last executing test programs: 1m25.94660682s ago: executing program 1 (id=39): syz_init_net_socket$ax25(0x3, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="bae843bd4df7b093d2bc1f93d82f0fb1490f38af3f753e8472fc79f2f31325d012fd17e47e55d8139e652c3e9c240101000000000000b223ada879ffee4ebf6fd0902ada1f13dd8615f5555acff91d8df53c3ab15309de082a0a9a18d7d2bef0cf942fb86ccabb9c1d84fa667093239df148aef77a89b168caf8129a04560b14d598aae2ca061690d782e87317c33c74f6ab839dab7a8d8b", 0x98) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="20005080110001004abee339084eeef16f162471f400b7550800070002000000"], 0x3c}}, 0x0) (async) shutdown(r2, 0x0) (async) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x500, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000080)={r8, 0x2, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0277df00000100030000"], 0xa) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r9, &(0x7f0000000040)="07000000010001", 0x7) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r10, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r11, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x1, @remote, 0x9}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, @in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e23, 0x4, @private1}, @in={0x2, 0x4e20, @local}], 0x78) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r10, 0x84, 0x5, &(0x7f00000001c0)={r12, @in6={{0xa, 0x4e20, 0xff, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x1}}}, 0x84) (async) socket$kcm(0x2, 0x3, 0x84) 1m8.689982384s ago: executing program 1 (id=39): syz_init_net_socket$ax25(0x3, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="bae843bd4df7b093d2bc1f93d82f0fb1490f38af3f753e8472fc79f2f31325d012fd17e47e55d8139e652c3e9c240101000000000000b223ada879ffee4ebf6fd0902ada1f13dd8615f5555acff91d8df53c3ab15309de082a0a9a18d7d2bef0cf942fb86ccabb9c1d84fa667093239df148aef77a89b168caf8129a04560b14d598aae2ca061690d782e87317c33c74f6ab839dab7a8d8b", 0x98) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="20005080110001004abee339084eeef16f162471f400b7550800070002000000"], 0x3c}}, 0x0) (async) shutdown(r2, 0x0) (async) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x500, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000080)={r8, 0x2, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0277df00000100030000"], 0xa) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r9, &(0x7f0000000040)="07000000010001", 0x7) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r10, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r11, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x1, @remote, 0x9}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, @in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e23, 0x4, @private1}, @in={0x2, 0x4e20, @local}], 0x78) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r10, 0x84, 0x5, &(0x7f00000001c0)={r12, @in6={{0xa, 0x4e20, 0xff, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x1}}}, 0x84) (async) socket$kcm(0x2, 0x3, 0x84) 54.286120956s ago: executing program 1 (id=39): syz_init_net_socket$ax25(0x3, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="bae843bd4df7b093d2bc1f93d82f0fb1490f38af3f753e8472fc79f2f31325d012fd17e47e55d8139e652c3e9c240101000000000000b223ada879ffee4ebf6fd0902ada1f13dd8615f5555acff91d8df53c3ab15309de082a0a9a18d7d2bef0cf942fb86ccabb9c1d84fa667093239df148aef77a89b168caf8129a04560b14d598aae2ca061690d782e87317c33c74f6ab839dab7a8d8b", 0x98) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="20005080110001004abee339084eeef16f162471f400b7550800070002000000"], 0x3c}}, 0x0) (async) shutdown(r2, 0x0) (async) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x500, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000080)={r8, 0x2, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0277df00000100030000"], 0xa) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r9, &(0x7f0000000040)="07000000010001", 0x7) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r10, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r11, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x1, @remote, 0x9}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, @in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e23, 0x4, @private1}, @in={0x2, 0x4e20, @local}], 0x78) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r10, 0x84, 0x5, &(0x7f00000001c0)={r12, @in6={{0xa, 0x4e20, 0xff, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x1}}}, 0x84) (async) socket$kcm(0x2, 0x3, 0x84) 41.853665154s ago: executing program 1 (id=39): syz_init_net_socket$ax25(0x3, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="bae843bd4df7b093d2bc1f93d82f0fb1490f38af3f753e8472fc79f2f31325d012fd17e47e55d8139e652c3e9c240101000000000000b223ada879ffee4ebf6fd0902ada1f13dd8615f5555acff91d8df53c3ab15309de082a0a9a18d7d2bef0cf942fb86ccabb9c1d84fa667093239df148aef77a89b168caf8129a04560b14d598aae2ca061690d782e87317c33c74f6ab839dab7a8d8b", 0x98) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="20005080110001004abee339084eeef16f162471f400b7550800070002000000"], 0x3c}}, 0x0) (async) shutdown(r2, 0x0) (async) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x500, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000080)={r8, 0x2, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0277df00000100030000"], 0xa) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r9, &(0x7f0000000040)="07000000010001", 0x7) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r10, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r11, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x1, @remote, 0x9}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, @in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e23, 0x4, @private1}, @in={0x2, 0x4e20, @local}], 0x78) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r10, 0x84, 0x5, &(0x7f00000001c0)={r12, @in6={{0xa, 0x4e20, 0xff, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x1}}}, 0x84) (async) socket$kcm(0x2, 0x3, 0x84) 28.37760404s ago: executing program 