T16661] lo speed is unknown, defaulting to 1000 [ 388.291945][T16667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.365327][T16682] netlink: 16410 bytes leftover after parsing attributes in process `syz-executor.2'. [ 388.478797][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 389.568606][T16723] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 389.837529][T16728] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 390.140539][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 390.192428][T16746] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 390.233395][T16750] netlink: 16410 bytes leftover after parsing attributes in process `syz-executor.2'. [ 390.366246][T16753] lo speed is unknown, defaulting to 1000 [ 390.411404][T16758] gretap0: refused to change device tx_queue_len [ 390.431346][T16758] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 390.471001][T16753] lo speed is unknown, defaulting to 1000 [ 391.149096][ T9744] tipc: Subscription rejected, illegal request [ 391.194145][T16785] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 392.243643][T16827] netlink: 16410 bytes leftover after parsing attributes in process `syz-executor.0'. [ 392.469192][T16833] bridge3: entered promiscuous mode [ 392.628969][T16839] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 392.916502][T16850] lo speed is unknown, defaulting to 1000 [ 392.925251][T16850] lo speed is unknown, defaulting to 1000 [ 393.164734][T16855] syzkaller1: entered promiscuous mode [ 393.178212][T16855] syzkaller1: entered allmulticast mode [ 393.832638][T16875] __nla_validate_parse: 4 callbacks suppressed [ 393.832660][T16875] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 394.573230][T16908] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 394.595038][T16908] openvswitch: netlink: Multiple metadata blocks provided [ 394.704140][T16908] tun0: tun_chr_ioctl cmd 1074025677 [ 394.726475][T16908] tun0: linktype set to 780 [ 395.037087][T16916] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 398.591661][T16984] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 400.073675][T17039] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 400.127347][T17040] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 400.158968][T17040] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 400.235607][T17040] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 400.277446][T17040] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.287481][T17040] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.296563][T17040] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.305505][T17040] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.316386][T17040] vxlan0: entered promiscuous mode [ 400.599514][T17064] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 400.816832][T17073] delete_channel: no stack [ 403.108878][ T9748] wlan0: Trigger new scan to find an IBSS to join [ 403.490332][T17135] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 403.992177][ T29] audit: type=1804 audit(1717719939.448:39): pid=17161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1300354073/syzkaller.ppkT7P/784/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 404.115883][T17169] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.4'. [ 404.209295][T17174] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 404.231235][T17174] netlink: 9352 bytes leftover after parsing attributes in process `syz-executor.4'. [ 404.273934][T17174] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 404.293405][T17174] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 404.387501][T17180] bridge19: entered promiscuous mode [ 404.393347][T17180] bridge19: entered allmulticast mode [ 404.496953][T17182] dccp_invalid_packet: P.Data Offset(0) too small [ 405.041809][ T29] audit: type=1804 audit(1717719940.488:40): pid=17202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1300354073/syzkaller.ppkT7P/785/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 406.139214][ T2485] wlan0: Trigger new scan to find an IBSS to join [ 406.537660][ T5124] Bluetooth: hci2: command 0x0405 tx timeout [ 407.127879][T17205] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 407.586518][T17246] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 407.774766][T17251] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 407.976303][T17258] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 408.040624][T17258] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 408.079124][T17258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.132047][T17258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.156379][T17258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.213324][T17258] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 408.257518][T17265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.315469][ T5124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 408.332311][ T5124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 408.346601][ T5124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 408.374746][ T5124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 408.387841][ T5124] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 408.417502][ T5124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 408.433448][ T9744] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.493507][ T5124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 408.505017][ T5124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 408.513364][ T5124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 408.523931][ T5124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 408.533545][ T5124] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 408.544609][ T5124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 408.586772][ T9744] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.737339][ T9744] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.763915][T17281] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 408.774989][T17281] tipc: Started in network mode [ 408.780328][T17281] tipc: Node identity 6, cluster identity 4711 [ 408.804758][T17281] tipc: Node number set to 6 [ 408.821298][ T9744] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.878277][T17270] lo speed is unknown, defaulting to 1000 [ 408.904737][T17273] lo speed is unknown, defaulting to 1000 [ 408.911376][T17270] lo speed is unknown, defaulting to 1000 [ 408.912878][T17283] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 408.965403][T17283] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 408.985346][T17283] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. [ 409.097147][ T9748] wlan0: Trigger new scan to find an IBSS to join [ 409.124143][ T9744] erspan0: left allmulticast mode [ 409.138775][ T9744] erspan0: left promiscuous mode [ 409.160717][ T9744] bridge0: port 3(erspan0) entered disabled state [ 409.181627][ T9744] bridge_slave_1: left allmulticast mode [ 409.194964][ T9744] bridge_slave_1: left promiscuous mode [ 409.200877][ T9744] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.242816][ T9744] bridge_slave_0: left promiscuous mode [ 409.255536][ T9744] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.065558][ T5568] wlan0: Creating new IBSS network, BSSID 32:48:68:6a:5e:b9 [ 410.480332][ T9744] bond4 (unregistering): (slave bridge14): Releasing backup interface [ 410.535927][ T5124] Bluetooth: hci0: command tx timeout [ 410.614446][ T5124] Bluetooth: hci1: command tx timeout [ 410.777689][ T9744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.793124][ T9744] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 410.819029][ T9744] bond0 (unregistering): Released all slaves [ 410.843968][ T9744] bond1 (unregistering): Released all slaves [ 410.866654][ T9744] bond2 (unregistering): Released all slaves [ 410.884924][ T9744] bond3 (unregistering): Released all slaves [ 410.901913][ T9744] bond4 (unregistering): Released all slaves [ 410.924410][T17273] lo speed is unknown, defaulting to 1000 [ 411.027311][T17300] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 411.186376][ T9744] IPVS: stopping backup sync thread 6353 ... [ 411.488999][T17325] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 411.653258][T17335] netlink: 16410 bytes leftover after parsing attributes in process `syz-executor.2'. [ 411.777825][T17343] bridge_slave_1: left allmulticast mode [ 411.785751][T17343] bridge_slave_1: left promiscuous mode [ 411.791781][T17343] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.809820][T17343] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 411.909472][T17270] chnl_net:caif_netlink_parms(): no params data found [ 412.101525][ T9744] hsr_slave_0: left promiscuous mode [ 412.109498][ T9744] hsr_slave_1: left promiscuous mode [ 412.116108][ T9744] batman_adv: batadv0: Removing interface: bapadv0 [ 412.123420][ T9744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.131830][ T9744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.143757][ T9744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.151853][ T9744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.175877][ T9744] veth1_vlan: left promiscuous mode [ 412.181236][ T9744] veth0_vlan: left promiscuous mode [ 412.338758][ T9744] pim6reg (unregistering): left allmulticast mode [ 412.616116][ T5124] Bluetooth: hci0: command tx timeout [ 412.694448][ T5124] Bluetooth: hci1: command tx timeout [ 412.787078][ T9744] bapadv0 (unregistering): Port device team_slave_1 removed [ 412.832919][ T9744] bapadv0 (unregistering): Port device team_slave_0 removed [ 413.362637][T17353] tun0: tun_chr_ioctl cmd 2147767519 [ 413.488286][T17270] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.501187][T17270] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.510710][T17270] bridge_slave_0: entered allmulticast mode [ 413.519984][T17270] bridge_slave_0: entered promiscuous mode [ 413.536840][ T25] IPVS: starting estimator thread 0... [ 413.624980][T17368] IPVS: using max 22 ests per chain, 52800 per kthread [ 413.694111][T17270] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.721584][T17270] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.730214][T17270] bridge_slave_1: entered allmulticast mode [ 413.744181][T17270] bridge_slave_1: entered promiscuous mode [ 413.891244][T17270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.949439][T17270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.092525][T17273] chnl_net:caif_netlink_parms(): no params data found [ 414.116073][T17393] __nla_validate_parse: 1 callbacks suppressed [ 414.116094][T17393] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 414.200396][T17398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 414.703042][ T5124] Bluetooth: hci0: command tx timeout [ 414.784594][ T5124] Bluetooth: hci1: command tx timeout [ 416.071286][T17270] team0: Port device team_slave_0 added [ 416.090410][T17270] team0: Port device team_slave_1 added [ 416.369913][T17270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.380171][T17270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.408823][T17270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.421445][T17412] mac80211_hwsim hwsim29 wlan1: entered promiscuous mode [ 416.432505][T17412] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 416.459757][T17273] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.471699][T17273] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.482833][T17273] bridge_slave_0: entered allmulticast mode [ 416.496051][T17273] bridge_slave_0: entered promiscuous mode [ 416.516416][T17270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.523411][T17270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.563940][T17270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.594205][T17273] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.602064][T17273] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.619444][T17273] bridge_slave_1: entered allmulticast mode [ 416.633046][T17273] bridge_slave_1: entered promiscuous mode [ 416.750856][T17270] hsr_slave_0: entered promiscuous mode [ 416.766394][T17270] hsr_slave_1: entered promiscuous mode [ 416.773000][T17270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.781113][T17270] Cannot create hsr debugfs directory [ 416.786671][ T5124] Bluetooth: hci0: command tx timeout [ 416.854872][ T5124] Bluetooth: hci1: command tx timeout [ 416.896521][T17273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.923424][T17273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.011904][T17273] team0: Port device team_slave_0 added [ 419.028187][T17273] team0: Port device team_slave_1 added [ 419.162011][T17273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.183287][T17273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.211867][T17273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.254951][T17273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.262050][T17273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.323049][T17273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.418520][T17273] hsr_slave_0: entered promiscuous mode [ 