last executing test programs: 24.338883133s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket(0xa, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe24, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x23, 0x5, 0x0) socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x9c) syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="4ba2000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00', @ANYRES8=r2], 0x44}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000008000008", 0x1d) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1}, 0xc) 23.795343856s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000640)={0x0, 0xc, &(0x7f00000005c0)={&(0x7f0000000780)={0x28, 0xc, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 23.621123952s ago: executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8b, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}]}, &(0x7f0000000240)=0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@bloom_filter={0x1e, 0x8, 0x81, 0x710c, 0x1110, r2, 0x10000, '\x00', 0x0, r2, 0x2, 0x0, 0xfffffffd, 0x7}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map, r4, 0x26}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r5) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="07850000006880ff07292604e700"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r5) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000340)="4073c97412cd5aa659524fab0024fedec00a4817656c42258e78c5aab7787ae94e3dbca056271bfd71415326306176b82ecee2d71a3b92267ff9f13b833c4f2abc15f653c34d02c552399d301000b95b32b024dc65d53e118ca61346c7eec7a5ca364a3dbec5dd8ad61ce9e5f02f9f9007c8b9452c7e010001b3c437a7c5", &(0x7f0000000a40)=@tcp6}, 0x20) shutdown(0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x102) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r7}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x15, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000009000000b704001e00000000850000000300000018110000b7a293b31c1403b4b0a8df7f76d81f5463db7cffec04", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) 23.351255438s ago: executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r2, 0x31, 0x0, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0]}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10) 23.241279342s ago: executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f00000002c0), 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8844) pipe(0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x38, 0x1403, 0x0, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff49790000fcffffff011f000101000000950000000000100018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x2b, &(0x7f0000000040)=[{&(0x7f0000000780)=ANY=[@ANYRES64], 0x29c}], 0x1}, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 9.21787952s ago: executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f00000002c0), 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8844) pipe(0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x38, 0x1403, 0x0, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff49790000fcffffff011f000101000000950000000000100018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x2b, &(0x7f0000000040)=[{&(0x7f0000000780)=ANY=[@ANYRES64], 0x29c}], 0x1}, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 4.116760472s ago: executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000a80)={'syzkaller1\x00', {0x2, 0x0, @empty}}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x84) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000001e00000000000000000000850000004100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x2, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 3.201038948s ago: executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) r1 = epoll_create1(0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r4, 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x8}, 0x8) sendto$inet6(r3, &(0x7f0000000580)="03", 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='ext4_es_lookup_extent_exit\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000a40)=@generic={&(0x7f0000000840)='./file0\x00', r6}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r7, 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000000)="01e6ffffffffffffff000600", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000040)="2e1c81fd85b3ba8ffa94956aa41d32e2", 0x10) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f00000000c0), 0x4) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0x4, 0x3}, 0x6) 2.268021408s ago: executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) read(r0, &(0x7f00000017c0)=""/4106, 0x100a) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x20, 0x8}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x20, 0x2000, 0x0, @prog_fd}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)=""/85, 0x10f, 0x55, 0x0, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x8, 0x7a, 0x2, 0x2eaa, 0xffffffffffffffff, 0x1, '\x00', 0x0, r2, 0x4, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.779600072s ago: executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.671930715s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x3, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000e700000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6(0xa, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket(0x0, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x5a, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x8, 0x0, 0x0) socket(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r6, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e24, 0x80000, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@tclass={{0x14, 0x29, 0x3}}], 0x18}, 0x0) socket(0x25, 0x80000, 0xc44f) 1.304068108s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="210b00000000000000006b00000008000e"], 0x28}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000fcb000)=0x8000048, 0x4) r9 = socket(0x10, 0x803, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00'/20, @ANYRES32=r11, @ANYBLOB="080008001f526bae1400020000000000000000000000ffff00000000"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b521f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x4200, 0x4) 1.303240758s ago: executing program 3: tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1b, &(0x7f0000000000)={'virt_wifi0\x00', @random}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, @private1, @empty, 0x0, 0x0, 0x0, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x81, 0xfffffffd, 0x0, @mcast1, @private1={0xfc, 0x1, '\x00', 0xfd}}}) 1.144600299s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000000000000f7000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xda) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x26}, 0x20) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x8000, 0x4) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00n'], 0x28}}, 0x0) (async) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r7, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) 1.102353201s ago: executing program 0: r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e0e, @loopback=0x7f000008}, 0x10, 0x0, 0x7, &(0x7f0000000140)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0xffffffffffffffff, [{0x0, 0x2}]}]}}}], 0x18}, 0x0) 999.839528ms ago: executing program 0: r0 = socket(0x0, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x801}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x8e8, r2, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x5f}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x73a, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0xc9, 0x7f, [@perr={0x84, 0xc3, {0x5, 0xd, [{{}, @broadcast, 0x6266, @void, 0x32}, {{}, @device_b, 0x70, @void, 0x32}, {{}, @device_a, 0x19d, @void, 0x25}, {{}, @device_b, 0x0, @void, 0x15}, {{}, @broadcast, 0x44b}, {{}, @device_b, 0x3ff, @void, 0x31}, {{0x0, 0x1}, @device_a, 0x0, @value, 0x2b}, {{0x0, 0x1}, @device_a, 0x1ff, @value=@device_b, 0x20}, {{0x0, 0x1}, @broadcast, 0x9, @value, 0x9}, {{}, @device_a, 0x61683c5e, @void, 0x13}, {{0x0, 0x1}, @device_b, 0x6f, @value=@broadcast, 0x9}, {{}, @device_a, 0x0, @void, 0xa}, {{}, @device_a, 0x100, @void, 0x27}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x64, 0xe, {{{}, {}, @broadcast, @broadcast}, 0x0, @random, 0x0, @val={0x0, 0x2, @random="0f92"}, @val, @void, @void, @val={0x6, 0x2}, @void, @val={0x25, 0x3, {0x0, 0x0, 0x1f}}, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x7}}, @void, @val={0x71, 0x7}, @val={0x76, 0x6, {0x0, 0x80}}}}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_IE={0x24, 0x2a, [@erp={0x2a, 0x1}, @mic={0x8c, 0x18, {0x0, "c15a854d8be6", @long="2484d255326aae0c52f03cb984fdf9c4"}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}], @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x8e8}, 0x1, 0x0, 0x0, 0x20000890}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xa, 0x5, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000040)=')', &(0x7f0000000080)=""/59}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000500)=r3}, 0x20) r6 = socket(0x200000100000011, 0x803, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r6, &(0x7f00000000c0)="4dcdc7d96a760000002f00050000000000060000450b21e9e89291df563213e9152234f5623c526156de8ae4ae9150d3d2dd194a", 0x34, 0x0, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000022c0)={0x6, 0x22, &(0x7f0000000680)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8ef}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func], &(0x7f0000000580)='syzkaller\x00', 0x7, 0xdb, &(0x7f0000001e80)=""/219, 0x41000, 0x46, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0xd, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002200)=[{0x1, 0x2, 0xf, 0x9}, {0x5, 0x1, 0x10, 0x9}, {0x4, 0x3, 0xc, 0x1}, {0x1, 0x4, 0xe, 0x2}, {0x5, 0x3, 0xf, 0xb}, {0x1, 0x3, 0xc, 0x8}, {0x1, 0x5, 0x8, 0xc}, {0x4, 0x5, 0x4, 0x1}, {0x2, 0x2, 0xf}]}, 0x90) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) 997.321839ms ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f7706"], 0x0}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x2, 0x6}, 0xfffffffffffffdd9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x6, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) 991.933221ms ago: executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYBLOB="22fdd5409218eb8b9353e56a8233a5c97541b280ec000000000000000341cd3733169f71943f230baa3936ceac572e847f137df5e0dd4f1a93552c7aeb8a1306cd3fc19f7ad8c3729ded4734f144222eab3d402cdf45ba85b6748a8b28c03ea5ab34a01188a423e29327d4846e52ffe69e2b513cfa8895cb2e9aa27cc184dba830f43d3a0bd468538ba9bce2e90000ecce830ab1f69a2033bffb6213f3183797ac2ecb7172fb48109eec77d57a33e8688ffaf5323aae2c8ef2cadd09c40b07aad3dd961ada2a6652dcbbc3de852be5f4918a2334638886fdb8a42bc282abde24b257ab50cd3cd689a6f29add931b250ca6771c6623"], 0xc) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000000, 0x30, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x400448dd, &(0x7f0000000040)={0x1, 'vlan0\x00'}) 724.628504ms ago: executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000), 0x4) sendmmsg(r0, 0x0, 0x0, 0x20000000) r1 = socket(0x200000100000011, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440), 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x5, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850300000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, 0x0, 0x4000000) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="0fd126608032"}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="09040000f63e"], 0x3f00}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x803, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000480)={@local, @private2={0xfc, 0x2, '\x00', 0x2}, @mcast2, 0x8, 0x36, 0x0, 0x700, 0x8009, 0x900012, r6}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000800)={0x128, 0x0, 0x4, 0x1000, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PAUSE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x128}}, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x9}, {0x0, 0xc}}}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8983, &(0x7f0000000780)={0x8, 'pimreg1\x00', {'ip6erspan0\x00'}, 0x7a9}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000c40)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 647.893596ms ago: executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0xf, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x8}, {&(0x7f0000000140)=""/9, 0x10062}, {&(0x7f0000000300)=""/225, 0x5b}, {&(0x7f0000000400)=""/28, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000000)=""/35, 0xffffffffffffffe0}}], 0x2, 0x0, &(0x7f0000008000)={0x0, 0x989680}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="050000000000000000000c00000018000180140002006d6163767461703000000000"], 0x38}}, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, 0x0, 0x0, 0x4}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_gstrings={0xf}}) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0x1c, &(0x7f0000010140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000c9d12b13b7d5e51a00c28eee30368ea2d5a24f8d78f000116120333028e445d676527f66745e5cb6e1ca0292e0ab172cd984f7193bc01db5e37fb58edc2d9e2df6d31201268d9b4158e7ddf3593de7a012cf19e298ece4078403c77b350aa62f7405f38e407cc607a58137f31474da3f1343923997ac9d6ae6406e7ebd88c09bed04a89684de76a06721e67f3da4e54254b0f3b570b8cb1bb7888d", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b89f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000008500000069000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000e80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 646.668148ms ago: executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) read(r0, &(0x7f00000017c0)=""/4106, 0x100a) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x20, 0x8}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x20, 0x2000, 0x0, @prog_fd}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)=""/85, 0x10f, 0x55, 0x0, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 451.618625ms ago: executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040), 0x0) socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f9, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x450bc1, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040), 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @dev, {[@cipso={0x86, 0x27, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x4, "4eb8"}, {0x0, 0x10, "9606053d0006ff00800000b61af9"}]}, @lsrr={0x83, 0x13, 0x0, [@loopback, @loopback, @loopback, @multicast2]}, @ssrr={0x89, 0x3}]}}}}}}}, 0x0) 431.039738ms ago: executing program 0: r0 = socket$kcm(0x10, 0x3, 0x10) (async) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, 0x0}, 0x20000001) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="94cb79a1f47d14f98e52b6eec80fbecb3ab058829e7ac79aa68ec869598f324f05530b12f2397b83a11be55bd31c45a429edc2407974057bc8f85a54021cf588eba3b7a31baae30ee803ea04e68365d258a87c276ffa0402b973d1f85a596913c9e6147d2f340a8e5124786cebf49f4841f8de744353be596e0eb610e6e3b592a7", 0x81}, {&(0x7f0000000300)="4aadf84bc14360dd314ec41caba42966f14607fd8663dad7ebe4660d4cd8e2cf69b9606cc454ff634fb91620cb34bbf83b2b29b2d98f862dfb16b9c179009eec2ba896dfcde76daadfeb5c2b984748f5e56e2e6ae9307a1a8bfccae28332ebc2e74dda6a655c173bd271f0adf60a2730dbd95a076f1da340c7bba89872f4099f30e4f50f99676313ac3e9d5a48a1f57ac6795f2a182fcec770eec812359ad877fa292417905222be1b32c768c4bd1c761741f34dce48775d075f6c968cc6b40433b82eb77396f007c7ee953f5296cb9962998614ce38", 0xd6}, {&(0x7f00000000c0)="a123127454", 0x5}, {&(0x7f0000000280)="053ef3d4709d0ee3325f19e6295c6daf5bbac6e8ab4b2c269320ae9f", 0x1c}], 0x4}, 0x0) 411.414529ms ago: executing program 3: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001eeffffffff0000000100000000", @ANYRES32=r0, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa08000600010000008ba2696d5fe19a0c07857d36e2485bc6678034fd2890dd5a44edfe5881cb3d9222ab7b0f5c7921b07fc4c2fd147cb1fb2fccbf40f25d9e5428c85253f22ba146a672a52c72f369ea955debb389432b32b9de4c4db1b095b9"], 0x38}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001680)={0xffffffffffffffff, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0], 0x0, 0x43, &(0x7f00000018c0)=[{}], 0x8, 0x10, &(0x7f00000014c0), &(0x7f0000001500), 0x8, 0x81, 0x8, 0x8, &(0x7f0000001540)}}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001780)={&(0x7f00000016c0)={0xfffffffffffffef3, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xcf}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}]}, 0x98}}, 0x40001) r4 = socket(0x22, 0x2, 0x4) getsockname$llc(r4, 0x0, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={0xffffffffffffffff, 0x0, 0x0, 0x1000, 0x0, &(0x7f0000000340)=""/4096, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="22200080", @ANYRES32=r5, @ANYBLOB="000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000140)='GPL\x00', 0x7, 0xce, &(0x7f0000000180)=""/206, 0x41000, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x80000001, 0x10001}, 0x10}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='swiotlb_bounced\x00'}, 0x10) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) sendmsg$can_bcm(r7, &(0x7f00000002c0)={0x0, 0x32, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x4008015) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r9, &(0x7f0000000440)={0x0, 0xc00e, &(0x7f0000000400)={&(0x7f00000002c0)={0x14, r8, 0x30d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000008ff"], 0x0) 355.58489ms ago: executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r1, 0x29, 0x46, 0x0, &(0x7f00000000c0)) close(r0) 263.674349ms ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x3c}}, 0x0) (async) syz_emit_ethernet(0x1fb, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x8, 0x4, 0x2, 0x1d, 0x1ed, 0x68, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x1e, 0x1, 0x8, [{@local, 0x2}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xb6, 0x1, [], "152f01ef7f2a6bb79f490452e25fa87a84acedc4925d0eda75cb2c5929b32a604a9c28f405a497fab590b0fae37ad32177d551481df7eb8049c0f024d09f151922023f1c3ce497274ac0f91f4e8af7117e4da4b65cdb447bd09d657b1eac3dc2008b7c04e4fa1b22f5094de3303198dbe03130d1d89e36352bce9fa124355c7bb4792a48c9c4c424517e4aab147562e1c44a4cb75fb349b9ff60b0393ea2e44ff70b24f34f8f00c10bfbd3254bfbd5115f5e091698a0"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x0, 0x1ea6, 