1 (id=39): syz_init_net_socket$ax25(0x3, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="bae843bd4df7b093d2bc1f93d82f0fb1490f38af3f753e8472fc79f2f31325d012fd17e47e55d8139e652c3e9c240101000000000000b223ada879ffee4ebf6fd0902ada1f13dd8615f5555acff91d8df53c3ab15309de082a0a9a18d7d2bef0cf942fb86ccabb9c1d84fa667093239df148aef77a89b168caf8129a04560b14d598aae2ca061690d782e87317c33c74f6ab839dab7a8d8b", 0x98) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="20005080110001004abee339084eeef16f162471f400b7550800070002000000"], 0x3c}}, 0x0) (async) shutdown(r2, 0x0) (async) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x500, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000080)={r8, 0x2, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0277df00000100030000"], 0xa) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r9, &(0x7f0000000040)="07000000010001", 0x7) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r10, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r11, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x1, @remote, 0x9}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, @in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e23, 0x4, @private1}, @in={0x2, 0x4e20, @local}], 0x78) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r10, 0x84, 0x5, &(0x7f00000001c0)={r12, @in6={{0xa, 0x4e20, 0xff, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x1}}}, 0x84) (async) socket$kcm(0x2, 0x3, 0x84) 12.362313109s ago: executing program 1 (id=39): syz_init_net_socket$ax25(0x3, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="bae843bd4df7b093d2bc1f93d82f0fb1490f38af3f753e8472fc79f2f31325d012fd17e47e55d8139e652c3e9c240101000000000000b223ada879ffee4ebf6fd0902ada1f13dd8615f5555acff91d8df53c3ab15309de082a0a9a18d7d2bef0cf942fb86ccabb9c1d84fa667093239df148aef77a89b168caf8129a04560b14d598aae2ca061690d782e87317c33c74f6ab839dab7a8d8b", 0x98) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="20005080110001004abee339084eeef16f162471f400b7550800070002000000"], 0x3c}}, 0x0) (async) shutdown(r2, 0x0) (async) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x500, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000080)={r8, 0x2, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0277df00000100030000"], 0xa) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r9, &(0x7f0000000040)="07000000010001", 0x7) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r10, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r11, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x1, @remote, 0x9}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, @in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e23, 0x4, @private1}, @in={0x2, 0x4e20, @local}], 0x78) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r10, 0x84, 0x5, &(0x7f00000001c0)={r12, @in6={{0xa, 0x4e20, 0xff, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x1}}}, 0x84) (async) socket$kcm(0x2, 0x3, 0x84) 2.471178978s ago: executing program 3 (id=633): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000000000000000000000000ffffffff00000000210000000000000000000000000000000a000000"], 0xb8}}, 0x0) 2.24395677s ago: executing program 3 (id=636): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000600000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x35, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x50}}, 0x0) 1.859794021s ago: executing program 3 (id=640): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)={0x1a0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @random=0x8000, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x111, 0xf, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x0, 0x0, @broadcast, 0x0, @value=@device_b, 0x0, 0x0, @device_b}}, @random={0xf, 0x0, "382e851a1271971c9421036d1c8c84785491fcae8d8a8681b912af7f727ff6378b50977a71ec300d0a6440185033ad3b9fcbed12f2694d0f355e33e2f6b002bdd1f1b93c1ecfd81e371c42de6f199f91a8c0c967917563d1f8d2013e320a18917c4fe4cf61989362ee2dee5fe5f0162a039f5090170e1103813d41b3c87d038f5fc74d41d13a6da7ab6316f1b9e68e6e346a1f631a29dbff79bf3ee78ad7f5f2abddeb5e1b1d5be8ad8accf769dc0675f92dbcc2961f1aebe7240dfce0de2eb50bfe20803d126cd6898f90d1bd519e"}]}]]}, 0x1a0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000055003d0902000000fcdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010301000700000000000000000000000000000008"], 0x38}}, 0x4000000) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x0, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) bind$l2tp6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) recvmmsg(r5, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}, 0x2229}], 0x1, 0x10100, 0x0) 1.859211656s ago: executing program 2 (id=641): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x17, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100"/20, @ANYRES32=r4, @ANYBLOB="000000000000000034001680300001802c000c8014"], 0x5c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r7, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x24006880) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r9, @ANYBLOB="00001700000000001c0037800b0005006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) 1.780162649s ago: executing program 0 (id=642): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x22004081, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @local}, 0x1c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x7, 0x7, 0x8001, 0x7, 0x3}, &(0x7f0000000300)=0x14) sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2100) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x38}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/68, 0x44, 0x0, &(0x7f0000000400)=""/133, 0x85}, &(0x7f0000000100)=0x40) (async) shutdown(r1, 0x1) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010000080000000000001c1400fe0000000000000000"], 0x1c}}, 0x0) 1.611392028s ago: executing program 0 (id=643): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x1}]}}}]}, 0x44}}, 0x24) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x24, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x24}, 0x1, 0xff000000}, 0x0) 1.547795567s ago: executing program 4 (id=644): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1a0000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000800d03bb80000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1, 0xffffffffffffffff}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.swap.