419.431123][T17273] hsr_slave_1: entered promiscuous mode [ 419.441009][T17273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.450270][T17273] Cannot create hsr debugfs directory [ 419.692626][T17270] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.704128][T17270] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.715074][T17270] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 419.876817][T17270] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.891689][T17270] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.903192][T17270] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 419.968035][T17474] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 419.982918][T17474] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 420.044696][T17270] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.063484][T17270] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.074217][T17270] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 420.217147][T17270] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.248942][T17270] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.259689][T17270] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 420.295183][T17482] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 420.699186][T17496] nbd: socks must be embedded in a SOCK_ITEM attr [ 420.895897][T17270] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 420.922077][T17270] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 420.944132][T17270] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 420.996669][T17270] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 421.058486][T17273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 421.087212][T17273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 421.107548][T17273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 421.139945][T17273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 421.250045][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 421.289130][T17519] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 421.322369][T17520] netlink: 16410 bytes leftover after parsing attributes in process `syz-executor.3'. [ 421.323676][T17519] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 421.433110][T17270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.456456][T17273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.507298][T17270] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.522121][T17273] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.539840][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.547053][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.572726][ T5200] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.579936][ T5200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.592432][ T5200] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.599997][ T5200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.657526][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.664837][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.971631][T17536] xt_l2tp: v2 sid > 0xffff: 150994944 [ 422.281107][T17273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.375680][T17270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.462996][T17547] bridge1: entered allmulticast mode [ 422.872657][T17273] veth0_vlan: entered promiscuous mode [ 422.956156][T17547] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 422.989498][T17547] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. [ 423.097387][T17273] veth1_vlan: entered promiscuous mode [ 423.121375][T17568] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:20004 [ 423.227252][T17270] veth0_vlan: entered promiscuous mode [ 423.244991][T17273] veth0_macvtap: entered promiscuous mode [ 423.272861][T17273] veth1_macvtap: entered promiscuous mode [ 423.289444][T17270] veth1_vlan: entered promiscuous mode [ 423.326834][T17273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.339452][T17273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.350020][T17273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.367293][T17273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.382639][T17273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.399640][T17273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.410788][T17273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.430485][T17273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.466507][T17273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.544813][T17273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.559704][T17273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.589674][T17273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.611790][T17273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.633282][T17273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.657786][T17273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.679157][T17273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.700994][T17273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.723552][T17273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.752407][T17270] veth0_macvtap: entered promiscuous mode [ 423.769744][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 423.786019][T17273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.803850][T17273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.820375][T17273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.844931][T17273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.867555][T17270] veth1_macvtap: entered promiscuous mode [ 423.939302][T17270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.977229][T17270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.005597][T17270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.028670][T17270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.049481][T17270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.063302][T17270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.074639][T17270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.085853][T17270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.098764][T17270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.109387][T17270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.122052][T17270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.132226][T17590] netlink: 16410 bytes leftover after parsing attributes in process `syz-executor.2'. [ 424.173507][T17588] (unnamed net_device) (uninitialized): option use_carrier: invalid value (32) [ 424.200579][T17270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.221350][T17270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.264969][T17270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.285849][T17270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.311434][T17270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.335932][T17270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.354430][T17270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.375320][T17270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.399290][T17270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.421148][T17270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.437736][T17270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.463420][T17592] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 424.502255][T17270] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.534711][T17270] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.543482][T17270] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.569875][T17270] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.702749][ T2485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.733728][ T2485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.833424][ T5129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.854505][ T5129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.392190][T17626] rdma_rxe: rxe_newlink: failed to add lo [ 427.277367][ T9748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.294498][ T9748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.542304][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 427.570326][ T9747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.600518][ T9747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.627826][T17640] netlink: 16410 bytes leftover after parsing attributes in process `syz-executor.1'. [ 427.642214][T17636] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 427.751612][T17641] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 427.768120][ T29] audit: type=1804 audit(1717719963.228:41): pid=17636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir750760720/syzkaller.grrL7Z/78/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 428.281453][T17670] FAULT_INJECTION: forcing a failure. [ 428.281453][T17670] name failslab, interval 1, probability 0, space 0, times 0 [ 428.308247][T17670] CPU: 1 PID: 17670 Comm: syz-executor.1 Not tainted 6.10.0-rc1-syzkaller-00310-g98aa546af5e4 #0 [ 428.318822][T17670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 428.328933][T17670] Call Trace: [ 428.332229][T17670] [ 428.335175][T17670] dump_stack_lvl+0x241/0x360 [ 428.339898][T17670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.345145][T17670] ? __pfx__printk+0x10/0x10 [ 428.349758][T17670] should_fail_ex+0x3b0/0x4e0 [ 428.354471][T17670] ? dst_alloc+0x12b/0x190 [ 428.358932][T17670] should_failslab+0x9/0x20 [ 428.363511][T17670] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 428.368992][T17670] dst_alloc+0x12b/0x190 [ 428.373261][T17670] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 428.379379][T17670] ip_route_output_key_hash+0x193/0x2b0 [ 428.384984][T17670] ? ip_route_output_key_hash+0xdf/0x2b0 [ 428.390723][T17670] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 428.396829][T17670] ? __pfx__copy_from_iter+0x10/0x10 [ 428.402158][T17670] ip_route_output_flow+0x29/0x140 [ 428.407300][T17670] raw_sendmsg+0x15e6/0x2490 [ 428.411935][T17670] ? __pfx_raw_sendmsg+0x10/0x10 [ 428.416953][T17670] ? inet_sendmsg+0x330/0x390 [ 428.421658][T17670] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 428.426963][T17670] ? security_socket_sendmsg+0x87/0xb0 [ 428.432436][T17670] __sock_sendmsg+0x1a6/0x270 [ 428.437148][T17670] __sys_sendto+0x3a4/0x4f0 [ 428.441701][T17670] ? __pfx___sys_sendto+0x10/0x10 [ 428.446756][T17670] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 428.452740][T17670] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 428.459092][T17670] __x64_sys_sendto+0xde/0x100 [ 428.463897][T17670] do_syscall_64+0xf3/0x230 [ 428.468408][T17670] ? clear_bhb_loop+0x35/0x90 [ 428.473107][T17670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.479066][T17670] RIP: 0033:0x7f306467cf69 [ 428.483607][T17670] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 428.503231][T17670] RSP: 002b:00007f30653c40c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 428.511760][T17670] RAX: ffffffffffffffda RBX: 00007f30647b3f80 RCX: 00007f306467cf69 [ 428.519753][T17670] RDX: 000000000000ffec RSI: 0000000020000040 RDI: 0000000000000004 [ 428.527749][T17670] RBP: 00007f30653c4120 R08: 0000000020000340 R09: 0000000000000010 [ 428.535752][T17670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.543742][T17670] R13: 000000000000000b R14: 00007f30647b3f80 R15: 00007ffe86b6c108 [ 428.551744][T17670] [ 431.223573][T17668] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 433.281571][T17683] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 433.492238][T17708] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 434.005623][T17734] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 434.640181][T17747] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 434.676016][T17747] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 434.749793][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 435.097536][T17754] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 436.415673][T17766] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 436.469786][T17770] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 436.750316][T17784] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.4'. [ 436.810807][ T5568] tipc: Subscription rejected, illegal request [ 437.077495][T17803] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 439.558785][T17816] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 439.868716][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 439.957128][T17838] netlink: 16410 bytes leftover after parsing attributes in process `syz-executor.4'. [ 440.067326][ T9748] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 440.179270][T17859] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 440.202091][T17858] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 440.212582][T17862] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 440.287625][T17864] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.1'. [ 440.314135][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.378107][T17868] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 440.386583][T17868] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.4'. [ 