0x79e4], "fe5bfb17a14d4ae1261cf3921d4b9c938db2043da4d7f64797fabb03377210d2f805b93b33fd2bf6125e3d35168a"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x36b], "ab152974525eaff91f22f0dd29d1509801f8660ca84f687f9aa6ae4cac8214916c62e92bbc2393de9166df832fcce3d10f2fd4e7d48d3ff2a677f3ab22d2921daad6a69ee3c54b3a2e45caac2663e1a283269129c6927f74c094a21fec5b41611a46c3b5a6d5e941574a1f364625e734747cd86ce9618ea1387def4bb333f087082e4aa946f8f3e1df8993a99c7bdf00b0801fcc0e3fd6d6"}, {0x8, 0x88be, 0x4, {{0x5, 0x1, 0x6, 0x0, 0x0, 0x1, 0x6, 0xdb}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x3, {{0x4, 0x2, 0xcd, 0x1, 0x1, 0x3, 0x6, 0x1}, 0x2, {0x5, 0x9, 0x1, 0x1d, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "293c09acd4"}}}}}}, 0x0) 161.261958ms ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001800010000000000000000000a00000000000000000000000d0005"], 0x30}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r5, 0x107, 0x13, &(0x7f0000000000), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000200), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={r7, @multicast1, @remote}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 157.416844ms ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x9, 0x1}, 0x48) unshare(0x22020600) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0xb, &(0x7f0000000340)=""/222}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x81000000}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 110.619917ms ago: executing program 4: r0 = socket(0x0, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x801}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x8e8, r2, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x5f}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x73a, 0x91, "b9464d4ba8e7be4e301fe4133b48e14cfe8772c0964fcd5058597193536d10982e9c8adf2bf21ffba72f58ed397f9de9996120afc03f52ba05162a83a0a43ad3870589f9f23292e93b028aa154a14722ac6f624ea69cd20f7dfe35851b338d8ebc41f46afec70e57739a7d144b7a60c98b43337c273132b1b571a9736b570509ff471a76fe776c58865bc889f62a9f9d906b1e01039601ea180cf7250e3cfe4c357a55beffcec16458a4c2de34c35ca0f7d4743f08e6d9ffcd21ee470c268693ee4d66b9afaee4b3c5af8f82d9788e728cfc92ed1471c14525e1d10363f93b344677142ad86354679dd406c731221b02db7a5dd3021347a9376bec66d2a3ed7efd930b304aae4ca0337af11bf9a00f847b3c42fa5d6cb112b60b36b8b6279e98a8724830ffda8f45b3e89c9524c69c6acf96fd34fbe1a80090e423e6bc6424e6b2c0bcbb707e11326f9c31d1b99dc153e98e050d618e47b57b0fa3fe049b6d2948b863e3c08d41c6d038e9aed2ebc54d090daeaba4c62cfa6ff9fdd31385ff0ba16d1b643b65464d0d25ac4ccd0c52b9588a4907e4a466957d28b6c110766dced618bb2413da141c40c39b5bc187f3c52097ec7b648362f1506a1d7bdab774fb9687294e1577bcd1d20129f4f18b9db722832d0fddee01929c9e3496e091d63ae06428f5bf32781ead2148408418fad6a7210360574e12b7e696ebf0dc80d1b412c16a595010e8bc9438af81b4ceb5f5639d6ec85f2424be5e3f5af7f1610c73185970e4a758aced0b3c051956f2ee14a2de7a5d92d83c436e6fd6e7b2c1ac56e4e838224317bf61ea45b70167a8d17cb15cccb5eb74c5b8c61f46b7a483967a9937daadf41fdc77d45f22df47e6e86cb0bb78f9338ede991f41cb3d1ce284f4ea94ecd99ec3c2d329c8e73652b06f996dc11cdca38e1f4b6337a94df107e0d9bee2833c3a768da29808ca0a635899193d396761c0e5e9911a7548b78e4e16af061402ea4272dbd68cce7e69f63b80003eca04517f482872437b74954cf7959cff3dfa2c874a4787ed64272bc1802e66a6ff652b8bc01d912ba446567c83643050fcdf022f18b36a5ba97420b43821c88886007340290fb6dd827fbba73b61a342ca561d7643d7ea6eedc1336f80d49870aa468455699dd2cedd4068139126358bb60852c0e73fda187436070acdc487d142bc3b358bc1f6cdd7ab89a55526ce0fbc8d16633815f933b73a4057b30712b7db31371aa63293820b18d807e67e90dff8eb78d4c2d49282bcd7f003b94d538ae7c8e8ba47c452b74dafa39b76972159297c8c5ab5c08fe8950962eab25bc968c4f0e5ca812c09b13c07cea6d181e2d2a01c28ee01acbaca04241aa2549c20bcb4c0a7b16f6d4acf89a191eef546216d5a2e3fb7c6953698efc842a29eb0ee274844ded0ede0c4afa32638a12e4e057f61237806a0dc5d54c6ff07de704984c83d784386910a04d579244fd72833b850b2d516eafdfbe2b80777714744f2832770d9340b77d57488a383a1c446bbb4fd989f06b7ce874bf3171ec5810d67cd568f1760a1d29e257004641388db81d7483b9c0c4b1e47552f7c5860575a4a8a6c7e85ec3a88f773388daf2ca26326206c27c0d990c7933ecf88256ecaf5fa206f59557e501006420258a389b2af10313cc30a0c007aa8ae976f4f174c6cf3487e25de68011f6e86ae2e4cade5812df4014272e405a6f80168d31b4fb48f3d319d4a9a50b7cd9bccfc954140fd274887b4a98e5e6b73429613b7c0f4425d8eb4e38936d2cdd711f86e413db94a82786ed1ab857e555e8f78cd79ae8a903b488c3ee6c2e35eef32f7d29d7d8e55f41f4f99ca28bbb6616896d254e21a8a582972825503555e136f3e5e2c9cc368dce1f1c1219c607e52ffc3d9b0ce4422f3ac61b362c42bc6d45fb3f0396e9b49e53db8ca36924679553dfacfe524194ca9a40a5d49afdc365ad525d8af38009bb9fd8d54c29cfc2f12736661f9c01fac76fc96cab2ac15422e9a621c10f038fff02a86d778ac15658fea1eb63860ae577637e174f8fe4097c170768543f8f46c723b03040b3c42a11618a13ee96fa460ed94e4d0327a8d8a38397b0d81ac233533201c2a89c26e138b5f1d88d38545f94a7bd36e7d9248a52fc6fae4c25b5b6bd97fe7dd601691888e66fa8d77a3276ca54ce033c1904f00826741b4d448545b111d1b2c5b0eb1e40aaafcfbf6b820e3f215dc045971d92a23ab382074e6d10fd17996ccb094bb1bf34a072e266f3e6218ca093a05ff6c4e5e17af6600e8707370f82bc3d6dbcbcca232b47aef414c0b926a05f6427a18d8845a1374f334fb427f61f5bc335f99da313c8d2c4f207f458d3d24fe2ef7a7740587fc0ae49b8565672af92f6ab864e4ca798e7a3ad5714667be8115efd84ee804b55b221b4ce88ad84d7f1d1005495fdf17a0f2dea4504eb7fca7828af777cb9989512eee161108870d000c900b0b541e76090332ef761830538f767f07127f19cd61762c5c37f50a7cb797798993c24edd5e6934daa7c85e22fd0dbcc817b0f7151429da2589a99a994d23a5a596f6f983d015d023fce39943bb65c7acc57f7f"}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0xc9, 0x7f, [@perr={0x84, 0xc3, {0x5, 0xd, [{{}, @broadcast, 0x6266, @void, 0x32}, {{}, @device_b, 0x70, @void, 0x32}, {{}, @device_a, 0x19d, @void, 0x25}, {{}, @device_b, 0x0, @void, 0x15}, {{}, @broadcast, 0x44b}, {{}, @device_b, 0x3ff, @void, 0x31}, {{0x0, 0x1}, @device_a, 0x0, @value, 0x2b}, {{0x0, 0x1}, @device_a, 0x1ff, @value=@device_b, 0x20}, {{0x0, 0x1}, @broadcast, 0x9, @value, 0x9}, {{}, @device_a, 0x61683c5e, @void, 0x13}, {{0x0, 0x1}, @device_b, 0x6f, @value=@broadcast, 0x9}, {{}, @device_a, 0x0, @void, 0xa}, {{}, @device_a, 0x100, @void, 0x27}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x64, 0xe, {{{}, {}, @broadcast, @broadcast}, 0x0, @random, 0x0, @val={0x0, 0x2, @random="0f92"}, @val, @void, @void, @val={0x6, 0x2}, @void, @val={0x25, 0x3, {0x0, 0x0, 0x1f}}, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x7}}, @void, @val={0x71, 0x7}, @val={0x76, 0x6, {0x0, 0x80}}}}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_IE={0x24, 0x2a, [@erp={0x2a, 0x1}, @mic={0x8c, 0x18, {0x0, "c15a854d8be6", @long="2484d255326aae0c52f03cb984fdf9c4"}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}], @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x8e8}, 0x1, 0x0, 0x0, 0x20000890}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xa, 0x5, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000040)=')', &(0x7f0000000080)=""/59}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000500)=r3}, 0x20) r6 = socket(0x200000100000011, 0x803, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r6, &(0x7f00000000c0)="4dcdc7d96a760000002f00050000000000060000450b21e9e89291df563213e9152234f5623c526156de8ae4ae9150d3d2dd194a", 0x34, 0x0, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000022c0)={0x6, 0x22, &(0x7f0000000680)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8ef}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func], &(0x7f0000000580)='syzkaller\x00', 0x7, 0xdb, &(0x7f0000001e80)=""/219, 0x41000, 0x46, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0xd, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002200)=[{0x1, 0x2, 0xf, 0x9}, {0x5, 0x1, 0x10, 0x9}, {0x4, 0x3, 0xc, 0x1}, {0x1, 0x4, 0xe, 0x2}, {0x5, 0x3, 0xf, 0xb}, {0x1, 0x3, 0xc, 0x8}, {0x1, 0x5, 0x8, 0xc}, {0x4, 0x5, 0x4, 0x1}, {0x2, 0x2, 0xf}]}, 0x90) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) 0s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x14}}]}, 0x78}}, 0x0) writev(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): 219.122175][T11981] xt_cgroup: xt_cgroup: no path or classid specified [ 219.442965][T11992] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 219.901311][T12017] syz-executor.3 (12017) used greatest stack depth: 16944 bytes left [ 220.038090][ T5163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.428497][T12049] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 220.441476][T12049] __nla_validate_parse: 5 callbacks suppressed [ 220.441495][T12049] netlink: 203156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 220.469020][T12049] debugfs: Directory 'ü !' with parent 'ieee80211' already present! [ 220.579567][T12057] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 0, id = 0 [ 220.601532][T12056] IPVS: stopping backup sync thread 12057 ... [ 220.825190][T12067] vlan2: entered promiscuous mode [ 220.903446][ T5168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.001316][T12076] validate_nla: 2 callbacks suppressed [ 221.001335][T12076] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 221.016044][T12076] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 221.074585][ T5157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.221807][ T29] audit: type=1804 audit(1718954888.496:39): pid=12079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1236444764/syzkaller.1L6V2h/504/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 221.441885][T12090] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 221.453414][T12090] netlink: 203156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 221.463857][T12091] x_tables: duplicate underflow at hook 2 [ 221.485904][T12090] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 221.505259][T12090] CPU: 1 PID: 12090 Comm: syz-executor.3 Not tainted 6.10.0-rc4-syzkaller-00802-ga6ec08beec9e #0 [ 221.515886][T12090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 221.525969][T12090] Call Trace: [ 221.529289][T12090] [ 221.532247][T12090] dump_stack_lvl+0x241/0x360 [ 221.536992][T12090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.542231][T12090] ? __pfx__printk+0x10/0x10 [ 221.546860][T12090] ? sysfs_warn_dup+0x51/0xa0 [ 221.551578][T12090] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 221.556984][T12090] sysfs_warn_dup+0x8e/0xa0 [ 221.561522][T12090] sysfs_do_create_link_sd+0xbe/0x110 [ 221.566934][T12090] device_add_class_symlinks+0x1c5/0x250 [ 221.572612][T12090] device_add+0x553/0xbf0 [ 221.576965][T12090] wiphy_register+0x1d3f/0x2b30 [ 221.581829][T12090] ? __pfx_wiphy_register+0x10/0x10 [ 221.587038][T12090] ? minstrel_ht_alloc+0x72b/0x860 [ 221.592190][T12090] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 221.598300][T12090] ieee80211_register_hw+0x3098/0x3d80 [ 221.603984][T12090] ? ieee80211_register_hw+0x10d1/0x3d80 [ 221.609671][T12090] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 221.615527][T12090] ? __asan_memset+0x23/0x50 [ 221.620148][T12090] ? __hrtimer_init+0x170/0x250 [ 221.625046][T12090] mac80211_hwsim_new_radio+0x2597/0x44d0 [ 221.630916][T12090] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 221.637023][T12090] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 221.643465][T12090] ? kstrndup+0x5c/0xb0 [ 221.647648][T12090] ? __asan_memcpy+0x40/0x70 [ 221.652273][T12090] hwsim_new_radio_nl+0xe4c/0x21d0 [ 221.657448][T12090] ? __pfx___nla_validate_parse+0x10/0x10 [ 221.663213][T12090] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 221.668834][T12090] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 221.675214][T12090] genl_rcv_msg+0xb14/0xec0 [ 221.679761][T12090] ? mark_lock+0x9a/0x350 [ 221.684135][T12090] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.689232][T12090] ? __pfx_lock_acquire+0x10/0x10 [ 221.694290][T12090] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 221.699882][T12090] ? __pfx___might_resched+0x10/0x10 [ 221.705221][T12090] netlink_rcv_skb+0x1e3/0x430 [ 221.710019][T12090] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.715086][T12090] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.720418][T12090] ? __netlink_deliver_tap+0x77e/0x7c0 [ 221.725919][T12090] genl_rcv+0x28/0x40 [ 221.729930][T12090] netlink_unicast+0x7f0/0x990 [ 221.734728][T12090] ? __pfx_netlink_unicast+0x10/0x10 [ 221.740067][T12090] ? __virt_addr_valid+0x183/0x520 [ 221.745204][T12090] ? __check_object_size+0x49c/0x900 [ 221.750526][T12090] ? bpf_lsm_netlink_send+0x9/0x10 [ 221.755674][T12090] netlink_sendmsg+0x8e4/0xcb0 [ 221.760463][T12090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.765762][T12090] ? __import_iovec+0x536/0x820 [ 221.770632][T12090] ? aa_sock_msg_perm+0x91/0x160 [ 221.775594][T12090] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 221.780894][T12090] ? security_socket_sendmsg+0x87/0xb0 [ 221.786367][T12090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.791667][T12090] __sock_sendmsg+0x221/0x270 [ 221.796360][T12090] ____sys_sendmsg+0x525/0x7d0 [ 221.801153][T12090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.806469][T12090] __sys_sendmsg+0x2b0/0x3a0 [ 221.811091][T12090] ? __pfx___sys_sendmsg+0x10/0x10 [ 221.816249][T12090] ? security_bpf+0x87/0xb0 [ 221.820798][T12090] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 221.827125][T12090] ? do_syscall_64+0x100/0x230 [ 221.831896][T12090] ? do_syscall_64+0xb6/0x230 [ 221.836590][T12090] do_syscall_64+0xf3/0x230 [ 221.841133][T12090] ? clear_bhb_loop+0x35/0x90 [ 221.845857][T12090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.851794][T12090] RIP: 0033:0x7f9031a7cf29 [ 221.856252][T12090] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 221.875889][T12090] RSP: 002b:00007f90328760c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.884336][T12090] RAX: ffffffffffffffda RBX: 00007f9031bb3f80 RCX: 00007f9031a7cf29 [ 221.892329][T12090] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 221.900331][T12090] RBP: 00007f9031aec074 R08: 0000000000000000 R09: 0000000000000000 [ 221.908326][T12090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.916304][T12090] R13: 000000000000000b R14: 00007f9031bb3f80 R15: 00007ffc0f405058 [ 221.924335][T12090] [ 222.072468][T12106] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.3'. [ 222.088700][T12106] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 222.114641][ T5163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.203271][T12116] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.1'. [ 222.218225][T12116] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 222.282515][T12116] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 222.314883][T12116] gretap0: entered promiscuous mode [ 222.563525][T12142] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.609578][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 222.719011][T12151] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 222.729482][T12151] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.750074][T12151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.757384][T12151] IPv6: NLM_F_CREATE should be set when creating new route [ 222.764693][T12151] IPv6: NLM_F_CREATE should be set when creating new route [ 222.771964][T12151] IPv6: NLM_F_CREATE should be set when creating new route [ 222.848991][T12154] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 223.034588][T12173] ipt_ECN: cannot use operation on non-tcp rule [ 223.115030][T12177] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 223.122190][T12177] macsec1: entered promiscuous mode [ 223.127978][T12178] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 223.141070][T12177] macsec1: entered allmulticast mode [ 223.159769][T12177] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 223.162042][ T933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.209482][T12177] mac80211_hwsim hwsim43 wlan0: left allmulticast mode [ 223.237228][T12177] mac80211_hwsim hwsim43 wlan0: left promiscuous mode [ 223.768133][T12221] ipt_ECN: cannot use operation on non-tcp rule [ 223.808855][T12221] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 223.934483][T12227] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 223.946243][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.137281][T12240] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 224.204092][ T933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.380874][T12255] ipt_ECN: cannot use operation on non-tcp rule [ 224.424543][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.870601][T12287] ipt_ECN: cannot use operation on non-tcp rule [ 225.037679][T12295] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 225.049805][T12295] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 225.058312][T12295] CPU: 1 PID: 12295 Comm: syz-executor.1 Not tainted 6.10.0-rc4-syzkaller-00802-ga6ec08beec9e #0 [ 225.064436][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.068832][T12295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 225.087018][T12295] Call Trace: [ 225.090312][T12295] [ 225.093262][T12295] dump_stack_lvl+0x241/0x360 [ 225.097980][T12295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.103210][T12295] ? __pfx__printk+0x10/0x10 [ 225.107830][T12295] ? sysfs_warn_dup+0x51/0xa0 [ 225.112545][T12295] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 225.117938][T12295] sysfs_warn_dup+0x8e/0xa0 [ 225.122451][T12295] sysfs_do_create_link_sd+0xbe/0x110 [ 225.127839][T12295] device_add_class_symlinks+0x1c5/0x250 [ 225.133503][T12295] device_add+0x553/0xbf0 [ 225.137845][T12295] wiphy_register+0x1d3f/0x2b30 [ 225.142717][T12295] ? __pfx_wiphy_register+0x10/0x10 [ 225.147935][T12295] ? minstrel_ht_alloc+0x72b/0x860 [ 225.153082][T12295] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 225.159173][T12295] ieee80211_register_hw+0x3098/0x3d80 [ 225.164662][T12295] ? ieee80211_register_hw+0x10d1/0x3d80 [ 225.170319][T12295] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 225.176154][T12295] ? __asan_memset+0x23/0x50 [ 225.180768][T12295] ? __hrtimer_init+0x170/0x250 [ 225.185647][T12295] mac80211_hwsim_new_radio+0x2597/0x44d0 [ 225.191438][T12295] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 225.197536][T12295] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 225.203959][T12295] ? kstrndup+0x5c/0xb0 [ 225.208139][T12295] ? __asan_memcpy+0x40/0x70 [ 225.212773][T12295] hwsim_new_radio_nl+0xe4c/0x21d0 [ 225.217932][T12295] ? __pfx___nla_validate_parse+0x10/0x10 [ 