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x10d, 0xb, &(0x7f0000000540)=r4, 0xff1e) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r4, @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRESHEX, @ANYRES8=r2, @ANYRESDEC=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007c000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES8=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="4c00030007"], 0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='contention_end\x00', r4, 0x0, 0xffff}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delchain={0x74, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "48bb2bcad0590918409d7360b2793385"}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}]}, 0x74}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000002000000000000db96223652ffffff01080004000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x29, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x16) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x40000000, {}, [{0x54, 0x1, [@m_mpls={0x50, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) 1.487255594s ago: executing program 2 (id=645): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b406e7ffffffffff701135000000000085000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=0xffffffffffffffff, 0x4) (async) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r2, r0, 0x0, r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) getsockname(r5, &(0x7f0000000280)=@xdp, &(0x7f0000000040)=0x80) (async) getsockname(r5, &(0x7f0000000280)=@xdp, &(0x7f0000000040)=0x80) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="040000000000000002a45c400000000100f89d1c0096cf0b8ad212000c0001000300696467650bb49a"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x1}, 0x766c, 0x81}}]}}]}, 0x64}}, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) write$binfmt_aout(r1, &(0x7f0000000200), 0x20) 1.321980161s ago: executing program 2 (id=646): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000001f500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000300", @ANYBLOB='\b'], 0x24}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x8001, 0x4) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000b80fc0809000300", 0x33fe0}], 0x1}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "008b8e", 0x10, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "060084", 0x0, "8000"}}}}}}}, 0x0) connect$netrom(r5, &(0x7f0000000140)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socket(0x3, 0xf65c5ace52d2c74c, 0x3) connect$netrom(r5, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3401000017000100000000000000000000000000000000000000ffffffffffff0000000000000000ac141400000000000000000000000000fe8000000000000000000000000000bbac1414bb00"/104, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES64, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000289c62833e5e259c44c9913ad9"], 0x134}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 1.203695096s ago: executing program 0 (id=647): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611920000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730140000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @random="f092df9ccd30", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0xb4}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r3, 0x801, 0x6, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r3, 0x2, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000850}, 0x4008080) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r3, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="5bae13b4da49e79eecc0f6e7d17b8af2957ac12c37a093a5"}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf) socket$kcm(0x10, 0x3, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@jmp={0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0}], {0x95, 0x0, 0x0, 0x1a03d3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 1.190883632s ago: executing program 4 (id=648): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000007c0), 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000340)=@file={0x0, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x2) write$bt_hci(r0, &(0x7f0000000340)={0x1, @delete_stored_link_key={{0xc12, 0x7}, {@any, 0x10}}}, 0xb) 1.037493518s ago: executing program 4 (id=649): syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@local, 0x0, 0x33}, @in6=@private1, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x1, 0x3503, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 927.57628ms ago: executing program 0 (id=650): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000700000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x35, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x50}}, 0x0) 872.056152ms ago: executing program 3 (id=651): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1a, 0x5, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000140)={0x7, 'nr0\x00', {0x3}, 0x101}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6b}, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) 841.323605ms ago: executing program 2 (id=652): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000a40)={0x14, 0x56, 0x601, 0x0, 0x0, "", [@generic="f4"]}, 0x14}], 0x1}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e20, 0xec, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2000000, @private1}}}, 0x108) 636.493817ms ago: executing program 0 (id=653): syz_emit_ethernet(0x15e, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) 555.6841ms ago: executing program 3 (id=654): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000faff00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$l2tp6(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x74}, 