440.396661][T17868] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 440.762154][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 440.907787][T17890] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 442.237472][T17935] dccp_invalid_packet: P.Data Offset(0) too small [ 442.374678][ T4492] Bluetooth: hci4: command 0x0406 tx timeout [ 442.385541][T17937] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 442.455865][T17938] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 444.187705][T17938] debugfs: Directory 'netdev:' with parent 'phy31' already present! [ 444.251004][T17945] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 444.695177][T17971] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 444.728185][T17971] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 444.762219][T17972] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 444.812294][T17972] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 444.981911][T17994] sctp: [Deprecated]: syz-executor.4 (pid 17994) Use of struct sctp_assoc_value in delayed_ack socket option. [ 444.981911][T17994] Use struct sctp_sack_info instead [ 445.295636][T18009] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 445.310670][T18009] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 445.486993][T18017] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 447.482180][T18024] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 447.509271][T18024] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 447.680638][T18039] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (64) [ 447.853980][ T29] audit: type=1804 audit(1717719983.308:42): pid=18041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2812596132/syzkaller.KSUL9K/408/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0 [ 447.895508][T18041] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 447.909110][T18041] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 447.930109][T18041] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 447.989993][T18041] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 448.037431][T18048] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 448.056029][T18041] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.2'. [ 448.155440][T18041] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 452.055981][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888015153400: rx timeout, send abort [ 452.564455][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888015153400: abort rx timeout. Force session deactivation [ 452.653094][T18061] lo speed is unknown, defaulting to 1000 [ 452.686149][T18061] lo speed is unknown, defaulting to 1000 [ 453.019206][T18098] Bluetooth: MGMT ver 1.22 [ 453.025011][T18099] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 453.033528][T18098] Bluetooth: hci3: invalid length 0, exp 2 for type 23 [ 453.050827][T18099] vlan2: entered promiscuous mode [ 453.063551][T18099] team0: entered promiscuous mode [ 453.070883][T18099] team_slave_0: entered promiscuous mode [ 453.081857][T18099] team_slave_1: entered promiscuous mode [ 453.117051][T18099] team0: left promiscuous mode [ 453.134942][T18099] team_slave_0: left promiscuous mode [ 453.140742][T18099] team_slave_1: left promiscuous mode [ 453.211948][T18107] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 454.365394][T18136] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 454.386956][T18136] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.2'. [ 456.030490][T18142] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 456.201430][T18148] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.2'. [ 456.699182][T18174] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 456.820008][T18181] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 456.941907][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 459.153645][T18202] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 459.170879][T18202] batman_adv: batadv0: Adding interface: ipvlan2 [ 459.179322][T18202] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (256) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.209540][T18202] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 459.433287][T18214] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 459.452154][T18214] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.4'. [ 459.593901][T18230] dccp_xmit_packet: Payload too large (65475) for featneg. [ 459.639486][T18230] dccp_close: ABORT with 65475 bytes unread [ 459.785525][T18236] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. [ 460.072192][T18254] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 460.110442][T18254] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 460.500255][T18278] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 460.598225][T18278] batman_adv: batadv0: Adding interface: team0 [ 460.646839][T18278] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.688010][T18278] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 460.719167][T18282] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 460.750844][T18282] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 460.767783][T18282] team0: entered promiscuous mode [ 460.787751][T18282] team_slave_0: entered promiscuous mode [ 460.801184][T18282] team_slave_1: entered promiscuous mode [ 460.813925][T18282] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.831990][T18282] batman_adv: batadv0: Interface activated: team0 [ 460.842733][T18282] batman_adv: batadv0: Interface deactivated: team0 [ 460.856292][T18282] batman_adv: batadv0: Removing interface: team0 [ 460.864894][T18282] bridge0: port 3(team0) entered blocking state [ 460.880587][T18282] bridge0: port 3(team0) entered disabled state [ 460.891313][T18282] team0: entered allmulticast mode [ 460.902971][T18282] team_slave_0: entered allmulticast mode [ 460.911902][T18282] team_slave_1: entered allmulticast mode [ 460.936519][T18282] bridge0: port 3(team0) entered blocking state [ 460.943157][T18282] bridge0: port 3(team0) entered forwarding state [ 461.119784][T18303] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 461.146496][T18303] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.3'. [ 461.188584][T18305] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 461.239936][T18305] batman_adv: batadv0: Adding interface: ipvlan2 [ 461.255155][T18305] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.282782][T18305] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 461.420567][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 461.742470][T18335] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 461.929031][T18342] sch_fq: defrate 0 ignored. [ 461.943822][T18345] sch_fq: defrate 0 ignored. [ 461.951191][T18344] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 461.970786][T18344] batman_adv: batadv0: Adding interface: ipvlan2 [ 461.979652][T18344] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.012600][T18344] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 462.686391][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 462.758051][T18372] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 462.779842][T18372] bond0: entered promiscuous mode [ 462.788356][T18372] bond_slave_0: entered promiscuous mode [ 462.802195][T18372] bond_slave_1: entered promiscuous mode [ 463.168658][T18387] batman_adv: batadv0: Adding interface: ipvlan3 [ 463.194478][T18387] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.229614][T18387] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 463.299804][T18401] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 463.406888][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 463.691450][T18426] openvswitch: netlink: Message has 4 unknown bytes. [ 464.031792][T18440] batman_adv: batadv0: Adding interface: ipvlan2 [ 464.039625][T18440] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.080901][T18440] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 464.313449][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 464.527007][T18467] __nla_validate_parse: 18 callbacks suppressed [ 464.527030][T18467] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.4'. [ 464.626959][T18470] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 464.730851][T18473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 464.789920][T18473] batman_adv: batadv0: Adding interface: ipvlan3 [ 464.805813][T18473] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (256) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.895083][T18473] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 464.980232][T18484] netlink: 524 bytes leftover after parsing attributes in process `syz-executor.2'. [ 464.991933][T18484] netlink: 524 bytes leftover after parsing attributes in process `syz-executor.2'. [ 465.019504][T18484] netlink: 524 bytes leftover after parsing attributes in process `syz-executor.2'. [ 465.043912][T18484] netlink: 524 bytes leftover after parsing attributes in process `syz-executor.2'. [ 465.074758][T18484] netlink: 524 bytes leftover after parsing attributes in process `syz-executor.2'. [ 465.101353][T18484] netlink: 524 bytes leftover after parsing attributes in process `syz-executor.2'. [ 465.142829][T18484] netlink: 524 bytes leftover after parsing attributes in process `syz-executor.2'. [ 465.840483][T18524] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 465.871459][T18524] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 466.116578][T18536] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 466.307137][T18536] sit0: entered promiscuous mode [ 466.350882][T18536] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 466.725037][T18558] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 466.765336][T18558] bridge0: port 3(team0) entered disabled state [ 466.771860][T18558] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.779712][T18558] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.820173][T18558] bridge0: port 3(team0) entered blocking state [ 466.826737][T18558] bridge0: port 3(team0) entered forwarding state [ 466.833524][T18558] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.840778][T18558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.848316][T18558] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.855547][T18558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.932277][T18558] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 466.993572][T18570] batman_adv: batadv0: Adding interface: ipvlan4 [ 467.024876][T18570] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.062819][T18570] batman_adv: batadv0: Not using interface ipvlan4 (retrying later): interface not active [ 467.257573][T18583] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 467.324907][T18583] 0ªX¹¦Dö»: entered allmulticast mode [ 467.547603][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 468.437555][T18654] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 468.504041][T18654] batman_adv: batadv0: Adding interface: team0 [ 468.531129][T18654] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.582862][T18654] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 468.724551][T18668] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 468.746554][T18668] : renamed from macsec0 (while UP) [ 469.438018][T18707] ieee802154 phy1 wpan1: encryption failed: -22 [ 469.794082][T18728] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 469.830359][T18728] batman_adv: batadv0: Adding interface: team0 [ 469.837139][T18728] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.865394][T18728] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 469.890964][T18727] IPv6: sit1: Disabled Multicast RS [ 470.405747][T18754] __nla_validate_parse: 65 callbacks suppressed [ 470.405770][T18754] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 470.592164][T18765] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 470.668893][T18772] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 471.090842][ T2849] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 471.693900][T18822] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'. [ 471.937548][T18839] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 471.949704][T18839] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 471.976284][T18839] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 473.603194][T18896] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 473.826135][T18901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.878085][T18901] team0: Port device batadv0 added [ 473.918707][T18910] dvmrp1: entered allmulticast mode [ 474.099218][T18917] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 474.371420][T18939] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 474.389890][T18939] batman_adv: batadv0: Adding interface: ipvlan4 [ 474.397380][T18939] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (256) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.423448][T18939] batman_adv: batadv0: Not using interface ipvlan4 (retrying later): interface not active [ 474.609362][T18947] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 474.643077][T18947] geneve2: entered promiscuous