225.223673][T12295] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 225.229311][T12295] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 225.235677][T12295] genl_rcv_msg+0xb14/0xec0 [ 225.240187][T12295] ? mark_lock+0x9a/0x350 [ 225.244545][T12295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.249619][T12295] ? __pfx_lock_acquire+0x10/0x10 [ 225.254670][T12295] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 225.260241][T12295] ? __pfx___might_resched+0x10/0x10 [ 225.265554][T12295] netlink_rcv_skb+0x1e3/0x430 [ 225.270335][T12295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.275361][T12295] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 225.280649][T12295] ? __netlink_deliver_tap+0x77e/0x7c0 [ 225.286133][T12295] genl_rcv+0x28/0x40 [ 225.290131][T12295] netlink_unicast+0x7f0/0x990 [ 225.294922][T12295] ? __pfx_netlink_unicast+0x10/0x10 [ 225.300210][T12295] ? __virt_addr_valid+0x183/0x520 [ 225.305339][T12295] ? __check_object_size+0x49c/0x900 [ 225.310654][T12295] ? bpf_lsm_netlink_send+0x9/0x10 [ 225.315806][T12295] netlink_sendmsg+0x8e4/0xcb0 [ 225.320593][T12295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.325891][T12295] ? __import_iovec+0x536/0x820 [ 225.330752][T12295] ? aa_sock_msg_perm+0x91/0x160 [ 225.335717][T12295] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 225.340995][T12295] ? security_socket_sendmsg+0x87/0xb0 [ 225.346465][T12295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.351763][T12295] __sock_sendmsg+0x221/0x270 [ 225.356467][T12295] ____sys_sendmsg+0x525/0x7d0 [ 225.361263][T12295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.366576][T12295] __sys_sendmsg+0x2b0/0x3a0 [ 225.371183][T12295] ? __pfx___sys_sendmsg+0x10/0x10 [ 225.376330][T12295] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 225.382654][T12295] ? do_syscall_64+0x100/0x230 [ 225.387439][T12295] ? do_syscall_64+0xb6/0x230 [ 225.392140][T12295] do_syscall_64+0xf3/0x230 [ 225.396649][T12295] ? clear_bhb_loop+0x35/0x90 [ 225.401338][T12295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.407249][T12295] RIP: 0033:0x7feac5a7cf29 [ 225.411673][T12295] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 225.431298][T12295] RSP: 002b:00007feac679f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.439707][T12295] RAX: ffffffffffffffda RBX: 00007feac5bb3f80 RCX: 00007feac5a7cf29 [ 225.447685][T12295] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 225.455667][T12295] RBP: 00007feac5aec074 R08: 0000000000000000 R09: 0000000000000000 [ 225.463642][T12295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.471620][T12295] R13: 000000000000000b R14: 00007feac5bb3f80 R15: 00007fff7c46bff8 [ 225.479599][T12295] [ 225.487934][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.504391][ T5157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.633745][T12299] team0: entered promiscuous mode [ 225.646683][T12299] team_slave_0: entered promiscuous mode [ 225.652617][T12299] team_slave_1: entered promiscuous mode [ 225.668372][T12299] team0: left promiscuous mode [ 225.686052][T12299] team_slave_0: left promiscuous mode [ 225.691569][T12299] team_slave_1: left promiscuous mode [ 226.028196][T12326] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 226.037711][T12326] __nla_validate_parse: 4 callbacks suppressed [ 226.037728][T12326] netlink: 203156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 226.060139][T12326] debugfs: Directory 'ü !' with parent 'ieee80211' already present! [ 226.572346][T12353] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 226.593115][T12353] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 226.604176][ T5157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.023908][T12388] macvlan3: entered promiscuous mode [ 227.030129][T12388] vlan1: entered promiscuous mode [ 227.042564][T12388] team0: Port device macvlan3 added [ 227.112367][T12390] macsec1: entered promiscuous mode [ 227.118250][T12390] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 227.128052][T12390] macsec1: entered allmulticast mode [ 227.133858][T12390] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 227.144765][T12390] mac80211_hwsim hwsim47 wlan0: left allmulticast mode [ 227.151672][T12390] mac80211_hwsim hwsim47 wlan0: left promiscuous mode [ 227.330100][T12394] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 227.387741][T12398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 227.609215][T12405] team0: entered promiscuous mode [ 227.616240][T12405] team_slave_0: entered promiscuous mode [ 227.622252][T12405] team_slave_1: entered promiscuous mode [ 227.635184][ T933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.644032][T12405] team0: left promiscuous mode [ 227.648938][T12405] team_slave_0: left promiscuous mode [ 227.654896][T12405] team_slave_1: left promiscuous mode [ 227.671717][T12403] team0: entered promiscuous mode [ 227.677147][T12403] team_slave_0: entered promiscuous mode [ 227.683315][T12403] team_slave_1: entered promiscuous mode [ 227.690335][T12403] team0: left promiscuous mode [ 227.695343][T12403] team_slave_0: left promiscuous mode [ 227.700848][T12403] team_slave_1: left promiscuous mode [ 227.767038][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 227.777522][T12407] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 228.103304][ T5168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.105659][T12426] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 228.209658][T12429] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 228.233524][T12429] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 228.441957][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 228.671330][ T5164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.694363][T12464] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 229.001363][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 229.010178][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 229.021159][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 229.031089][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 229.040465][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 229.049446][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 229.308256][T12482] lo speed is unknown, defaulting to 1000 [ 229.475282][T12502] netlink: 208 bytes leftover after parsing attributes in process `syz-executor.2'. [ 229.515574][T12505] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 229.711865][ T5163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.729311][T12482] chnl_net:caif_netlink_parms(): no params data found [ 230.027430][T12482] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.058643][T12482] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.084261][T12482] bridge_slave_0: entered allmulticast mode [ 230.111809][T12482] bridge_slave_0: entered promiscuous mode [ 230.146988][T12482] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.171166][T12482] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.193138][T12482] bridge_slave_1: entered allmulticast mode [ 230.218911][T12482] bridge_slave_1: entered promiscuous mode [ 230.381814][T12556] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.424548][T12556] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 230.448438][ T12] bridge_slave_1: left allmulticast mode [ 230.465569][ T12] bridge_slave_1: left promiscuous mode [ 230.481993][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.514424][T12556] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 230.539780][ T12] bridge_slave_0: left allmulticast mode [ 230.546401][ T12] bridge_slave_0: left promiscuous mode [ 230.552259][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.585108][T12560] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 231.143082][ T53] Bluetooth: hci6: command tx timeout [ 231.484300][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.501467][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.513521][ T12] bond0 (unregistering): Released all slaves [ 231.531180][T12482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.667420][T12586] team0: entered promiscuous mode [ 231.676639][T12586] team_slave_0: entered promiscuous mode [ 231.698689][T12586] team_slave_1: entered promiscuous mode [ 231.716032][T12592] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 231.726175][T12586] team0: left promiscuous mode [ 231.730973][T12586] team_slave_0: left promiscuous mode [ 231.737034][T12586] team_slave_1: left promiscuous mode [ 231.759694][T12482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.858208][T12597] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 231.908653][T12592] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 231.924107][T12593] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 232.004763][T12594] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 232.052419][T12482] team0: Port device team_slave_0 added [ 232.114219][T12482] team0: Port device team_slave_1 added [ 232.351418][T12482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.375238][T12482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.430350][T12622] __nla_validate_parse: 1 callbacks suppressed [ 232.430388][T12622] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 232.463010][T12482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.504556][T12482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.511188][T12622] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 232.523619][T12482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.559985][T12482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.569161][T12622] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 232.590381][T12622] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 232.860475][T12632] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 232.880161][T12632] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 232.965822][T12482] hsr_slave_0: entered promiscuous mode [ 233.002208][T12482] hsr_slave_1: entered promiscuous mode [ 233.044780][T12482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.074330][T12638] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 233.080923][T12482] Cannot create hsr debugfs directory [ 233.223948][ T53] Bluetooth: hci6: command tx timeout [ 233.235366][T12641] team0: entered promiscuous mode [ 233.249947][T12641] team_slave_0: entered promiscuous mode [ 233.271685][T12641] team_slave_1: entered promiscuous mode [ 233.283927][T12641] team0: left promiscuous mode [ 233.288726][T12641] team_slave_0: left promiscuous mode [ 233.297692][T12641] team_slave_1: left promiscuous mode [ 233.310735][T12633] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 233.745504][ T12] hsr_slave_0: left promiscuous mode [ 233.766390][ T12] hsr_slave_1: left promiscuous mode [ 233.774792][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.803880][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.823148][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.830565][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.894088][ T12] veth1_macvtap: left promiscuous mode [ 233.902172][ T12] veth0_macvtap: left promiscuous mode [ 233.908517][ T12] veth1_vlan: left promiscuous mode [ 233.915046][ T12] veth0_vlan: left promiscuous mode [ 233.922435][T12674] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 234.009116][ T12] infiniband syz0: set down [ 234.555348][ T11] smc: removing ib device syz0 [ 234.920207][ T12] team0 (unregistering): Port device team_slave_1 removed [ 234.961395][ T12] team0 (unregistering): Port device team_slave_0 removed [ 235.305667][ T53] Bluetooth: hci6: command tx timeout [ 235.365534][ T5164] infiniband syz0: ib_query_port failed (-19) [ 235.399816][T12681] tipc: Enabling of bearer rejected, media not registered [ 235.673300][T12682] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 235.871867][T12696] team0: entered promiscuous mode [ 235.882863][T12696] team_slave_0: entered promiscuous mode [ 235.894021][T12696] team_slave_1: entered promiscuous mode [ 235.919265][T12696] team0: left promiscuous mode [ 235.924841][T12696] team_slave_0: left promiscuous mode [ 235.935985][T12696] team_slave_1: left promiscuous mode [ 236.455907][T12706] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 236.479239][T12706] netlink: 203156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 237.386634][ T53] Bluetooth: hci6: command tx timeout [ 238.273516][T12482] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.304726][T12706] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 238.323543][T12706] CPU: 0 PID: 12706 Comm: syz-executor.3 Not tainted 6.10.0-rc4-syzkaller-00802-ga6ec08beec9e #0 [ 238.334079][T12706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 238.344155][T12706] Call Trace: [ 238.347450][T12706] [ 238.350398][T12706] dump_stack_lvl+0x241/0x360 [ 238.355114][T12706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.360389][T12706] ? __pfx__printk+0x10/0x10 [ 238.365016][T12706] ? sysfs_warn_dup+0x51/0xa0 [ 238.369733][T12706] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 238.375138][T12706] sysfs_warn_dup+0x8e/0xa0 [ 238.379675][T12706] sysfs_do_create_link_sd+0xbe/0x110 [ 238.385084][T12706] device_add_class_symlinks+0x1c5/0x250 [ 238.390755][T12706] device_add+0x553/0xbf0 [ 238.395215][T12706] wiphy_register+0x1d3f/0x2b30 [ 238.400116][T12706] ? __pfx_wiphy_register+0x10/0x10 [ 238.405336][T12706] ? minstrel_ht_alloc+0x72b/0x860 [ 238.410489][T12706] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 238.416601][T12706] ieee80211_register_hw+0x3098/0x3d80 [ 238.422139][T12706] ? ieee80211_register_hw+0x10d1/0x3d80 [ 238.427815][T12706] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 238.433669][T12706] ? __asan_memset+0x23/0x50 [ 238.438289][T12706] ? __hrtimer_init+0x170/0x250 [ 238.443180][T12706] mac80211_hwsim_new_radio+0x2597/0x44d0 [ 238.448957][T12706] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 238.455047][T12706] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 238.461489][T12706] ? kstrndup+0x5c/0xb0 [ 238.465673][T12706] ? __asan_memcpy+0x40/0x70 [ 238.470291][T12706] hwsim_new_radio_nl+0xe4c/0x21d0 [ 238.475446][T12706] ? __pfx___nla_validate_parse+0x10/0x10 [ 238.481165][T12706] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 238.486737][T12706] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 238.493071][T12706] genl_rcv_msg+0xb14/0xec0 [ 238.497573][T12706] ? mark_lock+0x9a/0x350 [ 238.501927][T12706] ? __pfx_genl_rcv_msg+0x10/0x10 [ 238.507003][T12706] ? __pfx_lock_acquire+0x10/0x10 [ 238.512025][T12706] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 238.517595][T12706] ? __pfx___might_resched+0x10/0x10 [ 238.522996][T12706] netlink_rcv_skb+0x1e3/0x430 [ 238.527797][T12706] ? __pfx_genl_rcv_msg+0x10/0x10 [ 238.532833][T12706] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 238.538153][T12706] ? __netlink_deliver_tap+0x77e/0x7c0 [ 238.543649][T12706] genl_rcv+0x28/0x40 [ 238.547632][T12706] netlink_unicast+0x7f0/0x990 [ 238.552405][T12706] ? __pfx_netlink_unicast+0x10/0x10 [ 238.557690][T12706] ? __virt_addr_valid+0x183/0x520 [ 238.562803][T12706] ? __check_object_size+0x49c/0x900 [ 238.568107][T12706] ? bpf_lsm_netlink_send+0x9/0x10 [ 238.573247][T12706] netlink_sendmsg+0x8e4/0xcb0 [ 238.578019][T12706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.583311][T12706] ? __import_iovec+0x536/0x820 [ 238.588184][T12706] ? aa_sock_msg_perm+0x91/0x160 [ 238.593149][T12706] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 238.598437][T12706] ? security_socket_sendmsg+0x87/0xb0 [ 238.603911][T12706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.609199][T12706] __sock_sendmsg+0x221/0x270 [ 238.613890][T12706] ____sys_sendmsg+0x525/0x7d0 [ 238.618675][T12706] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.623982][T12706] __sys_sendmsg+0x2b0/0x3a0 [ 238.628579][T12706] ? __pfx___sys_sendmsg+0x10/0x10 [ 238.633769][T12706] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 238.640118][T12706] ? do_syscall_64+0x100/0x230 [ 238.644887][T12706] ? do_syscall_64+0xb6/0x230 [ 238.649568][T12706] do_syscall_64+0xf3/0x230 [ 238.654085][T12706] ? clear_bhb_loop+0x35/0x90 [ 238.658774][T12706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.664664][T12706] RIP: 0033:0x7f9031a7cf29 [ 238.669072][T12706] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 238.688700][T12706] RSP: 002b:00007f90328760c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.697121][T12706] RAX: ffffffffffffffda RBX: 00007f9031bb3f80 RCX: 00007f9031a7cf29 [ 238.705086][T12706] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 238.713049][T12706] RBP: 00007f9031aec074 R08: 0000000000000000 R09: 0000000000000000 [ 238.721018][T12706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.728986][T12706] R13: 000000000000000b R14: 00007f9031bb3f80 R15: 00007ffc0f405058 [ 238.736984][T12706] [ 238.803845][T12482] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.898872][T12482] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.045730][T12482] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.094865][T12733] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 239.124275][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 239.372448][T12715] infiniband syz0: set active [ 239.390536][T12715] infiniband syz0: added veth0_vlan [ 239.390928][T12739] tipc: Bearer : already 2 bearers with priority 0 [ 239.402647][T12715] syz0: rxe_create_cq: returned err = -12 [ 239.406405][T12739] tipc: Enabling of bearer rejected, cannot adjust to lower [ 239.422129][T12482] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.424824][T12715] infiniband syz0: Couldn't create ib_mad CQ [ 239.439634][T12482] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 239.448456][T12715] infiniband syz0: Couldn't open port 1 [ 239.469788][T12482] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 239.492633][T12715] RDS/IB: syz0: added [ 239.498748][T12715] smc: adding ib device syz0 with port count 1 [ 239.512342][T12715] smc: ib device syz0 port 1 has pnetid SYZ1 (user defined) [ 239.525353][T12482] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 239.654087][ T29] audit: type=1804 audit(1718954906.916:40): pid=12741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3188060543/syzkaller.3lX5AS/479/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 