0x20) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001c00)={0x0, @in, 0x0, 0x0, 0xffffffff}, &(0x7f0000001cc0)=0x9c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000740)={@link_local, @random="bf7d132b5a64", @val={@val={0x88a8, 0x0, 0x0, 0x3}}, {@canfd={0xd, {{0x0, 0x1}, 0x6, 0x4, 0x0, 0x0, "2538146c2a0564ceb0361d1c2b6e8747cd5bd3d7884a42182b6d8d54122581e9aa7b54478875ab8bdf43bb4b4be5460e6e62578180c616a347f7e3b12ece50cf"}}}}, 0x0) socketpair(0x1e, 0x4, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r7, &(0x7f0000009080)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffff039, 0x24}], 0x4924924924925a7, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580407001f6c4990e305b9e6ef000000", @ANYRES16=r8, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r10, @ANYBLOB="0a000600080211000001000030005080110001004abee339084eeef16f162471f4000000050009000100000005000200000000000800030005ac0f00"], 0x58}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xb2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7ff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x154d2218}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40448c1}, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x9, 0xae, 0x2, 0xc0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 532.273467ms ago: executing program 2 (id=655): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002380)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x37, 0x0, 0x1, @batadv={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}]}, 0x40}}, 0x0) 490.221999ms ago: executing program 4 (id=656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010300000000000000000000000005000400000000000900020073797a32000000000500010007000000050005000a000000140007800800114000000000050015003000000012000300686173683a6e6574", @ANYRES16=0x0], 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010300000000000000000000000005000400000000000900020073797a32000000000500010007000000050005000a000000140007800800114000000000050015003000000012000300686173683a6e6574", @ANYRES16=0x0], 0x60}}, 0x0) (async) 355.142581ms ago: executing program 0 (id=657): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010b697036ba7ef9497d7c58b2000000008006000200"], 0x3c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x3e3f) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) getsockopt$bt_hci(r2, 0x84, 0x74, 0x0, &(0x7f0000000000)) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4001, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1beff9d1}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8000002b) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0], 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000004540)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000540012800e00010069703667726574617000000040000280060011004e240000060010004e2200000600030081000000060003000100000014000700fc"], 0x7c}}, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}], 0x3}}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x24, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) 354.096068ms ago: executing program 4 (id=658): r0 = socket$rxrpc(0x21, 0x2, 0xa) (async, rerun: 32) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x3, @mcast2, 0x2}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="8252", 0x2}, {&(0x7f00000000c0)="0ec6fc05ffdc25a9000000805b73971ff5453836d8", 0x15}], 0x2}}], 0x1, 0x4000c000) (async) sendto$inet6(r1, &(0x7f0000000140)="f9ae", 0x2, 0x4040000, 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 179.708089ms ago: executing program 4 (id=659): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x19}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x911, @void, @value}, 0x94) 112.570662ms ago: executing program 3 (id=660): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x48}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES64=r0], 0x0, 0x0, 0xfc38, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x9, 0x1, 0x0, 0xf, 0x0, 0x20008, [{0x0, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000040)=""/249, 0x3a, 0xf9, 0x6, 0x0, 0x0, @void, @value}, 0x28) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="2e00dfcd2e988a409382150000", @ANYRES16=r4, @ANYBLOB="010000000000000000001d0000000c00060001000000010000002c002f8008000100000000000c00020000000000000000001400038005000200000000000800010001000000"], 0x4c}}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) 0s ago: executing program 2 (id=661): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117200000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)=' ', 0x1}], 0x1}, 0x0) setsockopt(r0, 0x84, 0x14, &(0x7f00000001c0)="020000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e04, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, 0x9, 0x6, 0x3ff, 0x1, 0x3}, &(0x7f0000000280)=0x98) syz_emit_ethernet(0x4e, &(0x7f0000000e00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x17, 0x12, [@private, @broadcast, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={r1, 0x2}, &(0x7f0000000240)=0x8) kernel console output (not intermixed with test programs): face batadv_slave_1 (retrying later): interface not active [ 74.270076][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.282287][ T5241] team0: Port device team_slave_0 added [ 74.291325][ T5241] team0: Port device team_slave_1 added [ 74.298589][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.305550][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.331549][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.343646][ T5240] Bluetooth: hci1: command tx timeout [ 74.351072][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.358450][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.384563][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.410908][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.427340][ T5240] Bluetooth: hci3: command tx timeout [ 74.427759][ T5248] Bluetooth: hci2: command tx timeout [ 74.439061][ T4624] Bluetooth: hci4: command tx timeout [ 74.499972][ T4624] Bluetooth: hci0: command tx timeout [ 74.512696][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.519805][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.546166][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.559858][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.566817][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.593982][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.611441][ T5233] hsr_slave_0: entered promiscuous mode [ 74.619158][ T5233] hsr_slave_1: entered promiscuous mode [ 74.642349][ T5232] team0: Port device team_slave_0 added [ 74.653368][ T5246] hsr_slave_0: entered promiscuous mode [ 74.660188][ T5246] hsr_slave_1: entered promiscuous mode [ 74.666333][ T5246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.674746][ T5246] Cannot create hsr debugfs directory [ 74.740320][ T5232] team0: Port device team_slave_1 added [ 74.764012][ T5239] hsr_slave_0: entered promiscuous mode [ 74.770454][ T5239] hsr_slave_1: entered promiscuous mode [ 74.776634][ T5239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.784268][ T5239] Cannot create hsr debugfs directory [ 74.879423][ T5241] hsr_slave_0: entered promiscuous mode [ 74.885934][ T5241] hsr_slave_1: entered promiscuous mode [ 74.893728][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.901479][ T5241] Cannot create hsr debugfs directory [ 74.918405][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.925813][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.952372][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.020082][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.027413][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.053716][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.218425][ T5232] hsr_slave_0: entered promiscuous mode [ 75.224818][ T5232] hsr_slave_1: entered promiscuous mode [ 75.231237][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.239075][ T5232] Cannot create hsr debugfs directory [ 75.456809][ T5246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.478686][ T5246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.499658][ T5246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.529949][ T5246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.617051][ T5239] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.652962][ T5239] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.665726][ T5239] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.686149][ T5239] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.747861][ T5233] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.759794][ T5233] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.801409][ T5233] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.812886][ T5233] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.860080][ T5241] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.900975][ T5241] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.912161][ T5241] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.949207][ T5241] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.994681][ T5232] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.006265][ T5232] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.041327][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.052911][ T5232] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.082084][ T5232] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.105229][ T5246] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.163031][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.170469][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.251917][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.259101][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.304154][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.359845][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.379228][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.406325][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.427693][ T4624] Bluetooth: hci1: command tx timeout [ 76.459798][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.466935][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.497809][ T4624] Bluetooth: hci4: command tx timeout [ 76.498770][ T5248] Bluetooth: hci2: command tx timeout [ 76.503328][ T4624] Bluetooth: hci3: command tx timeout [ 76.514134][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.522011][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.539529][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.555537][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.577560][ T5240] Bluetooth: hci0: command tx timeout [ 76.599475][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.606725][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.626759][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.634049][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.653595][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.660719][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.695856][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.703121][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.731905][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.892026][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.953213][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.964481][ T4051] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.971696][ T4051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.015871][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.023092][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.264114][ T5246] veth0_vlan: entered promiscuous mode [ 77.303159][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.336675][ T5246] veth1_vlan: entered promiscuous mode [ 77.367714][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.478788][ T5246] veth0_macvtap: entered promiscuous mode [ 77.505065][ T5246] veth1_macvtap: entered promiscuous mode [ 