mode [ 474.649532][T18947] geneve2: entered allmulticast mode [ 474.730922][T18951] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 474.752125][T18951] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 475.106705][ T29] audit: type=1804 audit(1717720010.568:43): pid=18963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2168907076/syzkaller.qCbSG5/93/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 475.341847][ T9758] tipc: Subscription rejected, illegal request [ 475.485496][T18980] __nla_validate_parse: 2 callbacks suppressed [ 475.485516][T18980] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 475.523008][T18980] dvmrp1: left allmulticast mode [ 475.656871][T18989] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.2'. [ 475.680752][T18989] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 475.823175][T18996] vlan2: entered promiscuous mode [ 475.836122][T18996] batadv0: entered promiscuous mode [ 475.850961][T18996] vlan2: entered allmulticast mode [ 475.863033][T18996] batadv0: entered allmulticast mode [ 475.883688][T18996] batadv0: left allmulticast mode [ 475.893168][T18996] batadv0: left promiscuous mode [ 476.377272][T19011] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.385561][T19011] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.392809][T19011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.930805][T19025] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 476.999506][T19020] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.0'. [ 477.378435][T19037] lo speed is unknown, defaulting to 1000 [ 477.454541][T19037] lo speed is unknown, defaulting to 1000 [ 477.796635][T19053] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 477.827342][ T784] IPVS: starting estimator thread 0... [ 477.841493][T19053] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 477.924434][T19055] IPVS: using max 17 ests per chain, 40800 per kthread [ 478.357926][T19065] netlink: 524 bytes leftover after parsing attributes in process `syz-executor.0'. [ 478.749340][T19078] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 479.491388][T19108] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 480.339760][T19128] lo speed is unknown, defaulting to 1000 [ 480.356621][T19128] lo speed is unknown, defaulting to 1000 [ 481.047261][T19155] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 481.279863][T19159] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 481.302832][T19159] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 481.383386][T19159] GUP no longer grows the stack in syz-executor.0 (19159): 20006000-2000a000 (20005000) [ 481.421206][T19159] CPU: 1 PID: 19159 Comm: syz-executor.0 Not tainted 6.10.0-rc1-syzkaller-00310-g98aa546af5e4 #0 [ 481.431783][T19159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 481.441884][T19159] Call Trace: [ 481.445204][T19159] [ 481.448175][T19159] dump_stack_lvl+0x241/0x360 [ 481.452904][T19159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.458156][T19159] ? __pfx__printk+0x10/0x10 [ 481.462788][T19159] ? find_vma+0xf9/0x170 [ 481.467121][T19159] __get_user_pages+0x10e3/0x1590 [ 481.472220][T19159] ? __gup_longterm_locked+0x1ec9/0x2a80 [ 481.477902][T19159] ? __pfx___get_user_pages+0x10/0x10 [ 481.483337][T19159] ? __lock_acquire+0x1346/0x1fd0 [ 481.488414][T19159] __gup_longterm_locked+0x1ff6/0x2a80 [ 481.493945][T19159] ? __pfx___gup_longterm_locked+0x10/0x10 [ 481.499800][T19159] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 481.505828][T19159] ? sanity_check_pinned_pages+0x12bb/0x13c0 [ 481.511882][T19159] gup_fast_fallback+0x2732/0x2b40 [ 481.517084][T19159] ? __pfx_gup_fast_fallback+0x10/0x10 [ 481.522587][T19159] ? __pfx_validate_chain+0x10/0x10 [ 481.527829][T19159] ? unwind_get_return_address+0x91/0xc0 [ 481.533519][T19159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.539632][T19159] ? arch_stack_walk+0x16d/0x1b0 [ 481.544628][T19159] ? __lock_acquire+0x1346/0x1fd0 [ 481.549696][T19159] ? is_valid_gup_args+0x124/0x200 [ 481.554951][T19159] pin_user_pages_fast+0xcc/0x160 [ 481.560025][T19159] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 481.565717][T19159] iov_iter_extract_pages+0x3db/0x720 [ 481.571154][T19159] bio_iov_iter_get_pages+0x541/0x1930 [ 481.576690][T19159] ? bio_associate_blkg+0x6c/0x230 [ 481.581858][T19159] ? bio_associate_blkg_from_css+0xb0c/0xc70 [ 481.587888][T19159] ? bio_associate_blkg_from_css+0xa4/0xc70 [ 481.593829][T19159] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 481.599875][T19159] ? bio_alloc_bioset+0x6d7/0x1130 [ 481.605123][T19159] iomap_dio_bio_iter+0xc8e/0x1670 [ 481.610329][T19159] __iomap_dio_rw+0x1295/0x2370 [ 481.615228][T19159] ? do_syscall_64+0xf3/0x230 [ 481.620378][T19159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.626528][T19159] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 481.632646][T19159] ? __pfx___iomap_dio_rw+0x10/0x10 [ 481.637922][T19159] ? jbd2_journal_stop+0x902/0xd80 [ 481.643099][T19159] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 481.648613][T19159] ? __pfx_ext4_orphan_add+0x10/0x10 [ 481.653963][T19159] iomap_dio_rw+0x46/0xa0 [ 481.658372][T19159] ext4_file_write_iter+0x15e5/0x1a10 [ 481.663817][T19159] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 481.669695][T19159] vfs_write+0xa72/0xc90 [ 481.673989][T19159] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 481.679755][T19159] ? __pfx_vfs_write+0x10/0x10 [ 481.684554][T19159] ? do_futex+0x33b/0x560 [ 481.688954][T19159] ksys_write+0x1a0/0x2c0 [ 481.693347][T19159] ? __pfx_ksys_write+0x10/0x10 [ 481.698237][T19159] ? do_syscall_64+0x100/0x230 [ 481.703042][T19159] ? do_syscall_64+0xb6/0x230 [ 481.707761][T19159] do_syscall_64+0xf3/0x230 [ 481.712304][T19159] ? clear_bhb_loop+0x35/0x90 [ 481.717033][T19159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.722967][T19159] RIP: 0033:0x7f157867cf69 [ 481.727425][T19159] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 481.747078][T19159] RSP: 002b:00007f15794270c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 481.755544][T19159] RAX: ffffffffffffffda RBX: 00007f15787b3f80 RCX: 00007f157867cf69 [ 481.763560][T19159] RDX: 0000000000043400 RSI: 0000000020000200 RDI: 000000000000000d [ 481.771573][T19159] RBP: 00007f15786da6fe R08: 0000000000000000 R09: 0000000000000000 [ 481.779576][T19159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.787577][T19159] R13: 000000000000000b R14: 00007f15787b3f80 R15: 00007ffd716dff98 [ 481.795605][T19159] [ 482.061221][T19168] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 483.245018][T19205] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 483.399399][T19216] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 484.273595][T19246] lo speed is unknown, defaulting to 1000 [ 484.283420][T19246] lo speed is unknown, defaulting to 1000 [ 487.080650][T19353] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 487.379050][ T4492] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 487.389780][ T4492] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 487.404653][ T4492] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 487.413873][ T4492] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 487.422199][ T4492] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 487.429895][ T4492] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 487.528464][T19366] lo speed is unknown, defaulting to 1000 [ 487.566205][T19366] lo speed is unknown, defaulting to 1000 [ 488.116291][T19396] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 488.328536][T19396] pim6reg9: entered allmulticast mode [ 488.442470][T19416] tipc: Bearer : already 2 bearers with priority 10 [ 488.465185][T19416] tipc: Bearer : trying with adjusted priority [ 488.491563][T19416] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 488.547175][T19416] tipc: Enabling of bearer rejected, failed to enable media [ 488.608838][T19366] chnl_net:caif_netlink_parms(): no params data found [ 488.636810][T19428] netlink: 5056 bytes leftover after parsing attributes in process `syz-executor.3'. [ 488.703624][T19428] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 488.745346][T19428] netlink: 5056 bytes leftover after parsing attributes in process `syz-executor.3'. [ 488.916667][T19436] can: request_module (can-proto-0) failed. [ 488.986996][T19440] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 489.042500][T19440] mac80211_hwsim hwsim20 wlan1: entered promiscuous mode [ 489.078476][T19440] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 489.098205][T19366] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.111274][T19366] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.128438][T19366] bridge_slave_0: entered allmulticast mode [ 489.137278][T19366] bridge_slave_0: entered promiscuous mode [ 489.148358][T19366] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.156229][T19366] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.163902][T19366] bridge_slave_1: entered allmulticast mode [ 489.180541][T19366] bridge_slave_1: entered promiscuous mode [ 489.358931][T19463] xt_policy: output policy not valid in PREROUTING and INPUT [ 489.427300][T19366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.463415][T19469] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 489.479109][T19366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.504895][ T4492] Bluetooth: hci1: command tx timeout [ 489.657165][T19366] team0: Port device team_slave_0 added [ 489.677726][T19366] team0: Port device team_slave_1 added [ 489.710246][T19476] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 489.727671][T19476] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 489.795678][T19481] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 489.821988][T19481] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 489.847487][T19366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.862901][T19366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.904329][T19366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.926842][T19366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.943171][T19366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.977649][T19366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.237717][T19491] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 490.279342][T19366] hsr_slave_0: entered promiscuous mode [ 490.311803][T19366] hsr_slave_1: entered promiscuous mode [ 490.336269][T19366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 490.349594][T19366] Cannot create hsr debugfs directory [ 490.670232][ T9758] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.984150][ T9758] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.038641][T19505] lo speed is unknown, defaulting to 1000 [ 491.129843][ T9758] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.253873][T19505] lo speed is unknown, defaulting to 1000 [ 491.264616][T19519] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 491.405907][ T5124] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 491.424628][ T5124] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 491.443276][ T5124] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 491.443936][ T9758] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.471901][ T5124] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 491.484039][ T5124] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 491.499616][ T5124] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 491.575995][ T4492] Bluetooth: hci1: command tx timeout [ 491.752963][T19524] lo speed is unknown, defaulting to 1000 [ 491.857215][T19366] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.942026][T19524] lo speed is unknown, defaulting to 1000 [ 491.951325][T19536] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 492.050222][T19366] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.075483][T19536] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 492.303158][T19366] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.446459][T19366] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.522387][T19539] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 492.590827][ T9758] bridge_slave_0: left allmulticast mode [ 492.618339][ T9758] bridge_slave_0: left promiscuous mode [ 492.626593][ T9758] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.920632][T19553] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 493.574594][ T4492] Bluetooth: hci4: command tx timeout [ 493.654849][ T4492] Bluetooth: hci1: command tx timeout [ 493.834795][ T9758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.849181][ T9758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.861258][ T9758] bond0 (unregistering): Released all slaves [ 493.879626][ T9758] bond1 (unregistering): Released all slaves [ 493.964024][T19555] __nla_validate_parse: 9 callbacks suppressed [ 493.964047][T19555] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 494.101286][ T9758] tipc: Left network mode [ 494.231094][T19566] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 494.252443][T19566] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 