239.741801][T12482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.756031][ T29] audit: type=1804 audit(1718954906.926:41): pid=12741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3188060543/syzkaller.3lX5AS/479/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 239.817175][T12482] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.876811][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.884120][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.965084][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.972211][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.056792][T12482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.117221][T12747] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.2'. [ 240.472409][T12762] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 240.482396][T12762] netlink: 203156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.495608][T12762] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 240.504856][T12762] CPU: 1 PID: 12762 Comm: syz-executor.3 Not tainted 6.10.0-rc4-syzkaller-00802-ga6ec08beec9e #0 [ 240.515383][T12762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 240.525471][T12762] Call Trace: [ 240.528765][T12762] [ 240.531714][T12762] dump_stack_lvl+0x241/0x360 [ 240.536432][T12762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.541661][T12762] ? __pfx__printk+0x10/0x10 [ 240.546284][T12762] ? sysfs_warn_dup+0x51/0xa0 [ 240.550990][T12762] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 240.556391][T12762] sysfs_warn_dup+0x8e/0xa0 [ 240.560937][T12762] sysfs_do_create_link_sd+0xbe/0x110 [ 240.566347][T12762] device_add_class_symlinks+0x1c5/0x250 [ 240.572019][T12762] device_add+0x553/0xbf0 [ 240.576392][T12762] wiphy_register+0x1d3f/0x2b30 [ 240.581293][T12762] ? __pfx_wiphy_register+0x10/0x10 [ 240.586516][T12762] ? minstrel_ht_alloc+0x72b/0x860 [ 240.591669][T12762] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 240.597775][T12762] ieee80211_register_hw+0x3098/0x3d80 [ 240.603273][T12762] ? ieee80211_register_hw+0x10d1/0x3d80 [ 240.608940][T12762] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 240.614781][T12762] ? __asan_memset+0x23/0x50 [ 240.619398][T12762] ? __hrtimer_init+0x170/0x250 [ 240.624288][T12762] mac80211_hwsim_new_radio+0x2597/0x44d0 [ 240.630070][T12762] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 240.636169][T12762] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 240.642610][T12762] ? kstrndup+0x5c/0xb0 [ 240.646789][T12762] ? __asan_memcpy+0x40/0x70 [ 240.651408][T12762] hwsim_new_radio_nl+0xe4c/0x21d0 [ 240.656566][T12762] ? __pfx___nla_validate_parse+0x10/0x10 [ 240.662313][T12762] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 240.667928][T12762] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 240.674299][T12762] genl_rcv_msg+0xb14/0xec0 [ 240.678831][T12762] ? mark_lock+0x9a/0x350 [ 240.683194][T12762] ? __pfx_genl_rcv_msg+0x10/0x10 [ 240.688272][T12762] ? __pfx_lock_acquire+0x10/0x10 [ 240.693320][T12762] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 240.698897][T12762] ? __pfx___might_resched+0x10/0x10 [ 240.704220][T12762] netlink_rcv_skb+0x1e3/0x430 [ 240.709009][T12762] ? __pfx_genl_rcv_msg+0x10/0x10 [ 240.714065][T12762] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 240.719385][T12762] ? __netlink_deliver_tap+0x77e/0x7c0 [ 240.724885][T12762] genl_rcv+0x28/0x40 [ 240.728893][T12762] netlink_unicast+0x7f0/0x990 [ 240.733703][T12762] ? __pfx_netlink_unicast+0x10/0x10 [ 240.739020][T12762] ? __virt_addr_valid+0x183/0x520 [ 240.744167][T12762] ? __check_object_size+0x49c/0x900 [ 240.749486][T12762] ? bpf_lsm_netlink_send+0x9/0x10 [ 240.754635][T12762] netlink_sendmsg+0x8e4/0xcb0 [ 240.759436][T12762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.764743][T12762] ? __import_iovec+0x536/0x820 [ 240.769630][T12762] ? aa_sock_msg_perm+0x91/0x160 [ 240.774621][T12762] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 240.779927][T12762] ? security_socket_sendmsg+0x87/0xb0 [ 240.785415][T12762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.790722][T12762] __sock_sendmsg+0x221/0x270 [ 240.795426][T12762] ____sys_sendmsg+0x525/0x7d0 [ 240.800248][T12762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.805580][T12762] __sys_sendmsg+0x2b0/0x3a0 [ 240.810199][T12762] ? __pfx___sys_sendmsg+0x10/0x10 [ 240.815391][T12762] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 240.821740][T12762] ? do_syscall_64+0x100/0x230 [ 240.826540][T12762] ? do_syscall_64+0xb6/0x230 [ 240.831244][T12762] do_syscall_64+0xf3/0x230 [ 240.835777][T12762] ? clear_bhb_loop+0x35/0x90 [ 240.840493][T12762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.846424][T12762] RIP: 0033:0x7f9031a7cf29 [ 240.850869][T12762] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 240.870497][T12762] RSP: 002b:00007f90328760c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.878939][T12762] RAX: ffffffffffffffda RBX: 00007f9031bb3f80 RCX: 00007f9031a7cf29 [ 240.886936][T12762] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 240.894928][T12762] RBP: 00007f9031aec074 R08: 0000000000000000 R09: 0000000000000000 [ 240.902916][T12762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.910901][T12762] R13: 000000000000000b R14: 00007f9031bb3f80 R15: 00007ffc0f405058 [ 240.918913][T12762] [ 241.005298][T12482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.281229][T12779] team0: entered promiscuous mode [ 241.305526][T12779] team_slave_0: entered promiscuous mode [ 241.311381][T12779] team_slave_1: entered promiscuous mode [ 241.327815][T12779] team0: left promiscuous mode [ 241.332671][T12779] team_slave_0: left promiscuous mode [ 241.345842][T12779] team_slave_1: left promiscuous mode [ 241.357260][T12784] dccp_invalid_packet: P.Data Offset(6) too small [ 241.515172][T12791] Cannot find add_set index 0 as target [ 241.578925][T12795] Cannot find add_set index 0 as target [ 241.633983][T12797] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 241.645057][T12482] veth0_vlan: entered promiscuous mode [ 241.652776][T12797] netlink: 203156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 241.671499][T12797] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 241.687110][T12797] CPU: 1 PID: 12797 Comm: syz-executor.3 Not tainted 6.10.0-rc4-syzkaller-00802-ga6ec08beec9e #0 [ 241.697641][T12797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 241.707710][T12797] Call Trace: [ 241.710992][T12797] [ 241.713928][T12797] dump_stack_lvl+0x241/0x360 [ 241.718619][T12797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.723828][T12797] ? __pfx__printk+0x10/0x10 [ 241.728424][T12797] ? sysfs_warn_dup+0x51/0xa0 [ 241.733119][T12797] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 241.738495][T12797] sysfs_warn_dup+0x8e/0xa0 [ 241.743009][T12797] sysfs_do_create_link_sd+0xbe/0x110 [ 241.748389][T12797] device_add_class_symlinks+0x1c5/0x250 [ 241.754032][T12797] device_add+0x553/0xbf0 [ 241.758371][T12797] wiphy_register+0x1d3f/0x2b30 [ 241.763239][T12797] ? __pfx_wiphy_register+0x10/0x10 [ 241.768444][T12797] ? minstrel_ht_alloc+0x72b/0x860 [ 241.773591][T12797] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 241.779671][T12797] ieee80211_register_hw+0x3098/0x3d80 [ 241.785149][T12797] ? ieee80211_register_hw+0x10d1/0x3d80 [ 241.790786][T12797] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 241.796605][T12797] ? __asan_memset+0x23/0x50 [ 241.801198][T12797] ? __hrtimer_init+0x170/0x250 [ 241.806065][T12797] mac80211_hwsim_new_radio+0x2597/0x44d0 [ 241.811814][T12797] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 241.817884][T12797] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 241.824302][T12797] ? kstrndup+0x5c/0xb0 [ 241.828462][T12797] ? __asan_memcpy+0x40/0x70 [ 241.833058][T12797] hwsim_new_radio_nl+0xe4c/0x21d0 [ 241.838188][T12797] ? __pfx___nla_validate_parse+0x10/0x10 [ 241.843910][T12797] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 241.849490][T12797] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 241.855835][T12797] genl_rcv_msg+0xb14/0xec0 [ 241.860342][T12797] ? mark_lock+0x9a/0x350 [ 241.864680][T12797] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.869729][T12797] ? __pfx_lock_acquire+0x10/0x10 [ 241.874756][T12797] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 241.880340][T12797] ? __pfx___might_resched+0x10/0x10 [ 241.885639][T12797] netlink_rcv_skb+0x1e3/0x430 [ 241.890404][T12797] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.895436][T12797] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.900740][T12797] ? __netlink_deliver_tap+0x77e/0x7c0 [ 241.906212][T12797] genl_rcv+0x28/0x40 [ 241.910208][T12797] netlink_unicast+0x7f0/0x990 [ 241.914987][T12797] ? __pfx_netlink_unicast+0x10/0x10 [ 241.920275][T12797] ? __virt_addr_valid+0x183/0x520 [ 241.925397][T12797] ? __check_object_size+0x49c/0x900 [ 241.930687][T12797] ? bpf_lsm_netlink_send+0x9/0x10 [ 241.935807][T12797] netlink_sendmsg+0x8e4/0xcb0 [ 241.940585][T12797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.945873][T12797] ? __import_iovec+0x536/0x820 [ 241.950725][T12797] ? aa_sock_msg_perm+0x91/0x160 [ 241.955670][T12797] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 241.960951][T12797] ? security_socket_sendmsg+0x87/0xb0 [ 241.966414][T12797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.971695][T12797] __sock_sendmsg+0x221/0x270 [ 241.976373][T12797] ____sys_sendmsg+0x525/0x7d0 [ 241.981147][T12797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.986452][T12797] __sys_sendmsg+0x2b0/0x3a0 [ 241.991045][T12797] ? __pfx___sys_sendmsg+0x10/0x10 [ 241.996197][T12797] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 242.002524][T12797] ? do_syscall_64+0x100/0x230 [ 242.007304][T12797] ? do_syscall_64+0xb6/0x230 [ 242.011986][T12797] do_syscall_64+0xf3/0x230 [ 242.016496][T12797] ? clear_bhb_loop+0x35/0x90 [ 242.021184][T12797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.027079][T12797] RIP: 0033:0x7f9031a7cf29 [ 242.031494][T12797] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 242.051095][T12797] RSP: 002b:00007f90328760c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.059511][T12797] RAX: ffffffffffffffda RBX: 00007f9031bb3f80 RCX: 00007f9031a7cf29 [ 242.067485][T12797] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 242.075450][T12797] RBP: 00007f9031aec074 R08: 0000000000000000 R09: 0000000000000000 [ 242.083435][T12797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.091402][T12797] R13: 000000000000000b R14: 00007f9031bb3f80 R15: 00007ffc0f405058 [ 242.099384][T12797] [ 242.156505][T12482] veth1_vlan: entered promiscuous mode [ 242.287028][T12482] veth0_macvtap: entered promiscuous mode [ 242.318679][T12482] veth1_macvtap: entered promiscuous mode [ 242.376223][T12482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.398058][T12482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.422868][T12482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.436610][T12482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.462292][T12482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.475482][T12482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.485918][T12482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.497266][T12482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.510385][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 242.522600][T12482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.535113][T12812] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 242.559366][T12482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.580502][T12482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.601129][T12482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.622910][T12482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.644427][T12482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.677693][T12482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.713064][T12482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.727841][T12482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.738055][T12482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.748680][T12482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.761342][T12482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.827058][T12482] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.856167][T12482] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.875540][T12482] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.898933][T12482] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.927475][T12824] team0: entered promiscuous mode [ 242.933019][T12824] team_slave_0: entered promiscuous mode [ 242.939072][T12824] team_slave_1: entered promiscuous mode [ 242.948441][T12824] team0: left promiscuous mode [ 242.955099][T12824] team_slave_0: left promiscuous mode [ 242.962517][T12824] team_slave_1: left promiscuous mode [ 243.259992][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.291358][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.365557][T12846] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 243.487416][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.501636][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.897457][T12872] team0: entered promiscuous mode [ 243.902543][T12872] team_slave_0: entered promiscuous mode [ 243.926139][T12872] team_slave_1: entered promiscuous mode [ 243.942373][T12872] team0: left promiscuous mode [ 243.956436][T12872] team_slave_0: left promiscuous mode [ 243.962114][T12872] team_slave_1: left promiscuous mode [ 243.991490][T12880] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.121449][T12884] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 244.351989][T12905] tap0: tun_chr_ioctl cmd 1074025677 [ 244.373360][T12905] tap0: linktype set to 769 [ 244.384036][T12898] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.2'. [ 244.466173][T12907] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 244.555926][T12910] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 244.641075][T12918] team0: entered promiscuous mode [ 244.654760][T12920] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 244.668668][T12918] team_slave_0: entered promiscuous mode [ 244.692991][T12918] team_slave_1: entered promiscuous mode [ 244.714507][T12918] team0: left promiscuous mode [ 244.732526][T12918] team_slave_0: left promiscuous mode [ 244.753000][T12918] team_slave_1: left promiscuous mode [ 244.867933][T12930] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 245.005566][T12940] x_tables: duplicate entry at hook 3 [ 245.039829][T12944] IPVS: set_ctl: invalid protocol: 67 100.1.1.0:0 [ 245.214501][T12941] syzkaller0: entered promiscuous mode [ 245.220023][T12941] syzkaller0: entered allmulticast mode [ 245.240568][T12955] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 245.336766][T12958] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 246.059888][T12972] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 247.722162][T12958] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 247.745213][T12974] team0: entered promiscuous mode [ 247.765974][T12974] team_slave_0: entered promiscuous mode [ 247.771855][T12974] team_slave_1: entered promiscuous mode [ 247.786698][T12974] team0: left promiscuous mode [ 247.791501][T12974] team_slave_0: left promiscuous mode [ 247.817606][T12974] team_slave_1: left promiscuous mode [ 247.838898][T12972] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 247.859727][T12972] CPU: 1 PID: 12972 Comm: syz-executor.2 Not tainted 6.10.0-rc4-syzkaller-00802-ga6ec08beec9e #0 [ 247.870255][T12972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 247.880329][T12972] Call Trace: [ 247.883625][T12972] [ 247.886567][T12972] dump_stack_lvl+0x241/0x360 [ 247.891280][T12972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.896501][T12972] ? __pfx__printk+0x10/0x10 [ 247.901098][T12972] ? sysfs_warn_dup+0x51/0xa0 [ 247.905781][T12972] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 247.911156][T12972] sysfs_warn_dup+0x8e/0xa0 [ 247.915669][T12972] sysfs_do_create_link_sd+0xbe/0x110 [ 247.921047][T12972] device_add_class_symlinks+0x1c5/0x250 [ 247.926690][T12972] device_add+0x553/0xbf0 [ 247.931027][T12972] wiphy_register+0x1d3f/0x2b30 [ 247.935892][T12972] ? __pfx_wiphy_register+0x10/0x10 [ 247.941086][T12972] ? minstrel_ht_alloc+0x72b/0x860 [ 247.946209][T12972] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 247.952288][T12972] ieee80211_register_hw+0x3098/0x3d80 [ 247.957760][T12972] ? ieee80211_register_hw+0x10d1/0x3d80 [ 247.963400][T12972] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 247.969213][T12972] ? __asan_memset+0x23/0x50 [ 247.973805][T12972] ? __hrtimer_init+0x170/0x250 [ 247.978663][T12972] mac80211_hwsim_new_radio+0x2597/0x44d0 [ 247.984409][T12972] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 247.990482][T12972] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 247.996895][T12972] ? kstrndup+0x5c/0xb0 [ 248.001050][T12972] ? __asan_memcpy+0x40/0x70 [ 248.005646][T12972] hwsim_new_radio_nl+0xe4c/0x21d0 [ 248.010778][T12972] ? __pfx___nla_validate_parse+0x10/0x10 [ 248.016498][T12972] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 248.022075][T12972] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 248.028414][T12972] genl_rcv_msg+0xb14/0xec0 [ 248.032923][T12972] ? mark_lock+0x9a/0x350 [ 248.037264][T12972] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.042315][T12972] ? __pfx_lock_acquire+0x10/0x10 [ 248.047342][T12972] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 248.052896][T12972] ? __pfx___might_resched+0x10/0x10 [ 248.058193][T12972] netlink_rcv_skb+0x1e3/0x430 [ 248.062958][T12972] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.067991][T12972] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 248.073282][T12972] ? __netlink_deliver_tap+0x77e/0x7c0 [ 248.078747][T12972] genl_rcv+0x28/0x40 [ 248.082733][T12972] netlink_unicast+0x7f0/0x990 [ 248.087515][T12972] ? __pfx_netlink_unicast+0x10/0x10 [ 248.092801][T12972] ? __virt_addr_valid+0x183/0x520 [ 248.097916][T12972] ? __check_object_size+0x49c/0x900 [ 248.103212][T12972] ? bpf_lsm_netlink_send+0x9/0x10 [ 248.108334][T12972] netlink_sendmsg+0x8e4/0xcb0 [ 248.113106][T12972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.118391][T12972] ? __import_iovec+0x536/0x820 [ 248.123240][T12972] ? aa_sock_msg_perm+0x91/0x160 [ 248.128185][T12972] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 248.133467][T12972] ? security_socket_sendmsg+0x87/0xb0 [ 248.138925][T12972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.144207][T12972] __sock_sendmsg+0x221/0x270 [ 248.148889][T12972] ____sys_sendmsg+0x525/0x7d0 [ 248.153666][T12972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.158976][T12972] __sys_sendmsg+0x2b0/0x3a0 [ 248.163572][T12972] ? __pfx___sys_sendmsg+0x10/0x10 [ 248.168692][T12972] ? security_bpf+0x87/0xb0 [ 248.173227][T12972] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 248.179551][T12972] ? do_syscall_64+0x100/0x230 [ 248.184319][T12972] ? do_syscall_64+0xb6/0x230 [ 248.188998][T12972] do_syscall_64+0xf3/0x230 [ 248.193505][T12972] ? clear_bhb_loop+0x35/0x90 [ 248.198189][T12972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.204084][T12972] RIP: 0033:0x7f098267cf29 [ 248.208495][T12972] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 248.228098][T12972] RSP: 002b:00007f09834310c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.236510][T12972] RAX: ffffffffffffffda RBX: 00007f09827b3f80 RCX: 00007f098267cf29 [ 248.244477][T12972] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 248.252449][T12972] RBP: 00007f09826ec074 R08: 0000000000000000 R09: 0000000000000000 [ 248.260420][T12972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.268385][T12972] R13: 000000000000000b R14: 00007f09827b3f80 R15: 00007ffd0da897a8 [ 248.276370][T12972] [ 248.297246][T12979] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! [ 248.588444][T12992] atomic_op ffff888060ae9998 conn xmit_atomic 0000000000000000 [ 249.068192][T13010] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 249.096493][T13010] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 249.108010][T13010] CPU: 0 PID: 13010 Comm: syz-executor.2 Not tainted 6.10.0-rc4-syzkaller-00802-ga6ec08beec9e #0 [ 249.118539][T13010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 249.128611][T13010] Call Trace: [ 249.131906][T13010] [ 249.134853][T13010] dump_stack_lvl+0x241/0x360 [ 249.139562][T13010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.144811][T13010] ? __pfx__printk+0x10/0x10 [ 249.149432][T13010] ? sysfs_warn_dup+0x51/0xa0 [ 249.154141][T13010] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 249.159537][T13010] sysfs_warn_dup+0x8e/0xa0 [ 249.164069][T13010] sysfs_do_create_link_sd+0xbe/0x110 [ 249.169459][T13010] device_add_class_symlinks+0x1c5/0x250 [ 249.175113][T13010] device_add+0x553/0xbf0 [ 249.179459][T13010] wiphy_register+0x1d3f/0x2b30 [ 249.184326][T13010] ? __pfx_wiphy_register+0x10/0x10 [ 249.189517][T13010] ? minstrel_ht_alloc+0x72b/0x860 [ 249.194636][T13010] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 249.200710][T13010] ieee80211_register_hw+0x3098/0x3d80 [ 249.206176][T13010] ? ieee80211_register_hw+0x10d1/0x3d80 [ 249.211811][T13010] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 249.217634][T13010] ? __asan_memset+0x23/0x50 [ 249.222221][T13010] ? __hrtimer_init+0x170/0x250 [ 249.227078][T13010] mac80211_hwsim_new_radio+0x2597/0x44d0 [ 249.232831][T13010] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 249.238898][T13010] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 249.245305][T13010] ? kstrndup+0x5c/0xb0 [ 249.249456][T13010] ? __asan_memcpy+0x40/0x70 [ 249.254054][T13010] hwsim_new_radio_nl+0xe4c/0x21d0 [ 249.259179][T13010] ? __pfx___nla_validate_parse+0x10/0x10 [ 249.264905][T13010] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 249.270483][T13010] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 249.276822][T13010] genl_rcv_msg+0xb14/0xec0 [ 249.281327][T13010] ? mark_lock+0x9a/0x350 [ 249.285666][T13010] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.290710][T13010] ? __pfx_lock_acquire+0x10/0x10 [ 249.295730][T13010] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 249.301280][T13010] ? __pfx___might_resched+0x10/0x10 [ 249.306575][T13010] netlink_rcv_skb+0x1e3/0x430 [ 249.311340][T13010] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.316371][T13010] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 249.321664][T13010] ? __netlink_deliver_tap+0x77e/0x7c0 [ 249.327129][T13010] genl_rcv+0x28/0x40 [ 249.331108][T13010] netlink_unicast+0x7f0/0x990 [ 249.335883][T13010] ? __pfx_netlink_unicast+0x10/0x10 [ 249.341167][T13010] ? __virt_addr_valid+0x183/0x520 [ 249.346290][T13010] ? __check_object_size+0x49c/0x900 [ 249.351580][T13010] ? bpf_lsm_netlink_send+0x9/0x10 [ 249.356714][T13010] netlink_sendmsg+0x8e4/0xcb0 [ 249.361484][T13010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.366770][T13010] ? __import_iovec+0x536/0x820 [ 249.371628][T13010] ? aa_sock_msg_perm+0x91/0x160 [ 249.376585][T13010] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 249.381897][T13010] ? security_socket_sendmsg+0x87/0xb0 [ 249.387362][T13010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.392646][T13010] __sock_sendmsg+0x221/0x270 [ 249.397336][T13010] ____sys_sendmsg+0x525/0x7d0 [ 249.402108][T13010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.407406][T13010] __sys_sendmsg+0x2b0/0x3a0 [ 249.411998][T13010] ? __pfx___sys_sendmsg+0x10/0x10 [ 249.417123][T13010] ? security_bpf+0x87/0xb0 [ 249.421653][T13010] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 249.427979][T13010] ? do_syscall_64+0x100/0x230 [ 249.432759][T13010] ? do_syscall_64+0xb6/0x230 [ 249.437440][T13010] do_syscall_64+0xf3/0x230 [ 249.441946][T13010] ? clear_bhb_loop+0x35/0x90 [ 249.446634][T13010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.452542][T13010] RIP: 0033:0x7f098267cf29 [ 249.456961][T13010] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 249.476565][T13010] RSP: 002b:00007f09834310c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.484981][T13010] RAX: ffffffffffffffda RBX: 00007f09827b3f80 RCX: 00007f098267cf29 [ 249.492950][T13010] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 249.500916][T13010] RBP: 00007f09826ec074 R08: 0000000000000000 R09: 0000000000000000 [ 249.508881][T13010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.516849][T13010] R13: 000000000000000b R14: 00007f09827b3f80 R15: 00007ffd0da897a8 [ 249.524833][T13010] [ 249.730024][T13021] sock: sock_timestamping_bind_phc: sock not bind to device [ 249.775135][T13021] sock: sock_timestamping_bind_phc: sock not bind to device [ 249.942298][T13026] team0: Device macvtap1 is already an upper device of the team interface [ 250.066789][ T29] audit: type=1804 audit(1718954917.336:42): pid=13033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4164697466/syzkaller.8ywRoq/131/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 250.290498][T13044] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 250.772022][T13077] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 251.402267][T13093] netlink: 199356 bytes leftover after parsing attributes in process `syz-executor.2'. [ 251.428152][T13093] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 251.473051][T13093] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.2'. [ 251.503535][T13093] netlink: zone id is out of range [ 251.514736][T13093] netlink: zone id is out of range [ 251.536666][T13093] netlink: zone id is out of range [ 251.548037][T13093] netlink: zone id is out of range [ 251.562344][T13093] netlink: zone id is out of range [ 251.568361][T13093] netlink: zone id is out of range [ 251.574411][T13093] netlink: zone id is out of range [ 251.580003][T13093] netlink: zone id is out of range [ 251.585925][T13093] netlink: zone id is out of range [ 251.591082][T13093] netlink: zone id is out of range [ 251.822022][T13103] sctp: [Deprecated]: syz-executor.3 (pid 13103) Use of int in maxseg socket option. [ 251.822022][T13103] Use struct sctp_assoc_value instead [ 251.865573][T13108] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 252.107649][T13114] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.331964][T13133] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 252.349553][T13133] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 252.358530][T13133] CPU: 1 PID: 13133 Comm: syz-executor.0 Not tainted 6.10.0-rc4-syzkaller-00802-ga6ec08beec9e #0 [ 252.369057][T13133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 252.379128][T13133] Call Trace: [ 252.382401][T13133] [ 252.385328][T13133] dump_stack_lvl+0x241/0x360 [ 252.390018][T13133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.395247][T13133] ? __pfx__printk+0x10/0x10 [ 252.399859][T13133] ? sysfs_warn_dup+0x51/0xa0 [ 252.404639][T13133] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 252.410031][T13133] sysfs_warn_dup+0x8e/0xa0 [ 252.414554][T13133] sysfs_do_create_link_sd+0xbe/0x110 [ 252.419952][T13133] device_add_class_symlinks+0x1c5/0x250 [ 252.425595][T13133] device_add+0x553/0xbf0 [ 252.429937][T13133] wiphy_register+0x1d3f/0x2b30 [ 252.434818][T13133] ? __pfx_wiphy_register+0x10/0x10 [ 252.440036][T13133] ? minstrel_ht_alloc+0x72b/0x860 [ 252.445183][T13133] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 252.451368][T13133] ieee80211_register_hw+0x3098/0x3d80 [ 252.456854][T13133] ? ieee80211_register_hw+0x10d1/0x3d80 [ 252.462519][T13133] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 252.468350][T13133] ? __asan_memset+0x23/0x50 [ 252.472951][T13133] ? __hrtimer_init+0x170/0x250 [ 252.477826][T13133] mac80211_hwsim_new_radio+0x2597/0x44d0 [ 252.483593][T13133] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 252.489680][T13133] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 252.496098][T13133] ? kstrndup+0x5c/0xb0 [ 252.500277][T13133] ? __asan_memcpy+0x40/0x70 [ 252.504906][T13133] hwsim_new_radio_nl+0xe4c/0x21d0 [ 252.510057][T13133] ? __pfx___nla_validate_parse+0x10/0x10 [ 252.515793][T13133] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 252.521419][T13133] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 252.527781][T13133] genl_rcv_msg+0xb14/0xec0 [ 252.532282][T13133] ? mark_lock+0x9a/0x350 [ 252.536619][T13133] ? __pfx_genl_rcv_msg+0x10/0x10 [ 252.541663][T13133] ? __pfx_lock_acquire+0x10/0x10 [ 252.546707][T13133] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 252.552275][T13133] ? __pfx___might_resched+0x10/0x10 [ 252.557588][T13133] netlink_rcv_skb+0x1e3/0x430 [ 252.562349][T13133] ? __pfx_genl_rcv_msg+0x10/0x10 [ 252.567386][T13133] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.572705][T13133] ? __netlink_deliver_tap+0x77e/0x7c0 [ 252.578201][T13133] genl_rcv+0x28/0x40 [ 252.582195][T13133] netlink_unicast+0x7f0/0x990 [ 252.586986][T13133] ? __pfx_netlink_unicast+0x10/0x10 [ 252.592346][T13133] ? __virt_addr_valid+0x183/0x520 [ 252.597495][T13133] ? __check_object_size+0x49c/0x900 [ 252.602795][T13133] ? bpf_lsm_netlink_send+0x9/0x10 [ 252.607926][T13133] netlink_sendmsg+0x8e4/0xcb0 [ 252.612708][T13133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.618009][T13133] ? __import_iovec+0x536/0x820 [ 252.622864][T13133] ? aa_sock_msg_perm+0x91/0x160 [ 252.627826][T13133] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 252.633116][T13133] ? security_socket_sendmsg+0x87/0xb0 [ 252.638588][T13133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.643876][T13133] __sock_sendmsg+0x221/0x270 [ 252.648565][T13133] ____sys_sendmsg+0x525/0x7d0 [ 252.653439][T13133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.658844][T13133] __sys_sendmsg+0x2b0/0x3a0 [ 252.663446][T13133] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.668598][T13133] ? security_bpf+0x87/0xb0 [ 252.673171][T13133] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 252.679518][T13133] ? do_syscall_64+0x100/0x230 [ 252.684324][T13133] ? do_syscall_64+0xb6/0x230 [ 252.689005][T13133] do_syscall_64+0xf3/0x230 [ 252.693519][T13133] ? clear_bhb_loop+0x35/0x90 [ 252.698251][T13133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.704162][T13133] RIP: 0033:0x7f423027cf29 [ 252.708572][T13133] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 252.728183][T13133] RSP: 002b:00007f4230f7f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.736620][T13133] RAX: ffffffffffffffda RBX: 00007f42303b3f80 RCX: 00007f423027cf29 [ 252.744608][T13133] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 252.752591][T13133] RBP: 00007f42302ec074 R08: 0000000000000000 R09: 0000000000000000 [ 252.760581][T13133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.768563][T13133] R13: 000000000000000b R14: 00007f42303b3f80 R15: 00007ffd46b2a088 [ 252.776557][T13133] [ 252.827673][T13134] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 252.875360][T13134] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 252.913687][T13134] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 253.511810][T13191] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 253.545713][T13191] debugfs: Directory 'ü !' with parent 'ieee80211' already present! [ 254.190193][T13220] vlan2: entered promiscuous mode [ 254.196550][T13220] vlan2: entered allmulticast mode [ 254.560796][T13235] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 254.574152][T13235] CPU: 1 PID: 13235 Comm: syz-executor.1 Not tainted 6.10.0-rc4-syzkaller-00802-ga6ec08beec9e #0 [ 254.584686][T13235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 254.594748][T13235] Call Trace: [ 254.598027][T13235] [ 254.600961][T13235] dump_stack_lvl+0x241/0x360 [ 254.605653][T13235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.610853][T13235] ? __pfx__printk+0x10/0x10 [ 254.615449][T13235] ? sysfs_warn_dup+0x51/0xa0 [ 254.620130][T13235] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 254.625508][T13235] sysfs_warn_dup+0x8e/0xa0 [ 254.630024][T13235] sysfs_do_create_link_sd+0xbe/0x110 [ 254.635416][T13235] device_add_class_symlinks+0x1c5/0x250 [ 254.641068][T13235] device_add+0x553/0xbf0 [ 254.645420][T13235] wiphy_register+0x1d3f/0x2b30 [ 254.650291][T13235] ? __pfx_wiphy_register+0x10/0x10 [ 254.655491][T13235] ? minstrel_ht_alloc+0x72b/0x860 [ 254.660625][T13235] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 254.666716][T13235] ieee80211_register_hw+0x3098/0x3d80 [ 254.672188][T13235] ? ieee80211_register_hw+0x10d1/0x3d80 [ 254.677826][T13235] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 254.683650][T13235] ? __asan_memset+0x23/0x50 [ 254.688246][T13235] ? __hrtimer_init+0x170/0x250 [ 254.693120][T13235] mac80211_hwsim_new_radio+0x2597/0x44d0 [ 254.698877][T13235] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 254.704960][T13235] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 254.711415][T13235] ? kstrndup+0x5c/0xb0 [ 254.715574][T13235] ? __asan_memcpy+0x40/0x70 [ 254.720185][T13235] hwsim_new_radio_nl+0xe4c/0x21d0 [ 254.725320][T13235] ? __pfx___nla_validate_parse+0x10/0x10 [ 254.731077][T13235] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 254.736668][T13235] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 254.743007][T13235] genl_rcv_msg+0xb14/0xec0 [ 254.747517][T13235] ? mark_lock+0x9a/0x350 [ 254.751864][T13235] ? __pfx_genl_rcv_msg+0x10/0x10 [ 254.756911][T13235] ? __pfx_lock_acquire+0x10/0x10 [ 254.761934][T13235] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 254.767486][T13235] ? __pfx___might_resched+0x10/0x10 [ 254.772783][T13235] netlink_rcv_skb+0x1e3/0x430 [ 254.777548][T13235] ? __pfx_genl_rcv_msg+0x10/0x10 [ 254.782576][T13235] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 254.787870][T13235] ? __netlink_deliver_tap+0x77e/0x7c0 [ 254.793355][T13235] genl_rcv+0x28/0x40 [ 254.797344][T13235] netlink_unicast+0x7f0/0x990 [ 254.802121][T13235] ? __pfx_netlink_unicast+0x10/0x10 [ 254.807422][T13235] ? __virt_addr_valid+0x183/0x520 [ 254.812566][T13235] ? __check_object_size+0x49c/0x900 [ 254.817860][T13235] ? bpf_lsm_netlink_send+0x9/0x10 [ 254.822982][T13235] netlink_sendmsg+0x8e4/0xcb0 [ 254.827769][T13235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.833063][T13235] ? __import_iovec+0x536/0x820 [ 254.837918][T13235] ? aa_sock_msg_perm+0x91/0x160 [ 254.842874][T13235] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 254.848168][T13235] ? security_socket_sendmsg+0x87/0xb0 [ 254.853646][T13235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.858931][T13235] __sock_sendmsg+0x221/0x270 [ 254.863611][T13235] ____sys_sendmsg+0x525/0x7d0 [ 254.868384][T13235] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.873686][T13235] __sys_sendmsg+0x2b0/0x3a0 [ 254.878284][T13235] ? __pfx___sys_sendmsg+0x10/0x10 [ 254.883455][T13235] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 254.889791][T13235] ? do_syscall_64+0x100/0x230 [ 254.894564][T13235] ? do_syscall_64+0xb6/0x230 [ 254.899266][T13235] do_syscall_64+0xf3/0x230 [ 254.903776][T13235] ? clear_bhb_loop+0x35/0x90 [ 254.908465][T13235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.914365][T13235] RIP: 0033:0x7feac5a7cf29 [ 254.918778][T13235] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 254.938397][T13235] RSP: 002b:00007feac679f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.946815][T13235] RAX: ffffffffffffffda RBX: 00007feac5bb3f80 RCX: 00007feac5a7cf29 [ 254.954785][T13235] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 254.962754][T13235] RBP: 00007feac5aec074 R08: 0000000000000000 R09: 0000000000000000 [ 254.970719][T13235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.978686][T13235] R13: 000000000000000b R14: 00007feac5bb3f80 R15: 00007fff7c46bff8 [ 254.986673][T13235] [ 255.610982][T13271] x_tables: duplicate underflow at hook 3 [ 255.689279][T13277] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 255.705906][T13277] CPU: 0 PID: 13277 Comm: syz-executor.0 Not tainted 6.10.0-rc4-syzkaller-00802-ga6ec08beec9e #0 [ 255.716459][T13277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 255.726572][T13277] Call Trace: [ 255.729879][T13277] [ 255.732837][T13277] dump_stack_lvl+0x241/0x360 [ 255.737561][T13277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.742801][T13277] ? __pfx__printk+0x10/0x10 [ 255.747441][T13277] ? sysfs_warn_dup+0x51/0xa0 [ 255.752162][T13277] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 255.757584][T13277] sysfs_warn_dup+0x8e/0xa0 [ 255.762139][T13277] sysfs_do_create_link_sd+0xbe/0x110 [ 