494.283043][T19564] syz-executor.4: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 494.306424][T19564] CPU: 1 PID: 19564 Comm: syz-executor.4 Not tainted 6.10.0-rc1-syzkaller-00310-g98aa546af5e4 #0 [ 494.317040][T19564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 494.327116][T19564] Call Trace: [ 494.330488][T19564] [ 494.333425][T19564] dump_stack_lvl+0x241/0x360 [ 494.338145][T19564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.343361][T19564] ? __pfx__printk+0x10/0x10 [ 494.347980][T19564] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 494.354433][T19564] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 494.360996][T19564] warn_alloc+0x278/0x410 [ 494.365361][T19564] ? stack_depot_save_flags+0x29/0x830 [ 494.370816][T19564] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 494.377415][T19564] ? __pfx_warn_alloc+0x10/0x10 [ 494.382275][T19564] ? kasan_save_track+0x3f/0x80 [ 494.387134][T19564] ? __kasan_kmalloc+0x98/0xb0 [ 494.391923][T19564] ? xsk_setsockopt+0x4ea/0x950 [ 494.396788][T19564] ? do_sock_setsockopt+0x3af/0x720 [ 494.402001][T19564] ? __sys_setsockopt+0x1ae/0x250 [ 494.407035][T19564] ? __x64_sys_setsockopt+0xb5/0xd0 [ 494.412264][T19564] ? do_syscall_64+0xf3/0x230 [ 494.416949][T19564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.423033][T19564] __vmalloc_node_range_noprof+0x130/0x1460 [ 494.428967][T19564] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 494.435309][T19564] ? __kasan_kmalloc+0x98/0xb0 [ 494.440083][T19564] ? xskq_create+0x54/0x170 [ 494.444611][T19564] vmalloc_user_noprof+0x74/0x80 [ 494.449575][T19564] ? xskq_create+0xb6/0x170 [ 494.454085][T19564] xskq_create+0xb6/0x170 [ 494.458422][T19564] xsk_init_queue+0xa1/0x100 [ 494.463021][T19564] xsk_setsockopt+0x4ea/0x950 [ 494.467719][T19564] ? __pfx_xsk_setsockopt+0x10/0x10 [ 494.472934][T19564] ? __pfx_lock_acquire+0x10/0x10 [ 494.477967][T19564] ? aa_sock_opt_perm+0x79/0x120 [ 494.482914][T19564] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 494.488467][T19564] ? security_socket_setsockopt+0x87/0xb0 [ 494.494200][T19564] ? __pfx_xsk_setsockopt+0x10/0x10 [ 494.499416][T19564] do_sock_setsockopt+0x3af/0x720 [ 494.504485][T19564] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 494.510062][T19564] ? __fget_files+0x29/0x470 [ 494.514666][T19564] ? __fget_files+0x3f6/0x470 [ 494.519364][T19564] __sys_setsockopt+0x1ae/0x250 [ 494.524328][T19564] __x64_sys_setsockopt+0xb5/0xd0 [ 494.529368][T19564] do_syscall_64+0xf3/0x230 [ 494.533874][T19564] ? clear_bhb_loop+0x35/0x90 [ 494.538560][T19564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.544459][T19564] RIP: 0033:0x7fb8dac7cf69 [ 494.548874][T19564] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 494.568487][T19564] RSP: 002b:00007fb8dbaca0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 494.576921][T19564] RAX: ffffffffffffffda RBX: 00007fb8dadb3f80 RCX: 00007fb8dac7cf69 [ 494.585002][T19564] RDX: 0000000000000005 RSI: 000000000000011b RDI: 0000000000000003 [ 494.592995][T19564] RBP: 00007fb8dacda6fe R08: 0000000000000018 R09: 0000000000000000 [ 494.600986][T19564] R10: 0000000020000840 R11: 0000000000000246 R12: 0000000000000000 [ 494.608998][T19564] R13: 000000000000000b R14: 00007fb8dadb3f80 R15: 00007ffcc24b8608 [ 494.616995][T19564] [ 494.625104][T19564] Mem-Info: [ 494.628346][T19564] active_anon:25616 inactive_anon:0 isolated_anon:0 [ 494.628346][T19564] active_file:0 inactive_file:46853 isolated_file:0 [ 494.628346][T19564] unevictable:768 dirty:18 writeback:0 [ 494.628346][T19564] slab_reclaimable:11379 slab_unreclaimable:105405 [ 494.628346][T19564] mapped:21601 shmem:8757 pagetables:586 [ 494.628346][T19564] sec_pagetables:0 bounce:0 [ 494.628346][T19564] kernel_misc_reclaimable:0 [ 494.628346][T19564] free:1356788 free_pcp:2059 free_cma:0 [ 494.647739][T19366] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 494.685664][T19564] Node 0 active_anon:102464kB inactive_anon:0kB active_file:0kB inactive_file:187340kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86404kB dirty:68kB writeback:0kB shmem:33492kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11076kB pagetables:2344kB sec_pagetables:0kB all_unreclaimable? no [ 494.721826][T19564] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 494.756303][T19564] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 494.793966][T19564] lowmem_reserve[]: 0 2571 2571 0 0 [ 494.801804][T19564] Node 0 DMA32 free:1467732kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:102424kB inactive_anon:0kB active_file:0kB inactive_file:187020kB unevictable:1536kB writepending:64kB present:3129332kB managed:2659880kB mlocked:0kB bounce:0kB free_pcp:1328kB local_pcp:1136kB free_cma:0kB [ 494.833945][T19366] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 494.836572][T19564] lowmem_reserve[]: 0 0 0 0 0 [ 494.858640][T19564] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 494.900522][T19564] lowmem_reserve[]: 0 0 0 0 0 [ 494.905488][T19564] Node 1 Normal free:3944512kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:6804kB local_pcp:0kB free_cma:0kB [ 494.936489][T19564] lowmem_reserve[]: 0 0 0 0 0 [ 494.941372][T19564] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 494.955103][T19564] Node 0 DMA32: 94*4kB (UME) 45*8kB (UME) 20*16kB (UM) 186*32kB (UME) 46*64kB (UME) 189*128kB (UME) 95*256kB (UME) 49*512kB (UM) 22*1024kB (UME) 7*2048kB (U) 329*4096kB (M) = 1468000kB [ 494.973979][T19564] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 494.986130][T19564] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 1*16kB (M) 1*32kB (M) 0*64kB 0*128kB 2*256kB (UM) 1*512kB (M) 1*1024kB (U) 1*2048kB (M) 962*4096kB (UM) = 3944512kB [ 495.002068][T19564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 495.011710][T19564] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 495.021830][T19564] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 495.031697][T19564] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 495.041272][T19564] 55592 total pagecache pages [ 495.054467][T19366] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 495.063574][T19564] 0 pages in swap cache [ 495.072140][T19564] Free swap = 124996kB [ 495.078258][T19366] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 495.085824][T19564] Total swap = 124996kB [ 495.090105][T19564] 2097051 pages RAM [ 495.114660][T19564] 0 pages HighMem/MovableOnly [ 495.124357][T19564] 400871 pages reserved [ 495.144421][T19564] 0 pages cma reserved [ 495.285746][T19580] openvswitch: netlink: Missing key (keys=80040, expected=200000) [ 495.654992][ T4492] Bluetooth: hci4: command tx timeout [ 495.702544][T19587] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. [ 495.734923][ T4492] Bluetooth: hci1: command tx timeout [ 495.785400][T19587] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 495.811266][ T9758] hsr_slave_0: left promiscuous mode [ 495.829244][ T9758] hsr_slave_1: left promiscuous mode [ 495.840155][ T9758] batman_adv: batadv0: Removing interface: team0 [ 495.855215][ T9758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.862674][ T9758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.889238][ T9758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.898843][ T9758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.925382][ T9758] batman_adv: batadv0: Removing interface: ipvlan2 [ 495.951470][ T9758] batman_adv: batadv0: Removing interface: ipvlan4 [ 495.996426][ T9758] batadv0: left allmulticast mode [ 496.001874][ T9758] batadv0: left promiscuous mode [ 496.010628][ T9758] veth1_macvtap: left promiscuous mode [ 496.023546][ T9758] veth0_macvtap: left promiscuous mode [ 496.033710][ T9758] veth1_vlan: left promiscuous mode [ 496.039215][ T9758] veth0_vlan: left promiscuous mode [ 496.261209][ T9758] pim6reg9 (unregistering): left allmulticast mode [ 496.825951][ T9758] team0 (unregistering): Port device team_slave_1 removed [ 496.878593][ T9758] team0 (unregistering): Port device team_slave_0 removed [ 497.361832][T19585] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 497.508625][T19366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.541885][T19524] chnl_net:caif_netlink_parms(): no params data found [ 497.570201][T19604] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 497.611518][T19604] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 497.733779][T19366] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.747242][ T4492] Bluetooth: hci4: command tx timeout [ 497.790622][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.797848][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.950600][T19616] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 498.001734][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.009108][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.083244][T19524] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.094146][T19524] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.105236][T19524] bridge_slave_0: entered allmulticast mode [ 498.113111][T19524] bridge_slave_0: entered promiscuous mode [ 498.143694][T19524] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.162399][T19524] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.181138][T19524] bridge_slave_1: entered allmulticast mode [ 498.200343][T19524] bridge_slave_1: entered promiscuous mode [ 498.361295][T19524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.387568][T19524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.443386][T19366] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 498.471273][T19524] team0: Port device team_slave_0 added [ 498.485789][T19524] team0: Port device team_slave_1 added [ 498.548305][T19524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.560581][T19524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.598243][T19524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.616577][T19524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.623587][T19524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.656962][T19524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.768303][T19524] hsr_slave_0: entered promiscuous mode [ 498.787136][T19524] hsr_slave_1: entered promiscuous mode [ 498.802039][T19524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.813811][T19524] Cannot create hsr debugfs directory [ 499.033349][T19366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.227441][T19366] veth0_vlan: entered promiscuous mode [ 499.267112][T19366] veth1_vlan: entered promiscuous mode [ 499.368098][T19647] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 499.491355][T19366] veth0_macvtap: entered promiscuous mode [ 499.519123][T19366] veth1_macvtap: entered promiscuous mode [ 499.664032][T19366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.689672][T19366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.714295][T19366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.725374][T19366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.744446][T19366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.756526][T19366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.769670][T19366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.781070][T19366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.792747][T19366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.811273][T19366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.823613][ T4492] Bluetooth: hci4: command tx timeout [ 499.824614][T19669] netlink: 'syz-executor.4': attribute type 30 has an invalid length. [ 499.832516][T19366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.868226][T19366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.879300][T19366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.890034][T19366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.910745][T19366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.921877][T19366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.932654][T19366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.942641][T19366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.953288][T19366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.963203][T19366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.980481][T19366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.992960][T19366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.044191][T19366] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.062345][T19366] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.086204][T19366] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.113990][T19366] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.319695][T19524] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 500.341109][T19524] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 500.369221][T19524] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 500.395719][T19677] lo speed is unknown, defaulting to 1000 [ 500.395997][T19524] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 500.420006][T19682] sctp: [Deprecated]: syz-executor.2 (pid 19682) Use of int in maxseg socket option. [ 500.420006][T19682] Use struct sctp_assoc_value