255.767566][T13277] device_add_class_symlinks+0x1c5/0x250 [ 255.773253][T13277] device_add+0x553/0xbf0 [ 255.777646][T13277] wiphy_register+0x1d3f/0x2b30 [ 255.782564][T13277] ? __pfx_wiphy_register+0x10/0x10 [ 255.787807][T13277] ? minstrel_ht_alloc+0x72b/0x860 [ 255.792968][T13277] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 255.799096][T13277] ieee80211_register_hw+0x3098/0x3d80 [ 255.804616][T13277] ? ieee80211_register_hw+0x10d1/0x3d80 [ 255.810306][T13277] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 255.816168][T13277] ? __asan_memset+0x23/0x50 [ 255.820792][T13277] ? __hrtimer_init+0x170/0x250 [ 255.825676][T13277] mac80211_hwsim_new_radio+0x2597/0x44d0 [ 255.831455][T13277] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 255.837558][T13277] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 255.844005][T13277] ? kstrndup+0x5c/0xb0 [ 255.848195][T13277] ? __asan_memcpy+0x40/0x70 [ 255.852830][T13277] hwsim_new_radio_nl+0xe4c/0x21d0 [ 255.858021][T13277] ? __pfx___nla_validate_parse+0x10/0x10 [ 255.863778][T13277] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 255.869404][T13277] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 255.875870][T13277] genl_rcv_msg+0xb14/0xec0 [ 255.880412][T13277] ? mark_lock+0x9a/0x350 [ 255.884787][T13277] ? __pfx_genl_rcv_msg+0x10/0x10 [ 255.889874][T13277] ? __pfx_lock_acquire+0x10/0x10 [ 255.894926][T13277] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 255.900504][T13277] ? __pfx___might_resched+0x10/0x10 [ 255.905829][T13277] netlink_rcv_skb+0x1e3/0x430 [ 255.910623][T13277] ? __pfx_genl_rcv_msg+0x10/0x10 [ 255.915679][T13277] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 255.921003][T13277] ? __netlink_deliver_tap+0x77e/0x7c0 [ 255.926507][T13277] genl_rcv+0x28/0x40 [ 255.930519][T13277] netlink_unicast+0x7f0/0x990 [ 255.935330][T13277] ? __pfx_netlink_unicast+0x10/0x10 [ 255.940647][T13277] ? __virt_addr_valid+0x183/0x520 [ 255.945807][T13277] ? __check_object_size+0x49c/0x900 [ 255.951131][T13277] ? bpf_lsm_netlink_send+0x9/0x10 [ 255.956377][T13277] netlink_sendmsg+0x8e4/0xcb0 [ 255.961194][T13277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.966506][T13277] ? __import_iovec+0x536/0x820 [ 255.971377][T13277] ? aa_sock_msg_perm+0x91/0x160 [ 255.976341][T13277] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 255.981622][T13277] ? security_socket_sendmsg+0x87/0xb0 [ 255.987083][T13277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.992371][T13277] __sock_sendmsg+0x221/0x270 [ 255.997082][T13277] ____sys_sendmsg+0x525/0x7d0 [ 256.001872][T13277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.007189][T13277] __sys_sendmsg+0x2b0/0x3a0 [ 256.011822][T13277] ? __pfx___sys_sendmsg+0x10/0x10 [ 256.017014][T13277] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 256.023357][T13277] ? do_syscall_64+0x100/0x230 [ 256.028138][T13277] ? do_syscall_64+0xb6/0x230 [ 256.032841][T13277] do_syscall_64+0xf3/0x230 [ 256.037366][T13277] ? clear_bhb_loop+0x35/0x90 [ 256.042070][T13277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.047965][T13277] RIP: 0033:0x7f423027cf29 [ 256.052378][T13277] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 256.071987][T13277] RSP: 002b:00007f4230f7f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.080425][T13277] RAX: ffffffffffffffda RBX: 00007f42303b3f80 RCX: 00007f423027cf29 [ 256.088408][T13277] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 256.096372][T13277] RBP: 00007f42302ec074 R08: 0000000000000000 R09: 0000000000000000 [ 256.104335][T13277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.112301][T13277] R13: 000000000000000b R14: 00007f42303b3f80 R15: 00007ffd46b2a088 [ 256.120383][T13277] [ 256.151712][T13282] __nla_validate_parse: 4 callbacks suppressed [ 256.151727][T13282] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 256.183146][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.198603][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 256.401162][T13304] pimreg: entered allmulticast mode [ 256.437451][T13304] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 256.459564][T13304] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 256.521914][T13313] syz0: rxe_newlink: already configured on veth0_vlan [ 257.205145][T13359] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 257.499508][T13373] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 257.509199][T13373] netlink: 203156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.948377][T13390] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 257.962189][T13390] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 257.965243][T13388] netlink: 'syz-executor.0': attribute type 298 has an invalid length. [ 258.041015][T13394] syz0: rxe_newlink: already configured on veth0_vlan [ 258.188780][T13401] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 258.197556][T13401] netlink: 203156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.504485][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.519925][T13416] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 258.672201][T13429] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 258.812191][T13436] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 258.977114][T13451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.021256][T13451] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 259.026988][T13454] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 259.517181][T13478] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 259.868706][ T53] Bluetooth: hci6: command 0x0405 tx timeout [ 261.597993][T13471] lo speed is unknown, defaulting to 1000 [ 261.604249][T13485] __nla_validate_parse: 4 callbacks suppressed [ 261.604265][T13485] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 261.620232][T13489] ªªªªª»: renamed from veth0_vlan (while UP) [ 262.049185][T13514] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 262.072823][T13514] netlink: 203156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 262.340078][T13536] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 262.372784][T13536] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 263.172072][T13558] net_ratelimit: 8 callbacks suppressed [ 263.172089][T13558] netlink: zone id is out of range [ 263.172089][T13554] syzkaller1: entered promiscuous mode [ 263.172108][T13554] syzkaller1: entered allmulticast mode [ 263.319349][T13558] netlink: zone id is out of range [ 263.485225][T13558] netlink: zone id is out of range [ 264.298465][T13579] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 264.670090][T13582] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 264.691173][T13582] 8021q: VLANs not supported on lo [ 264.739141][T13588] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 264.811659][T13591] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 264.831988][T13590] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 264.969760][T13602] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 265.001685][T13602] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 265.040120][T13602] CPU: 0 PID: 13602 Comm: syz-executor.0 Not tainted 6.10.0-rc4-syzkaller-00802-ga6ec08beec9e #0 [ 265.050675][T13602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 265.060748][T13602] Call Trace: [ 265.064046][T13602] [ 265.067001][T13602] dump_stack_lvl+0x241/0x360 [ 265.071750][T13602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.076992][T13602] ? __pfx__printk+0x10/0x10 [ 265.081621][T13602] ? sysfs_warn_dup+0x51/0xa0 [ 265.086337][T13602] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 265.091748][T13602] sysfs_warn_dup+0x8e/0xa0 [ 265.096292][T13602] sysfs_do_create_link_sd+0xbe/0x110 [ 265.101702][T13602] device_add_class_symlinks+0x1c5/0x250 [ 265.107379][T13602] device_add+0x553/0xbf0 [ 265.111766][T13602] wiphy_register+0x1d3f/0x2b30 [ 265.116682][T13602] ? __pfx_wiphy_register+0x10/0x10 [ 265.121907][T13602] ? minstrel_ht_alloc+0x72b/0x860 [ 265.127054][T13602] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 265.133168][T13602] ieee80211_register_hw+0x3098/0x3d80 [ 265.138684][T13602] ? ieee80211_register_hw+0x10d1/0x3d80 [ 265.144367][T13602] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 265.150208][T13602] ? __asan_memset+0x23/0x50 [ 265.154830][T13602] ? __hrtimer_init+0x170/0x250 [ 265.159694][T13602] mac80211_hwsim_new_radio+0x2597/0x44d0 [ 265.165460][T13602] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 265.171551][T13602] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 265.177980][T13602] ? kstrndup+0x5c/0xb0 [ 265.182147][T13602] ? __asan_memcpy+0x40/0x70 [ 265.186745][T13602] hwsim_new_radio_nl+0xe4c/0x21d0 [ 265.191874][T13602] ? __pfx___nla_validate_parse+0x10/0x10 [ 265.197598][T13602] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 265.203176][T13602] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 265.209511][T13602] genl_rcv_msg+0xb14/0xec0 [ 265.214014][T13602] ? mark_lock+0x9a/0x350 [ 265.218370][T13602] ? __pfx_genl_rcv_msg+0x10/0x10 [ 265.223422][T13602] ? __pfx_lock_acquire+0x10/0x10 [ 265.228446][T13602] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 265.233998][T13602] ? __pfx___might_resched+0x10/0x10 [ 265.239292][T13602] netlink_rcv_skb+0x1e3/0x430 [ 265.244057][T13602] ? __pfx_genl_rcv_msg+0x10/0x10 [ 265.249092][T13602] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.254412][T13602] ? __netlink_deliver_tap+0x77e/0x7c0 [ 265.259883][T13602] genl_rcv+0x28/0x40 [ 265.263868][T13602] netlink_unicast+0x7f0/0x990 [ 265.268642][T13602] ? __pfx_netlink_unicast+0x10/0x10 [ 265.273932][T13602] ? __virt_addr_valid+0x183/0x520 [ 265.279052][T13602] ? __check_object_size+0x49c/0x900 [ 265.284343][T13602] ? bpf_lsm_netlink_send+0x9/0x10 [ 265.289461][T13602] netlink_sendmsg+0x8e4/0xcb0 [ 265.294242][T13602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.299527][T13602] ? __import_iovec+0x536/0x820 [ 265.304378][T13602] ? aa_sock_msg_perm+0x91/0x160 [ 265.309325][T13602] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 265.314608][T13602] ? security_socket_sendmsg+0x87/0xb0 [ 265.320069][T13602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.325353][T13602] __sock_sendmsg+0x221/0x270 [ 265.330029][T13602] ____sys_sendmsg+0x525/0x7d0 [ 265.334802][T13602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.340106][T13602] __sys_sendmsg+0x2b0/0x3a0 [ 265.344706][T13602] ? __pfx___sys_sendmsg+0x10/0x10 [ 265.349829][T13602] ? security_bpf+0x87/0xb0 [ 265.354367][T13602] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 265.360694][T13602] ? do_syscall_64+0x100/0x230 [ 265.365462][T13602] ? do_syscall_64+0xb6/0x230 [ 265.370145][T13602] do_syscall_64+0xf3/0x230 [ 265.374652][T13602] ? clear_bhb_loop+0x35/0x90 [ 265.379333][T13602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.385228][T13602] RIP: 0033:0x7f423027cf29 [ 265.389639][T13602] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 265.409247][T13602] RSP: 002b:00007f4230f7f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.417662][T13602] RAX: ffffffffffffffda RBX: 00007f42303b3f80 RCX: 00007f423027cf29 [ 265.425630][T13602] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 265.433683][T13602] RBP: 00007f42302ec074 R08: 0000000000000000 R09: 0000000000000000 [ 265.441649][T13602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.449626][T13602] R13: 000000000000000b R14: 00007f42303b3f80 R15: 00007ffd46b2a088 [ 265.457620][T13602] [ 265.472736][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 265.501274][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 265.515069][T13608] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 265.534307][T13605] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 265.607989][T13609] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 265.819063][T13643] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 265.873114][T13643] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 265.885154][T13645] ip6gretap0: entered promiscuous mode [ 265.910230][T13645] macsec3: entered promiscuous mode [ 265.923022][T13645] macsec3: entered allmulticast mode [ 265.930334][T13645] ip6gretap0: entered allmulticast mode [ 265.947751][T13645] ip6gretap0: left allmulticast mode [ 265.963222][T13645] ip6gretap0: left promiscuous mode [ 266.318175][T13677] team0: entered promiscuous mode [ 266.326270][T13677] team_slave_0: entered promiscuous mode [ 266.336561][T13677] team_slave_1: entered promiscuous mode [ 266.359658][T13677] team0: left promiscuous mode [ 266.365441][T13677] team_slave_0: left promiscuous mode [ 266.371706][T13677] team_slave_1: left promiscuous mode [ 266.387233][T13683] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 266.613678][T13683] __nla_validate_parse: 5 callbacks suppressed [ 266.613697][T13683] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 266.793980][T13712] mac80211_hwsim hwsim4 syzkaller1: left promiscuous mode [ 266.821489][T13712] mac80211_hwsim hwsim4 syzkaller1: left allmulticast mode [ 266.894097][T13718] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 266.921040][T13720] xt_cgroup: xt_cgroup: no path or classid specified [ 266.947445][T13725] xt_limit: Overflow, try lower: 16384/524288 [ 266.960419][T13718] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.4'. [ 266.969285][T13724] xt_limit: Overflow, try lower: 16384/524288 [ 267.004866][T13718] bridge0: port 3(macvlan1) entered blocking state [ 267.025134][T13718] bridge0: port 3(macvlan1) entered disabled state [ 267.033666][T13718] macvlan1: entered allmulticast mode [ 267.074120][T13718] macvlan1: entered promiscuous mode [ 267.148352][T13732] lo speed is unknown, defaulting to 1000 [ 267.217658][T13742] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2048 (only 8 groups) [ 267.659719][T13762] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 267.966156][T13777] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 267.985810][T13772] TCP: TCP_TX_DELAY enabled [ 268.089344][T13783] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 268.149754][T13783] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.1'. [ 268.167761][T13783] bridge0: port 3(macvlan4) entered blocking state [ 268.174698][T13783] bridge0: port 3(macvlan4) entered disabled state [ 268.181859][T13783] macvlan4: entered allmulticast mode [ 268.188897][T13783] macvlan4: entered promiscuous mode [ 268.357112][T13798] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 268.596323][T13805] team_slave_0: entered promiscuous mode [ 268.602082][T13805] team_slave_1: entered promiscuous mode [ 268.636975][T13805] vlan2: entered promiscuous mode [ 268.657712][T13805] team0: entered promiscuous mode [ 268.692127][T13816] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2048 (only 8 groups) [ 268.703965][T13805] team0: left promiscuous mode [ 268.709321][T13805] team_slave_0: left promiscuous mode [ 268.714826][T13805] team_slave_1: left promiscuous mode [ 269.308846][T13840] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 269.400773][T13844] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 269.661921][T13863] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2048 (only 8 groups) [ 269.973394][T13879] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 269.983563][T13879] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 270.647359][T13909] : renamed from ipvlan1 [ 271.762671][T13969] __nla_validate_parse: 1 callbacks suppressed [ 271.797504][T13969] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 271.843667][T13969] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 271.861836][T13969] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 272.443292][T13997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.789735][T14005] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 272.836253][T14005] netlink: 203156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 272.866016][ T29] audit: type=1800 audit(1718954940.136:43): pid=13876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=1977 res=0 errno=0 [ 273.053423][T14007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.108187][ T62] bridge_slave_1: left allmulticast mode [ 273.130309][ T62] bridge_slave_1: left promiscuous mode [ 273.144371][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.181042][ T62] bridge_slave_0: left allmulticast mode [ 273.198838][ T62] bridge_slave_0: left promiscuous mode [ 273.209153][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.818731][T14030] RDS: rds_bind could not find a transport for ::ffff:172.20.20.0, load rds_tcp or rds_rdma? [ 274.051056][ T62] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 274.300177][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.316235][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.336270][ T62] bond0 (unregistering): Released all slaves [ 274.571101][ T62] bond1 (unregistering): Released all slaves [ 274.736743][T14052] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 274.763274][T14053] bond0: (slave bond_slave_0): Releasing backup interface [ 274.775816][T14058] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 274.814609][ T62] tipc: Left network mode [ 274.876076][T14058] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 274.921303][ T62] IPVS: stopping master sync thread 7041 ... [ 275.445817][T14090] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.509042][T14093] dummy0: entered promiscuous mode [ 275.523338][T14093] macvlan1: entered allmulticast mode [ 275.551856][T14093] dummy0: entered allmulticast mode [ 275.596391][T14098] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 275.643267][T14098] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 276.056686][T14134] sch_fq: defrate 0 ignored. [ 276.079198][T14134] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 276.342552][T14144] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 276.441178][ T62] hsr_slave_0: left promiscuous mode [ 276.457007][ T62] hsr_slave_1: left promiscuous mode [ 276.477139][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.493853][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.550105][ T62] veth1_macvtap: left promiscuous mode [ 276.564106][ T62] veth0_macvtap: left promiscuous mode [ 276.569829][ T62] veth1_vlan: left promiscuous mode [ 276.592934][ T62] veth0_vlan: left