instead [ 500.484285][T19677] lo speed is unknown, defaulting to 1000 [ 500.652975][T18388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.663797][T19690] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 500.683566][T18388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.801421][T18386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.832438][T18386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.012039][T19524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.149743][T19524] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.228879][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.236118][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.279305][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.286511][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.319573][ T29] audit: type=1804 audit(1717720036.778:44): pid=19707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2168907076/syzkaller.qCbSG5/168/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 501.406650][ T29] audit: type=1804 audit(1717720036.858:45): pid=19710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir192336124/syzkaller.D38Exd/1/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 501.522238][ T29] audit: type=1804 audit(1717720036.908:46): pid=19710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir192336124/syzkaller.D38Exd/1/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 501.741311][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.200791][T19524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.368649][T19732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.420354][T19524] veth0_vlan: entered promiscuous mode [ 502.453406][T19524] veth1_vlan: entered promiscuous mode [ 502.551975][T19737] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 502.618133][T19737] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 502.653054][T19739] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 502.693052][T19739] batman_adv: batadv0: Adding interface: ipvlan2 [ 502.734073][T19739] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.768814][T19739] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 502.810409][T19524] veth0_macvtap: entered promiscuous mode [ 502.877002][T19524] veth1_macvtap: entered promiscuous mode [ 502.977504][T19524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.076446][T19524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.087545][T19524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.105091][T19524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.115394][T19524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.126074][T19524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.137198][T19524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.166566][T19524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.189887][T19524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.234461][T19524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.257616][T19524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.270074][T19524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.292816][T19524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.319323][T19524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.330105][T19524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.356305][T19524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.374378][T19524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.387815][T19524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.403829][T19524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.421129][T19524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.432775][T19524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.443077][T19524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.454796][T19524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.464885][T19524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.480858][T19524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.497446][T19524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.510177][T19753] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 503.558447][T19765] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 503.666611][T19524] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.720357][T19524] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.735547][T19774] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 503.748644][T19524] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.784381][T19524] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.829548][T19779] bond0: option all_slaves_active: invalid value (8) [ 504.134464][T18386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.142357][T18386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.270961][ T9758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.280523][ T9758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.783471][ T29] audit: type=1804 audit(1717720040.238:47): pid=19817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2812596132/syzkaller.KSUL9K/528/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 505.411758][T19856] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 506.153533][T18386] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.217428][T19878] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 506.262963][T19878] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 506.284996][T19878] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.306176][T19878] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.313501][T19878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.392657][T19895] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 506.431172][T19895] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 507.021163][T18386] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.193212][T18386] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.238493][T19930] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 507.250051][T19930] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 507.261384][T19930] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 507.275984][T19930] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 507.283941][T19930] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 507.293032][T19930] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 507.415755][T19928] lo speed is unknown, defaulting to 1000 [ 507.423046][T19928] lo speed is unknown, defaulting to 1000 [ 507.568079][T18386] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.667357][T19949] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 508.068407][T18386] bridge_slave_1: left allmulticast mode [ 508.081913][T18386] bridge_slave_1: left promiscuous mode [ 508.090636][T18386] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.132847][T18386] bridge_slave_0: left allmulticast mode [ 508.162826][T18386] bridge_slave_0: left promiscuous mode [ 508.184755][T18386] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.837113][T18386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.852679][T18386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.873753][T18386] bond0 (unregistering): Released all slaves [ 508.901178][T19979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 509.336334][ T4492] Bluetooth: hci4: command tx timeout [ 509.880231][T19928] chnl_net:caif_netlink_parms(): no params data found [ 510.111643][T18386] hsr_slave_0: left promiscuous mode [ 510.130705][T18386] hsr_slave_1: left promiscuous mode [ 510.150460][T18386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.170312][T18386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.183319][T18386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.191157][T18386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.241964][T18386] veth1_macvtap: left promiscuous mode [ 510.254800][T18386] veth0_macvtap: left promiscuous mode [ 510.261137][T18386] veth1_vlan: left promiscuous mode [ 510.266871][T18386] veth0_vlan: left promiscuous mode [ 511.075018][T18386] team0 (unregistering): Port device team_slave_1 removed [ 511.130688][T18386] team0 (unregistering): Port device team_slave_0 removed [ 511.425184][ T4492] Bluetooth: hci4: command tx timeout [ 511.691829][T20047] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 511.746499][T20053] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. [ 511.956450][T19928] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.963719][T19928] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.983141][T19928] bridge_slave_0: entered allmulticast mode [ 512.014492][T19928] bridge_slave_0: entered promiscuous mode [ 512.056996][T19928] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.117167][T19928] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.147497][T19928] bridge_slave_1: entered allmulticast mode [ 512.167458][T19928] bridge_slave_1: entered promiscuous mode [ 512.234076][T20082] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 512.265172][T20085] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 512.408413][T19928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.440684][T19928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.466770][T20094] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 512.513114][T20094] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 512.540268][T20097] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 512.697428][T20104] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 512.734651][T20104] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 512.761478][T19928] team0: Port device team_slave_0 added [ 512.769314][T20097] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 512.808840][T20097] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 512.824478][T20097] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 512.840146][T19928] team0: Port device team_slave_1 added [ 512.990865][T19928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.018104][T19928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.065038][T20119] tipc: Failed to remove unknown binding: 66,1,1/0:628241789/628241791 [ 513.098614][T19928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.111338][T20119] tipc: Failed to remove unknown binding: 66,1,1/0:628241789/628241791 [ 513.151521][T19928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.194694][T19928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.243314][T19928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.442891][T19928] hsr_slave_0: entered promiscuous mode [ 513.458511][T19928] hsr_slave_1: entered promiscuous mode [ 513.472136][T19928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 513.488082][T19928] Cannot create hsr debugfs directory [ 513.495116][T19930] Bluetooth: hci4: command tx timeout [ 513.501281][T20131] pim6reg1: entered promiscuous mode [ 513.529157][T20131] pim6reg1: entered allmulticast mode [ 513.632559][T20141] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.4'. [ 513.647841][T20140] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 513.713088][T20110] tipc: Failed to remove unknown binding: 66,1,1/0:628241789/628241791 [ 513.753062][T20110] tipc: Failed to remove unknown binding: 66,1,1/0:628241789/628241791 [ 513.903169][T20147] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 513.935289][T20146] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 513.952701][T20155] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 514.054516][T19930] Bluetooth: hci3: command 0x0406 tx timeout [ 514.312624][T20175] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 514.395733][T20178] pim6reg1: entered promiscuous mode [ 514.407396][T20178] pim6reg1: entered allmulticast mode [ 514.688157][T20193] Bluetooth: MGMT ver 1.22 [ 514.860260][T19928] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 514.890301][T19928] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 514.907762][T19928] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 514.923753][T19928] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 514.959861][T20205] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 515.207429][T20210] syz-executor.3[20210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 515.207603][T20210] syz-executor.3[20210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 515.260882][T19928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.312668][T19928] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.346610][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.353819][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.377315][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.384546][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.574751][ T4492] Bluetooth: hci4: command tx timeout [ 515.697212][T20224] FAULT_INJECTION: forcing a failure. [ 515.697212][T20224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.720826][T20224] CPU: 0 PID: 20224 Comm: syz-executor.4 Not tainted 6.10.0-rc1-syzkaller-00310-g98aa546af5e4 #0 [ 515.731404][T20224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 515.741504][T20224] Call Trace: [ 515.744821][T20224] [ 515.747787][T20224] dump_stack_lvl+0x241/0x360 [ 515.752506][T20224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.757739][T20224] ? __pfx__printk+0x10/0x10 [ 515.762348][T20224] ? snprintf+0xda/0x120 [ 515.766628][T20224] should_fail_ex+0x3b0/0x4e0 [ 515.771320][T20224] _copy_to_user+0x2f/0xb0 [ 515.775758][T20224] simple_read_from_buffer+0xca/0x150 [ 515.781147][T20224] proc_fail_nth_read+0x1e9/0x250 [ 515.786186][T20224] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 515.791769][T20224] ? rw_verify_area+0x514/0x6b0 [ 515.796625][T20224] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 515.802177][T20224] vfs_read+0x204/0xbd0 [ 515.806342][T20224] ? __pfx_lock_release+0x10/0x10 [ 515.811378][T20224] ? __pfx_vfs_read+0x10/0x10 [ 515.816077][T20224] ? __fget_files+0x29/0x470 [ 515.820697][T20224] ? __fget_files+0x3f6/0x470 [ 515.825398][T20224] ksys_read+0x1a0/0x2c0 [ 515.829686][T20224] ? __pfx_ksys_read+0x10/0x10 [ 515.834463][T20224] ? do_syscall_64+0x100/0x230 [ 515.839240][T20224] ? do_syscall_64+0xb6/0x230 [ 515.843924][T20224] do_syscall_64+0xf3/0x230 [ 515.848438][T20224] ? clear_bhb_loop+0x35/0x90 [ 515.853218][T20224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.859115][T20224] RIP: 0033:0x7fb8dac7bc0c [ 515.863532][T20224] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 515.883163][T20224] RSP: 002b:00007fb8dbaca0c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 515.891602][T20224] RAX: ffffffffffffffda RBX: 00007fb8dadb3f80 RCX: 00007fb8dac7bc0c [ 515.899664][T20224] RDX: 000000000000000f RSI: 00007fb8dbaca130 RDI: 0000000000000005 [ 515.907649][T20224] RBP: 00007fb8dbaca120 R08: 0000000000000000 R09: 0000000000000000 [ 515.915622][T20224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.923600][T20224] R13: 000000000000000b R14: 00007fb8dadb3f80 R15: 00007ffcc24b8608 [ 515.931595][T20224] [ 516.106247][T20231] pim6reg1: entered promiscuous mode [ 516.111690][T20231] pim6reg1: entered allmulticast mode [ 516.225332][T20234] smc: net device ip6tnl0 applied user defined pnetid SYZ0 [ 516.288925][T19928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.445648][T19928] veth0_vlan: entered promiscuous mode [ 516.463503][T19928] veth1_vlan: entered promiscuous mode [ 516.556436][T19928] veth0_macvtap: entered promiscuous mode [ 516.589212][T19928] veth1_macvtap: entered promiscuous mode [ 516.666451][T19928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.689014][T19928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.699420][T19928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.714258][T19928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.724635][T19928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.737740][T19928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.752215][T19928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.763586][T19928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.773877][T19928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.785317][T19928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.795372][T19928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.806398][T19928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.826589][T19928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.852897][T19928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.880095][T19928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.898163][T19928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.910325][T19928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.920542][T19928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.931212][T19928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.941871][T19928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.952440][T19928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.962658][T19928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.998920][T19928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.038653][T19928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.053039][T19928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.065389][T19928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.092313][T19928] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.107368][T19928] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.117365][T19928] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.127510][T19928] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.268448][T18386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.280562][T18386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.307259][T20273] __nla_validate_parse: 4 callbacks suppressed [ 517.307280][T20273] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 517.359093][ T7858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.374586][ T7858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.726314][T20268] dccp_close: ABORT with 32 bytes unread [ 518.607970][T20302] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 518.843996][T20312] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 518.963651][T20320] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 518.986004][T20317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 518.997867][T20317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 519.007990][T20321] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 519.020785][T20317] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 519.030601][T20317] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 519.241340][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 519.633357][T20354] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 519.675981][T20358] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 519.686475][T20358] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 519.710014][T20361] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 520.401261][ T1272] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.432333][T20397] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 520.558959][T20404] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 520.942198][T20420] vxcan3: entered promiscuous mode [ 521.258250][T20437] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 521.265610][T20437] IPv6: NLM_F_CREATE should be set when creating new route [ 521.283830][T20439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 521.498991][T19930] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 521.510420][T19930] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 521.525615][T19930] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 521.543779][T19930] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 521.562410][T19930] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 521.570115][T19930] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 521.633156][ T1272] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.669693][ T29] audit: type=1804 audit(1717720057.128:48): pid=20448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2168907076/syzkaller.qCbSG5/233/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 521.802440][ T1272] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.867450][T20456] xt_CT: You must specify a L4 protocol and not use inversions on it [ 521.939272][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 522.181192][ T1272] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.240957][T20443] lo speed is unknown, defaulting to 1000 [ 522.264107][T20443] lo speed is unknown, defaulting to 1000 [ 522.419871][T20483] __nla_validate_parse: 7 callbacks suppressed [ 522.419891][T20483] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 522.446455][ T1272] bridge_slave_1: left allmulticast mode [ 522.452187][ T1272] bridge_slave_1: left promiscuous mode [ 522.458447][ T1272] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.475643][ T1272] bridge_slave_0: left allmulticast mode [ 522.481427][ T1272] bridge_slave_0: left promiscuous mode [ 522.487474][ T1272] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.631214][T20490] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 9 (only 8 groups) [ 523.062127][T20499] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 523.093290][T20501] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 523.339016][ T1272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.353332][ T1272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.369168][ T1272] bond0 (unregistering): Released all slaves [ 523.390841][T20495] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 523.656041][T19930] Bluetooth: hci4: command tx timeout [ 524.014188][T20534] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 524.436733][T20559] bridge_slave_1: left allmulticast mode [ 524.464556][T20559] bridge_slave_1: left promiscuous mode [ 524.487282][T20559] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.552111][T20559] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 524.598210][T20547] syzkaller1: entered promiscuous mode [ 524.603952][T20547] syzkaller1: entered allmulticast mode [ 524.622032][T20443] chnl_net:caif_netlink_parms(): no params data found [ 524.667203][ T1272] hsr_slave_0: left promiscuous mode [ 524.678769][ T1272] hsr_slave_1: left promiscuous mode [ 524.688903][ T1272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.706615][ T1272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.717263][ T1272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.725342][ T1272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.771540][ T1272] veth1_macvtap: left promiscuous mode [ 524.778036][ T1272] veth0_macvtap: left promiscuous mode [ 524.790741][ T1272] veth1_vlan: left promiscuous mode [ 524.802778][ T1272] veth0_vlan: left promiscuous mode [ 525.343404][T20580] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 525.654072][ T1272] team0 (unregistering): Port device team_slave_1 removed [ 525.711803][ T1272] team0 (unregistering): Port device team_slave_0 removed [ 525.734774][T19930] Bluetooth: hci4: command tx timeout [ 526.311935][T20565] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 526.775183][T20443] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.800348][T20443] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.830588][T20443] bridge_slave_0: entered allmulticast mode [ 526.840690][T20443] bridge_slave_0: entered promiscuous mode [ 526.866188][T20443] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.894991][T20443] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.910255][T20443] bridge_slave_1: entered allmulticast mode [ 526.922573][T20443] bridge_slave_1: entered promiscuous mode [ 527.075728][T20443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.097124][T20613] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.4'. [ 527.136377][T20443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.264681][T20443] team0: Port device team_slave_0 added [ 527.283401][ T1272] gretap1: left allmulticast mode [ 527.292721][ T1272] gretap1: left promiscuous mode [ 527.321958][ T1272] bridge1: port 1(gretap1) entered disabled state [ 527.456307][ T1272] tipc: Resetting bearer [ 527.815383][T19930] Bluetooth: hci4: command tx timeout [ 528.117023][ T1272] tipc: Disabling bearer [ 529.200714][ T1272] bond0 (unregistering): left promiscuous mode [ 529.207689][ T1272] bond_slave_0: left promiscuous mode [ 529.213374][ T1272] bond_slave_1: left promiscuous mode [ 529.220275][ T1272] bond0 (unregistering): left allmulticast mode [ 529.227823][ T1272] bond_slave_0: left allmulticast mode [ 529.233307][ T1272] bond_slave_1: left allmulticast mode [ 529.247541][ T1272] team0: Port device bond0 removed [ 529.261145][ T1272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.280989][ T1272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.292288][ T1272] bond0 (unregistering): Released all slaves [ 529.307087][ T1272] bond1 (unregistering): Released all slaves [ 529.323366][T20443] team0: Port device team_slave_1 added [ 529.450383][T20632] team0: Device macvtap1 is already an upper device of the team interface [ 529.510515][T20634] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 529.532055][T20634] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 529.573076][ T1272] tipc: Disabling bearer [ 529.583761][T20634] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 529.613368][ T1272] tipc: Left network mode [ 529.703644][ T1272] IPVS: stopping backup sync thread 6359 ... [ 529.743778][T20443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.754577][T20443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.814320][T20443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.896263][T19930] Bluetooth: hci4: command tx timeout [ 529.930330][T20443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.968904][T20443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.035489][T20443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.175592][T20651] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 530.330116][T20443] hsr_slave_0: entered promiscuous mode [ 530.360466][T20443] hsr_slave_1: entered promiscuous mode [ 530.372976][T20443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 530.391081][T20443] Cannot create