promiscuous mode [ 277.318731][ T62] team0 (unregistering): Port device team_slave_1 removed [ 277.357339][ T62] team0 (unregistering): Port device team_slave_0 removed [ 277.587133][ T62] team0 (unregistering): Port device batadv0 removed [ 277.907866][T14167] dummy0: entered promiscuous mode [ 277.914069][T14167] macvlan1: entered allmulticast mode [ 277.919478][T14167] dummy0: entered allmulticast mode [ 277.947455][T14168] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 277.963829][T14168] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 277.987131][T14150] lo speed is unknown, defaulting to 1000 [ 278.636399][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.723689][T14196] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 278.980492][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.415276][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.555337][T14210] macvlan2: entered allmulticast mode [ 279.570565][T14213] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 279.599722][T14213] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 279.620493][T14216] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 279.640760][ T5126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.651792][ T5126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.666090][ T5126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.699624][ T5126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.708922][ T62] bond0: (slave netdevsim0): Releasing backup interface [ 279.718598][ T5126] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 279.731858][ T5126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.731943][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.838459][T14217] lo speed is unknown, defaulting to 1000 [ 280.019769][T14236] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 280.085040][T14234] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 280.111168][T14238] team0: entered promiscuous mode [ 280.126886][T14238] team_slave_0: entered promiscuous mode [ 280.143064][T14238] team_slave_1: entered promiscuous mode [ 280.167861][T14238] team0: left promiscuous mode [ 280.176204][T14238] team_slave_0: left promiscuous mode [ 280.190981][T14238] team_slave_1: left promiscuous mode [ 280.235900][ T62] bridge_slave_1: left allmulticast mode [ 280.241569][ T62] bridge_slave_1: left promiscuous mode [ 280.266844][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.279957][ T62] bridge_slave_0: left allmulticast mode [ 280.298958][ T62] bridge_slave_0: left promiscuous mode [ 280.307030][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.394453][T14251] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 281.060964][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.073205][ T62] bond0 (unregistering): Released all slaves [ 281.478490][T14217] chnl_net:caif_netlink_parms(): no params data found [ 281.544555][T14282] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.561588][T14282] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 281.615130][T14280] team0: entered promiscuous mode [ 281.620205][T14280] team_slave_0: entered promiscuous mode [ 281.626486][T14280] team_slave_1: entered promiscuous mode [ 281.634372][T14280] team0: left promiscuous mode [ 281.639171][T14280] team_slave_0: left promiscuous mode [ 281.646658][T14280] team_slave_1: left promiscuous mode [ 281.863100][ T53] Bluetooth: hci0: command tx timeout [ 282.019855][T14217] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.038063][T14217] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.049278][T14217] bridge_slave_0: entered allmulticast mode [ 282.057406][T14217] bridge_slave_0: entered promiscuous mode [ 282.067213][T14217] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.080223][T14217] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.092528][T14217] bridge_slave_1: entered allmulticast mode [ 282.100908][T14217] bridge_slave_1: entered promiscuous mode [ 282.135124][T14319] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 282.146908][T14319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 282.314426][T14318] tipc: Started in network mode [ 282.332838][T14318] tipc: Node identity 4ae1eaf925de, cluster identity 4711 [ 282.369151][T14318] tipc: Enabled bearer , priority 0 [ 282.409424][T14217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.471141][T14217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.527616][ T62] hsr_slave_0: left promiscuous mode [ 282.540464][ T62] hsr_slave_1: left promiscuous mode [ 282.547546][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.557122][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.565310][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.573250][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.618232][ T62] dummy0: left allmulticast mode [ 282.633363][ T62] dummy0: left promiscuous mode [ 282.638700][ T62] veth1_macvtap: left promiscuous mode [ 282.647714][ T62] veth0_macvtap: left promiscuous mode [ 282.654383][ T62] veth1_vlan: left promiscuous mode [ 282.660491][ T62] veth0_vlan: left promiscuous mode [ 282.838753][ T62] pimreg (unregistering): left allmulticast mode [ 283.177881][ T62] team0 (unregistering): Port device team_slave_1 removed [ 283.219010][ T62] team0 (unregistering): Port device team_slave_0 removed [ 283.377664][ T5116] tipc: Node number set to 1866459897 [ 283.692878][T14340] team0: entered promiscuous mode [ 283.697942][T14340] team_slave_0: entered promiscuous mode [ 283.707473][T14340] team_slave_1: entered promiscuous mode [ 283.717437][T14340] team0: left promiscuous mode [ 283.722206][T14340] team_slave_0: left promiscuous mode [ 283.728216][T14340] team_slave_1: left promiscuous mode [ 283.759798][T14317] tipc: Disabling bearer [ 283.830144][T14217] team0: Port device team_slave_0 added [ 283.857093][T14217] team0: Port device team_slave_1 added [ 283.940791][T14217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.943089][ T53] Bluetooth: hci0: command tx timeout [ 283.956195][T14217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.983986][T14217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.985288][T14369] IPVS: wrr: TCP 172.20.20.170:0 - no destination available [ 284.009799][T14368] IPVS: wrr: TCP 172.20.20.170:0 - no destination available [ 284.025786][T14217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.033256][T14217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.059478][T14217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.097007][T14372] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 284.195997][T14217] hsr_slave_0: entered promiscuous mode [ 284.207674][T14217] hsr_slave_1: entered promiscuous mode [ 284.242061][T14381] tipc: Enabling of bearer rejected, failed to enable media [ 284.346751][T14386] tipc: Enabled bearer , priority 10 [ 284.430475][ T5111] : (slave syz_tun): Releasing backup interface [ 284.623680][T14392] team0: entered promiscuous mode [ 284.628911][T14392] team_slave_0: entered promiscuous mode [ 284.660718][T14392] team_slave_1: entered promiscuous mode [ 284.692368][T14392] team0: left promiscuous mode [ 284.712154][T14392] team_slave_0: left promiscuous mode [ 284.723012][T14392] team_slave_1: left promiscuous mode [ 284.792274][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 284.830476][T14397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: macsec2 [ 284.852630][T14397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.064416][T14411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 285.126234][T14418] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 285.140198][T14418] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 285.186745][T14414] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 285.219473][T14414] netlink: 9352 bytes leftover after parsing attributes in process `syz-executor.4'. [ 285.260747][T14414] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 285.273402][T14414] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 285.298140][T14217] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 285.317039][T14217] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 285.335815][T14217] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 285.348988][T14217] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 285.498988][T14217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.510530][ T5126] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.521045][ T5126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.523689][T14217] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.539428][ T5126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.551980][ T5126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.560631][ T5126] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 285.568461][ T5126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 285.581492][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.588770][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.621724][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.628945][ T5116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.719927][T14431] lo speed is unknown, defaulting to 1000 [ 286.023915][ T5126] Bluetooth: hci0: command tx timeout [ 286.188417][T14217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.414753][T14217] veth0_vlan: entered promiscuous mode [ 286.439505][T14217] veth1_vlan: entered promiscuous mode [ 286.519884][T14217] veth0_macvtap: entered promiscuous mode [ 286.545448][T14431] chnl_net:caif_netlink_parms(): no params data found [ 286.578870][T14217] veth1_macvtap: entered promiscuous mode [ 286.701535][T14485] xt_CT: No such helper "syz1" [ 286.775425][T14217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.790802][T14217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.802128][T14217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.814707][T14217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.824893][T14217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.836356][T14217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.846678][T14217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.858043][T14217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.870822][T14217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.880156][T14431] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.895632][T14431] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.907729][T14431] bridge_slave_0: entered allmulticast mode [ 286.918449][T14431] bridge_slave_0: entered promiscuous mode [ 286.939622][T14217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.950341][T14217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.960582][T14217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.971499][T14217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.981425][T14217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.994088][T14217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.004261][T14217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.014879][T14217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.028961][T14217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.039827][T14217] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.057551][T14217] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.067117][T14217] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.076069][T14217] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.088190][T14431] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.095619][T14431] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.103199][T14431] bridge_slave_1: entered allmulticast mode [ 287.110553][T14431] bridge_slave_1: entered promiscuous mode [ 287.263756][T14431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.315023][T14431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.478743][T14518] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 287.518397][T14431] team0: Port device team_slave_0 added [ 287.539921][T14431] team0: Port device team_slave_1 added [ 287.547381][T14510] rdma_rxe: rxe_newlink: failed to add wg1 [ 287.611925][T14046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.618899][T14520] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 287.628219][ T5126] Bluetooth: hci1: command tx timeout [ 287.633995][T14046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.652573][T14520] macvtap1: entered allmulticast mode [ 287.658897][T14520] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 287.670096][T14520] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 287.678254][T14520] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 287.761030][T14431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.768811][T14431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.797643][T14431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.841809][T14431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.861561][T14431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.927728][T14431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.994669][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.014637][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.105459][ T5126] Bluetooth: hci0: command tx timeout [ 288.176925][T14431] hsr_slave_0: entered promiscuous mode [ 288.190401][T14431] hsr_slave_1: entered promiscuous mode [ 288.197285][T14431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.205718][T14431] Cannot create hsr debugfs directory [ 288.315903][T14548] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. [ 288.568789][T14431] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.791488][T14431] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.004684][T14431] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.047441][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 289.072139][T14565] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 289.085728][T14565] IPv6: NLM_F_CREATE should be specified when creating new route [ 289.097091][T14565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.104371][T14565] IPv6: NLM_F_CREATE should be set when creating new route [ 289.111636][T14565] IPv6: NLM_F_CREATE should be set when creating new route [ 289.118885][T14565] IPv6: NLM_F_CREATE should be set when creating new route [ 289.152369][T14431] : (slave netdevsim0): Releasing backup interface [ 289.180561][T14431] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.217458][T14577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.222413][T14578] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 289.269346][T14574] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 289.278107][T14574] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.1'. [ 289.398485][T14431] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 289.410503][T14431] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 289.423507][T14431] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 289.442515][T14431] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 289.568952][T14431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.604709][T14431] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.619295][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.626501][ T5116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.646471][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.653665][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.703373][ T5126] Bluetooth: hci1: command tx timeout [ 289.910418][T14600] sctp: [Deprecated]: syz-executor.0 (pid 14600) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.910418][T14600] Use struct sctp_sack_info instead [ 289.984385][T14431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.041475][ T29] audit: type=1804 audit(1718954957.306:44): pid=14601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3973038463/syzkaller.66fPXM/453/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 290.105306][T14431] veth0_vlan: entered promiscuous mode [ 290.144208][T14431] veth1_vlan: entered promiscuous mode [ 290.260301][T14431] veth0_macvtap: entered promiscuous mode [ 290.300892][T14431] veth1_macvtap: entered promiscuous mode [ 290.371865][T14431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.384384][T14431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.395813][T14431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.407867][T14431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.421521][T14431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.433502][T14431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.445639][T14431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.458139][T14431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.470724][T14431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.484808][T14431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.497272][T14431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.545151][T14431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.582008][T14431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.604115][T14431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.621588][T14431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.632568][T14431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.652552][T14431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.673384][T14431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.692151][T14431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.704383][T14431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.724954][T14431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.744428][T14431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.835276][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.892635][T14431] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.903801][T14431] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.912527][T14431] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.949523][T14431] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.051656][T14625] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 291.294855][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.323271][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.394928][ T5126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 291.405855][ T5126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 291.433127][ T5126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 291.460161][ T5126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 291.470212][ T5126] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 291.478776][T14651] x_tables: duplicate underflow at hook 3 [ 291.486070][ T5126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.490898][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.529221][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.629171][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.785112][ T5126] Bluetooth: hci1: command tx timeout [ 291.850236][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.876707][T14643] lo speed is unknown, defaulting to 1000 [ 291.882615][T14669] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 291.927390][T14669] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.008665][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.101906][T14683] tipc: Started in network mode [ 292.121167][T14683] tipc: Node identity ffffffff, cluster identity 4711 [ 292.139794][T14683] tipc: Node number set to 4294967295 [ 292.311038][ T62] bridge_slave_1: left allmulticast mode [ 292.323885][ T62] bridge_slave_1: left promiscuous mode [ 292.344987][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.378106][ T62] bridge_slave_0: left allmulticast mode [ 292.394851][ T62] bridge_slave_0: left promiscuous mode [ 292.414484][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.059574][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.084431][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.106929][ T62] bond0 (unregistering): Released all slaves [ 293.207773][T14703] team0: entered promiscuous mode [ 293.220748][T14703] team_slave_0: entered promiscuous mode [ 293.240348][T14703] team_slave_1: entered promiscuous mode [ 293.299539][T14703] team0: left promiscuous mode [ 293.311213][T14703] team_slave_0: left promiscuous mode [ 293.320841][T14703] team_slave_1: left promiscuous mode [ 293.616092][T14729] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 293.625363][ T5126] Bluetooth: hci0: command tx timeout [ 293.718834][T14736] syz_tun: entered promiscuous mode [ 293.730123][T14736] macvlan2: entered promiscuous mode [ 293.863547][ T5126] Bluetooth: hci1: command tx timeout [ 293.992462][T14742] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 294.034904][T14742] netlink: 161700 bytes leftover after parsing attributes in process `syz-executor.4'. [ 294.049087][ T62] hsr_slave_0: left promiscuous mode [ 294.056674][ T62] hsr_slave_1: left promiscuous mode [ 294.071093][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.080983][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.099186][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.110824][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.171940][ T62] veth1_macvtap: left promiscuous mode [ 294.194641][ T62] veth0_macvtap: left promiscuous mode [ 294.206059][ T62] veth1_vlan: left promiscuous mode [ 294.219672][ T62] veth0_vlan: left promiscuous mode [ 294.943487][ T62] team0 (unregistering): Port device team_slave_1 removed [ 294.982209][ T62] team0 (unregistering): Port device team_slave_0 removed [ 295.387763][T14752] team0: entered promiscuous mode [ 295.395728][T14752] team_slave_0: entered promiscuous mode [ 295.401627][T14752] team_slave_1: entered promiscuous mode [ 295.414612][T14752] team0: left promiscuous mode [ 295.419937][T14752] team_slave_0: left promiscuous mode [ 295.427716][T14752] team_slave_1: left promiscuous mode [ 295.526403][T14643] chnl_net:caif_netlink_parms(): no params data found [ 295.704772][ T5126] Bluetooth: hci0: command tx timeout [ 295.830219][T14643] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.840633][T14643] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.848394][T14643] bridge_slave_0: entered allmulticast mode [ 295.855980][T14643] bridge_slave_0: entered promiscuous mode [ 295.873809][T14643] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.890969][T14643] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.898703][T14643] bridge_slave_1: entered allmulticast mode [ 295.921176][T14643] bridge_slave_1: entered promiscuous mode [ 296.004516][T14643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.035356][T14643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.145783][T14643] team0: Port device team_slave_0 added [ 296.164634][T14643] team0: Port device team_slave_1 added [ 296.229160][T14643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.251230][T14643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.281409][T14643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.295836][T14643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.303540][T14643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.344484][T14643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.379587][T14799] team0: entered promiscuous mode [ 296.385863][T14799] team_slave_0: entered promiscuous mode [ 296.392047][T14799] team_slave_1: entered promiscuous mode [ 296.400339][T14799] team0: left promiscuous mode [ 296.411317][T14799] team_slave_0: left promiscuous mode [ 296.417189][T14799] team_slave_1: left promiscuous mode [ 296.538155][T14643] hsr_slave_0: entered promiscuous mode [ 296.553446][T14643] hsr_slave_1: entered promiscuous mode [ 297.105803][T14835] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 297.106711][T14837] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96 [ 297.117480][T14835] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 297.177866][T14643] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 297.240404][T14643] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 297.256025][T14643] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 297.258232][T14835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.283377][T14643] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 297.350982][T14848] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 297.473692][T14850] netlink: 'syz-executor.4': attribute type 28 has an invalid length. [ 297.519986][T14643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.559566][T14643] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.575659][T14854] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 297.584534][T14854] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 297.594251][T14854] team0: entered promiscuous mode [ 297.599320][T14854] team_slave_0: entered promiscuous mode [ 297.605497][T14854] team_slave_1: entered promiscuous mode [ 297.611451][T14854] team0: entered allmulticast mode [ 297.616709][T14854] team_slave_0: entered allmulticast mode [ 297.622450][T14854] team_slave_1: entered allmulticast mode [ 297.629515][T14854] bridge0: port 3(team0) entered blocking state [ 297.636025][T14854] bridge0: port 3(team0) entered disabled state [ 297.644744][T14854] bridge0: port 3(team0) entered blocking state [ 297.651121][T14854] bridge0: port 3(team0) entered forwarding state [ 297.667721][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.674857][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.718617][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.725894][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.783499][ T5126] Bluetooth: hci0: command tx timeout [ 297.822841][ T29] audit: type=1800 audit(1718954965.086:45): pid=14863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1962 res=0 errno=0 [ 297.888923][ T29] audit: type=1804 audit(1718954965.116:46): pid=14863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir233120588/syzkaller.EYCY7c/121/memory.events" dev="sda1" ino=1962 res=1 errno=0 [ 298.107869][T14878] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 298.283638][T14643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.418065][T14643] veth0_vlan: entered promiscuous mode [ 298.449893][T14897] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 298.486306][T14643] veth1_vlan: entered promiscuous mode [ 298.606756][T14643] veth0_macvtap: entered promiscuous mode [ 298.629561][T14643] veth1_macvtap: entered promiscuous mode [ 298.666173][T14907] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 298.752553][T14643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.767079][T14909] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 298.777522][T14643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.791764][T14643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.828908][T14643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.857131][T14643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.878429][T14643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.891632][T14643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.903849][T14643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.914829][T14643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.931097][T14643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.956379][T14643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.984185][T14923] vlan0: entered promiscuous mode [ 298.996065][T14915] vlan0: left promiscuous mode [ 299.082291][T14643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.100355][T14643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.110440][T14643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.121266][T14643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.131635][T14643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.142176][T14643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.156905][T14643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.167525][T14643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.178560][T14643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.189896][T14643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.206540][T14643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.245151][T14643] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.278891][T14643] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.299427][T14643] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.316319][T14643] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.342656][T14943] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 299.363318][T14943] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 299.607612][T14048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.631323][T14048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.654376][T14961] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 299.680439][T14960] veth0_vlan: entered allmulticast mode [ 299.703149][ C0] [ 299.705596][ C0] ============================================ [ 299.711746][ C0] WARNING: possible recursive locking detected [ 299.717891][ C0] 6.10.0-rc4-syzkaller-00802-ga6ec08beec9e #0 Not tainted [ 299.724980][ C0] -------------------------------------------- [ 299.731113][ C0] kworker/0:1/9 is trying to acquire lock: [ 299.736901][ C0] ffff88802e6031d8 (&qs->lock){-.-.}-{2:2}, at: queue_stack_map_push_elem+0x1b2/0x660 [ 299.746469][ C0] [ 299.746469][ C0] but task is already holding lock: [ 299.753820][ C0] ffff88802c5431d8 (&qs->lock){-.-.}-{2:2}, at: __queue_map_get+0x14b/0x4d0 [ 299.762513][ C0] [ 299.762513][ C0] other info that might help us debug this: [ 299.770557][ C0] Possible unsafe locking scenario: [ 299.770557][ C0] [ 299.777993][ C0] CPU0 [ 299.781259][ C0] ---- [ 299.784529][ C0] lock(&qs->lock); [ 299.788415][ C0] lock(&qs->lock); [ 299.792299][ C0] [ 299.792299][ C0] *** DEADLOCK *** [ 299.792299][ C0] [ 299.800424][ C0] May be due to missing lock nesting notation [ 299.800424][ C0] [ 299.808725][ C0] 7 locks held by kworker/0:1/9: [ 299.813658][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 299.824606][ C0] #1: ffffc900000e7d00 ((work_completion)(&w->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 299.836255][ C0] #2: ffffffff8f65afe8 (nf_conntrack_mutex){+.+.}-{3:3}, at: nf_ct_iterate_cleanup+0x41/0x4f0 [ 299.846597][ C0] #3: ffffffff8e334060 (rcu_callback){....}-{0:0}, at: rcu_core+0xa86/0x1830 [ 299.855492][ C0] #4: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0x24c/0x5a0 [ 299.864891][ C0] #5: ffff88802c5431d8 (&qs->lock){-.-.}-{2:2}, at: __queue_map_get+0x14b/0x4d0 [ 299.874040][ C0] #6: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 299.883466][ C0] [ 299.883466][ C0] stack backtrace: [ 299.889341][ C0] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.10.0-rc4-syzkaller-00802-ga6ec08beec9e #0 [ 299.899224][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 299.909270][ C0] Workqueue: events iterate_cleanup_work [ 299.914911][ C0] Call Trace: [ 299.918184][ C0] [ 299.921022][ C0] dump_stack_lvl+0x241/0x360 [ 299.925698][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.930890][ C0] ? print_deadlock_bug+0x479/0x620 [ 299.936083][ C0] validate_chain+0x15d3/0x5900 [ 299.940937][ C0] ? __pfx_validate_chain+0x10/0x10 [ 299.946128][ C0] ? __pfx_validate_chain+0x10/0x10 [ 299.951315][ C0] ? ip_local_deliver_finish+0x230/0x5f0 [ 299.956963][ C0] ? ip_local_deliver_finish+0x230/0x5f0 [ 299.962582][ C0] ? __pfx_lock_release+0x10/0x10 [ 299.967600][ C0] ? mark_lock+0x9a/0x350 [ 299.971923][ C0] __lock_acquire+0x1346/0x1fd0 [ 299.976769][ C0] lock_acquire+0x1ed/0x550 [ 299.981260][ C0] ? queue_stack_map_push_elem+0x1b2/0x660 [ 299.987071][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 299.992093][ C0] ? mark_lock+0x9a/0x350 [ 299.996421][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 300.001434][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 300.006734][ C0] ? queue_stack_map_push_elem+0x1b2/0x660 [ 300.012533][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 300.018435][ C0] queue_stack_map_push_elem+0x1b2/0x660 [ 300.024064][ C0] ? __pfx_validate_chain+0x10/0x10 [ 300.029275][ C0] ? __pfx_queue_stack_map_push_elem+0x10/0x10 [ 300.035421][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 300.040611][ C0] ? validate_chain+0x11e/0x5900 [ 300.045543][ C0] ? bpf_trace_run2+0x1fc/0x540 [ 300.050385][ C0] bpf_prog_216c997a1f42e404+0x3f/0x43 [ 300.055828][ C0] bpf_trace_run2+0x2ec/0x540 [ 300.060500][ C0] ? __pfx_bpf_trace_run2+0x10/0x10 [ 300.065691][ C0] ? deref_stack_reg+0x1c7/0x260 [ 300.070622][ C0] ? __pfx_validate_chain+0x10/0x10 [ 300.075810][ C0] trace_contention_end+0x114/0x140 [ 300.081000][ C0] __pv_queued_spin_lock_slowpath+0xb81/0xdc0 [ 300.087062][ C0] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 300.093645][ C0] queued_spin_lock_slowpath+0x42/0x50 [ 300.099102][ C0] do_raw_spin_lock+0x272/0x370 [ 300.103948][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 300.109319][ C0] _raw_spin_lock_irqsave+0xe1/0x120 [ 300.114597][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 300.120485][ C0] __queue_map_get+0x14b/0x4d0 [ 300.125241][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 300.130256][ C0] ? __pfx___queue_map_get+0x10/0x10 [ 300.135533][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 300.140722][ C0] ? bpf_trace_run3+0x24c/0x5a0 [ 300.145568][ C0] bpf_prog_94b194d4ebfffdd5+0x45/0x49 [ 300.151011][ C0] bpf_trace_run3+0x33a/0x5a0 [ 300.155685][ C0] ? __pfx_bpf_trace_run3+0x10/0x10 [ 300.160873][ C0] ? debug_object_deactivate+0x2d5/0x390 [ 300.166500][ C0] ? rcu_core+0xafd/0x1830 [ 300.170907][ C0] ? rcu_core+0xa86/0x1830 [ 300.175308][ C0] ? rcu_core+0xafd/0x1830 [ 300.179710][ C0] kmem_cache_free+0x2a9/0x350 [ 300.184460][ C0] ? rcu_core+0xa86/0x1830 [ 300.188862][ C0] ? __pfx_mt_free_rcu+0x10/0x10 [ 300.193789][ C0] rcu_core+0xafd/0x1830 [ 300.198028][ C0] ? __pfx_rcu_core+0x10/0x10 [ 300.202695][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 300.208328][ C0] handle_softirqs+0x2c4/0x970 [ 300.213083][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 300.217835][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 300.223109][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 300.228306][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 300.232881][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 300.238067][ C0] irq_exit_rcu+0x9/0x30 [ 300.242304][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 300.247928][ C0] [ 300.250850][ C0] [ 300.253791][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 300.259763][ C0] RIP: 0010:nf_ct_iterate_cleanup+0x94/0x4f0 [ 300.265737][ C0] Code: 24 10 48 89 44 24 20 49 8d 44 24 14 48 89 44 24 18 89 e8 89 eb 25 ff 03 00 00 48 c1 e0 06 48 8d 80 00 4d 06 8e 48 89 44 24 10 <48> 89 1c 24 48 8d 2c dd 00 00 00 00 48 03 2d 61 29 0d 06 49 89 ed [ 300.285330][ C0] RSP: 0018:ffffc900000e7a98 EFLAGS: 00000206 [ 300.291385][ C0] RAX: ffffffff8e071900 RBX: 000000000003df30 RCX: ffff8880172c0000 [ 300.299343][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 300.307298][ C0] RBP: 000000000003df30 R08: ffffffff89a11ac0 R09: 1ffffffff25f64c0 [ 300.315253][ C0] R10: dffffc0000000000 R11: fffffbfff25f64c1 R12: ffffc900000e7b20 [ 300.323209][ C0] R13: 1ffff110054fdf2f R14: dffffc0000000000 R15: ffffc900000e7b28 [ 300.331170][ C0] ? nf_ct_iterate_cleanup+0xd0/0x4f0 [ 300.336538][ C0] ? nf_ct_iterate_cleanup+0x49c/0x4f0 [ 300.341989][ C0] ? nf_ct_iterate_cleanup+0xe1/0x4f0 [ 300.347378][ C0] ? __pfx_device_cmp+0x10/0x10 [ 300.352220][ C0] iterate_cleanup_work+0x146/0x260 [ 300.357406][ C0] ? __pfx_iterate_cleanup_work+0x10/0x10 [ 300.363120][ C0] ? process_scheduled_works+0x945/0x1830 [ 300.368830][ C0] process_scheduled_works+0xa2c/0x1830 [ 300.374378][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 300.380378][ C0] ? assign_work+0x364/0x3d0 [ 300.384965][ C0] worker_thread+0x86d/0xd70 [ 300.389545][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 300.395455][ C0] ? __kthread_parkme+0x169/0x1d0 [ 300.400468][ C0] ? __pfx_worker_thread+0x10/0x10 [ 300.405566][ C0] kthread+0x2f0/0x390 2024/06/21 07:29:27 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 300.409644][ C0] ? __pfx_worker_thread+0x10/0x10 [ 300.414747][ C0] ? __pfx_kthread+0x10/0x10 [ 300.419329][ C0] ret_from_fork+0x4b/0x80 [ 300.423743][ C0] ? __pfx_kthread+0x10/0x10 [ 300.428355][ C0] ret_from_fork_asm+0x1a/0x30 [ 300.433121][ C0] [ 300.444933][ T5126] Bluetooth: hci0: command tx timeout [ 300.590884][T14966] ªªªªªª: renamed from vlan0 [ 300.643009][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.650874][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.019399][T14965] syz_tun (unregistering): left promiscuous mode