hsr debugfs directory [ 530.555655][T20657] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 531.552017][ T1272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.594163][ T1272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.616816][ T1272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.638688][ T1272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.687148][T20699] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 531.699756][ T1272] team0: left allmulticast mode [ 531.710529][T20699] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 531.713856][ T1272] team_slave_0: left allmulticast mode [ 531.734140][ T1272] team_slave_1: left allmulticast mode [ 531.742682][ T1272] macvlan3: left allmulticast mode [ 531.763718][ T1272] vlan1: left allmulticast mode [ 531.784503][ T1272] veth0_vlan: left allmulticast mode [ 531.804640][ T1272] vlan1: left promiscuous mode [ 531.836510][ T1272] veth1_macvtap: left allmulticast mode [ 531.856536][ T1272] veth1_macvtap: left promiscuous mode [ 531.874716][ T1272] veth0_macvtap: left promiscuous mode [ 531.887578][ T1272] veth1_vlan: left promiscuous mode [ 531.899050][ T1272] veth0_vlan: left promiscuous mode [ 532.271056][ T1272] team0 (unregistering): Port device macvlan3 removed [ 533.018012][ T1272] team_slave_1 (unregistering): left promiscuous mode [ 533.045351][ T1272] team0 (unregistering): Port device team_slave_1 removed [ 533.100937][ T1272] team_slave_0 (unregistering): left promiscuous mode [ 533.111157][ T1272] team0 (unregistering): Port device team_slave_0 removed [ 533.619867][ T9758] smc: removing ib device syz0 [ 533.675500][T20697] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 534.016982][T20739] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.2'. [ 534.540119][T19930] Bluetooth: hci0: command 0x0406 tx timeout [ 534.612304][T20443] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 534.690390][T20443] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 534.764378][T20443] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 534.885029][T20443] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 535.146002][T20773] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 535.179175][T20773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.203715][T20773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.239113][T20773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.265404][T20773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.304953][T20773] batman_adv: batadv0: Removing interface: ipvlan2 [ 563.179643][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.747011][T19930] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 565.765315][T19930] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 565.773349][T19930] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 565.796350][T19930] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 565.809659][T19930] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 565.818958][T19930] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 565.904130][ T4492] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 565.921073][ T4492] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 565.937969][ T4492] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 565.967052][ T4492] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 565.976887][ T4492] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 565.984715][ T4492] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 566.045115][T19930] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 566.072498][T19930] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 566.082024][T19930] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 566.091506][T19930] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 566.111691][T19930] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 566.119811][T19930] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 566.271397][T19930] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 566.281185][T19930] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 566.291259][T19930] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 566.299909][T19930] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 566.308322][T19930] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 566.315911][T19930] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 567.894440][ T4492] Bluetooth: hci5: command tx timeout [ 568.054817][ T4492] Bluetooth: hci6: command tx timeout [ 568.220170][ T4492] Bluetooth: hci7: command tx timeout [ 568.375180][ T4492] Bluetooth: hci8: command tx timeout [ 569.974611][ T4492] Bluetooth: hci5: command tx timeout [ 570.134884][ T4492] Bluetooth: hci6: command tx timeout [ 570.294991][ T4492] Bluetooth: hci7: command tx timeout [ 570.459468][ T4492] Bluetooth: hci8: command tx timeout [ 572.054786][ T4492] Bluetooth: hci5: command tx timeout [ 572.214925][ T4492] Bluetooth: hci6: command tx timeout [ 572.374771][ T4492] Bluetooth: hci7: command tx timeout [ 572.534872][ T4492] Bluetooth: hci8: command tx timeout [ 574.134855][ T4492] Bluetooth: hci5: command tx timeout [ 574.294579][ T4492] Bluetooth: hci6: command tx timeout [ 574.464284][ T4492] Bluetooth: hci7: command tx timeout [ 574.615105][ T4492] Bluetooth: hci8: command tx timeout [ 586.500517][T19930] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 586.512805][T19930] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 586.524423][T19930] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 586.533800][T19930] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 586.544035][T19930] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 586.551522][T19930] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 588.615353][ T4492] Bluetooth: hci9: command tx timeout [ 590.694658][ T4492] Bluetooth: hci9: command tx timeout [ 592.774517][ T4492] Bluetooth: hci9: command tx timeout [ 594.855582][ T4492] Bluetooth: hci9: command tx timeout [ 611.334553][T19930] Bluetooth: hci1: command 0x0406 tx timeout [ 624.619702][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.685655][T19930] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 630.697085][T19930] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 630.708193][T19930] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 630.727689][T19930] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 630.737469][T19930] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 630.750950][T19930] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 630.805379][ T4492] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 630.816283][ T4492] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 630.834580][ T4492] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 630.844452][ T4492] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 630.855295][ T4492] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 630.862812][ T4492] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 630.962444][ T4492] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 630.972567][ T4492] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 630.981511][ T4492] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 630.990022][ T4492] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 630.998145][ T4492] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 631.010182][ T4492] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 631.349206][T20819] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 631.364839][T20819] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 631.374611][T20819] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 631.383853][T20819] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 631.395883][T20819] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 631.404120][T20819] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 632.774447][T19930] Bluetooth: hci10: command tx timeout [ 632.934980][T19930] Bluetooth: hci11: command tx timeout [ 633.094615][T19930] Bluetooth: hci12: command tx timeout [ 633.494635][T19930] Bluetooth: hci13: command tx timeout [ 634.856411][T19930] Bluetooth: hci10: command tx timeout [ 635.014625][T19930] Bluetooth: hci11: command tx timeout [ 635.174527][T19930] Bluetooth: hci12: command tx timeout [ 635.575907][T19930] Bluetooth: hci13: command tx timeout [ 636.934299][T19930] Bluetooth: hci10: command tx timeout [ 637.094891][T19930] Bluetooth: hci11: command tx timeout [ 637.255378][T19930] Bluetooth: hci12: command tx timeout [ 637.654412][T19930] Bluetooth: hci13: command tx timeout [ 639.014537][T19930] Bluetooth: hci10: command tx timeout [ 639.174683][T19930] Bluetooth: hci11: command tx timeout [ 639.334517][T19930] Bluetooth: hci12: command tx timeout [ 639.740847][T19930] Bluetooth: hci13: command tx timeout [ 647.174754][T20819] Bluetooth: hci4: command 0x0406 tx timeout [ 651.637481][T20819] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 651.647673][T20819] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 651.656646][T20819] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 651.665224][T20819] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 651.673320][T20819] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 651.684483][T20819] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 653.734981][T19930] Bluetooth: hci14: command tx timeout [ 655.814592][T19930] Bluetooth: hci14: command tx timeout [ 657.905144][T19930] Bluetooth: hci14: command tx timeout [ 659.975080][T19930] Bluetooth: hci14: command tx timeout [ 680.943309][ T30] INFO: task kworker/u8:5:1272 blocked for more than 143 seconds. [ 680.958360][ T30] Not tainted 6.10.0-rc1-syzkaller-00310-g98aa546af5e4 #0 [ 680.968352][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 680.977238][ T30] task:kworker/u8:5 state:D stack:21872 pid:1272 tgid:1272 ppid:2 flags:0x00004000 [ 680.993269][ T30] Workqueue: netns cleanup_net 2024/06/07 00:30:16 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 681.068318][ T30] Call Trace: [ 681.071664][ T30] [ 681.075191][ T30] __schedule+0x17e8/0x4a20 [ 681.079779][ T30] ? __pfx___schedule+0x10/0x10 [ 681.112634][ T30] ? __pfx_lock_release+0x10/0x10 [ 681.119914][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 681.131448][ T30] ? kthread_data+0x52/0xd0 [ 681.136362][ T30] ? schedule+0x90/0x320 [ 681.140633][ T30] ? wq_worker_sleeping+0x66/0x240 [ 681.146281][ T30] ? schedule+0x90/0x320 [ 681.150563][ T30] schedule+0x14b/0x320 [ 681.160563][ T30] schedule_preempt_disabled+0x13/0x30 [ 681.166795][ T30] __mutex_lock+0x6a4/0xd70 [ 681.171356][ T30] ? __mutex_lock+0x527/0xd70 [ 681.182602][ T30] ? netdev_run_todo+0x7b2/0x1000 [ 681.188036][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 681.193100][ T30] ? __init_swait_queue_head+0xae/0x150 [ 681.205701][ T30] ? msleep+0xcd/0xe0 [ 681.209736][ T30] netdev_run_todo+0x7b2/0x1000 [ 681.220053][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 681.229195][ T30] ? unregister_netdevice_queue+0x26b/0x370 [ 681.239718][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 681.246405][ T30] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 681.252707][ T30] default_device_exit_batch+0xa14/0xa90 [ 681.265033][ T30] ? __pfx___might_resched+0x10/0x10 [ 681.270378][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 681.281072][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 681.288554][ T30] ? cfg802154_pernet_exit+0xc3/0xe0 [ 681.293882][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 681.300330][ T30] cleanup_net+0x89d/0xcc0 [ 681.310813][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 681.317183][ T30] ? process_scheduled_works+0x945/0x1830 [ 681.322948][ T30] process_scheduled_works+0xa2c/0x1830 [ 681.337977][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 681.344019][ T30] ? assign_work+0x364/0x3d0 [ 681.354436][ T30] worker_thread+0x86d/0xd70 [ 681.359087][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 681.369926][ T30] ? __kthread_parkme+0x169/0x1d0 [ 681.376599][ T30] ? __pfx_worker_thread+0x10/0x10 [ 681.381743][ T30] kthread+0x2f0/0x390 [ 681.390575][ T30] ? __pfx_worker_thread+0x10/0x10 [ 681.404893][ T30] ? __pfx_kthread+0x10/0x10 [ 681.409548][ T30] ret_from_fork+0x4b/0x80 [ 681.414004][ T30] ? __pfx_kthread+0x10/0x10 [ 681.442786][ T30] ret_from_fork_asm+0x1a/0x30 [ 681.450127][ T30] [ 681.453255][ T30] INFO: task kworker/u8:30:9759 blocked for more than 143 seconds. [ 681.464758][ T30] Not tainted 6.10.0-rc1-syzkaller-00310-g98aa546af5e4 #0 [ 681.472419][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 681.486931][ T30] task:kworker/u8:30 state:D stack:24624 pid:9759 tgid:9759 ppid:2 flags:0x00004000 [ 681.501827][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 681.511746][ T30] Call Trace: [ 681.517375][ T30] [ 681.520337][ T30] __schedule+0x17e8/0x4a20 [ 681.529673][ T30] ? __pfx___schedule+0x10/0x10 [ 681.555219][ T30] ? __pfx_lock_release+0x10/0x10 [ 681.560302][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 681.584586][ T30] ? kthread_data+0x52/0xd0 [ 681.589219][ T30] ? schedule+0x90/0x320 [ 681.593509][ T30] ? wq_worker_sleeping+0x66/0x240 [