77.543562][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.586827][ T5241] veth0_vlan: entered promiscuous mode [ 77.603040][ T5233] veth0_vlan: entered promiscuous mode [ 77.628688][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.643700][ T5241] veth1_vlan: entered promiscuous mode [ 77.663780][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.688359][ T5233] veth1_vlan: entered promiscuous mode [ 77.718282][ T5246] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.727068][ T5246] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.736414][ T5246] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.745564][ T5246] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.775479][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.837076][ T5239] veth0_vlan: entered promiscuous mode [ 77.905884][ T5241] veth0_macvtap: entered promiscuous mode [ 77.932139][ T5241] veth1_macvtap: entered promiscuous mode [ 77.973112][ T5239] veth1_vlan: entered promiscuous mode [ 77.989709][ T5233] veth0_macvtap: entered promiscuous mode [ 78.040210][ T5233] veth1_macvtap: entered promiscuous mode [ 78.100127][ T4051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.108973][ T4051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.118849][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.132607][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.146075][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.183401][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.194573][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.206326][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.226726][ T5241] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.235658][ T5241] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.244517][ T5241] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.255719][ T5241] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.291705][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.300229][ T5239] veth0_macvtap: entered promiscuous mode [ 78.309979][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.315517][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.329158][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.340724][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.354490][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.365789][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.418000][ T5239] veth1_macvtap: entered promiscuous mode [ 78.440174][ T5232] veth0_vlan: entered promiscuous mode [ 78.499621][ T5240] Bluetooth: hci1: command tx timeout [ 78.508366][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.519016][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.531272][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.542017][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.553261][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.564532][ T5232] veth1_vlan: entered promiscuous mode [ 78.578247][ T4624] Bluetooth: hci2: command tx timeout [ 78.578531][ T5248] Bluetooth: hci4: command tx timeout [ 78.583705][ T5240] Bluetooth: hci3: command tx timeout [ 78.605684][ T5233] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.620832][ T5233] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.630021][ T5233] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.647320][ T5233] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.661473][ T5248] Bluetooth: hci0: command tx timeout [ 78.678751][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.693564][ T5316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 78.701012][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.712365][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.725303][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.735596][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.748922][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.760561][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.798776][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.806624][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.817823][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.830295][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.851483][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.862069][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.873197][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.883853][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.894017][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.905177][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.923439][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.964737][ T5239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.981594][ T5239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.993733][ T5239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.015395][ T5239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.050008][ T5232] veth0_macvtap: entered promiscuous mode [ 79.076481][ T5232] veth1_macvtap: entered promiscuous mode [ 79.238106][ T4019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.243409][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.245949][ T4019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.268419][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.278555][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.291138][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.304717][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.315522][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.331864][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.342676][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.354598][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.395145][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.406624][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.419617][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.430844][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.457982][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.473043][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.484164][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.494887][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.514038][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.559432][ T5232] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.568830][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.572648][ T5232] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.595991][ T5232] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.605383][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.605869][ T5232] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.670097][ T4019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.678896][ T4019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.727975][ T4051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.750152][ T4051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.830584][ T5339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9'. [ 79.839085][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.883462][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.058783][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.071944][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.382432][ T5362] syz.1.12 uses obsolete (PF_INET,SOCK_PACKET) [ 80.577525][ T5248] Bluetooth: hci1: command tx timeout [ 80.648649][ T5355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 80.648652][ T5369] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.657612][ T5248] Bluetooth: hci3: command tx timeout [ 80.657664][ T5248] Bluetooth: hci2: command tx timeout [ 80.667275][ T5248] Bluetooth: hci4: command tx timeout [ 80.739425][ T5248] Bluetooth: hci0: command tx timeout [ 80.845102][ T5378] netlink: 188 bytes leftover after parsing attributes in process `syz.0.15'. [ 80.877403][ T5378] netlink: 'syz.0.15': attribute type 1 has an invalid length. [ 80.908296][ T5375] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.989562][ T5380] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17'. [ 81.165964][ T5375] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.276148][ T5381] syzkaller1: entered promiscuous mode [ 81.297225][ T5381] syzkaller1: entered allmulticast mode [ 81.350104][ T5390] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19'. [ 81.441261][ T5375] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.525765][ T5391] bridge_slave_1: left allmulticast mode [ 81.533406][ T5391] bridge_slave_1: left promiscuous mode [ 81.544078][ T5391] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.565325][ T5393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20'. [ 81.667047][ T5375] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.696504][ T5367] delete_channel: no stack [ 82.609668][ T5438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32'. [ 82.860833][ T5445] Zero length message leads to an empty skb [ 83.388322][ T2555] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.491721][ T2555] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.587440][ T5470] veth0: entered promiscuous mode [ 83.607162][ T5468] netlink: 32 bytes leftover after parsing attributes in process `syz.3.41'. [ 83.642756][ T2555] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.667919][ T5470] ipvlan0: entered promiscuous mode [ 83.765735][ T2555] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.808785][ T5473] netlink: 76 bytes leftover after parsing attributes in process `syz.3.42'. [ 83.818738][ T5467] ipvlan0: left promiscuous mode [ 83.822734][ T5473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.42'. [ 83.824454][ T5467] veth0: left promiscuous mode [ 84.038419][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.049248][ T2555] bridge_slave_1: left allmulticast mode [ 84.050043][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.055054][ T2555] bridge_slave_1: left promiscuous mode [ 84.072197][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.081001][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.090163][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.102253][ T5240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.113350][ T2555] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.173377][ T5486] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.190007][ T2555] bridge_slave_0: left allmulticast mode [ 84.195699][ T2555] bridge_slave_0: left promiscuous mode [ 84.218703][ T5486] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.46'. [ 84.229755][ T5487] netlink: 'syz.2.45': attribute type 8 has an invalid length. [ 84.234113][ T2555] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.237485][ T5486] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.46'. [ 84.254823][ T5487] netlink: 224 bytes leftover after parsing attributes in process `syz.2.45'. [ 84.539764][ T5496] netlink: 44 bytes leftover after parsing attributes in process `syz.3.48'. [ 84.552545][ T5496] nbd: must specify at least one socket [ 84.927077][ T2555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.961350][ T2555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.974647][ T2555] bond0 (unregistering): Released all slaves [ 85.297663][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.308303][ T5521] netlink: 'syz.4.54': attribute type 11 has an invalid length. [ 85.328396][ T5521] netlink: 64 bytes leftover after parsing attributes in process `syz.4.54'. [ 85.720289][ T5284] IPVS: starting estimator thread 0... [ 85.802732][ T5574] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 85.809349][ T5574] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 85.827302][ T5557] IPVS: using max 20 ests per chain, 48000 per kthread [ 86.167914][ T2555] hsr_slave_0: left promiscuous mode [ 86.178895][ T5248] Bluetooth: hci3: command tx timeout [ 86.190680][ T2555] hsr_slave_1: left promiscuous mode [ 86.199586][ T2555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.208477][ T2555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.221633][ T2555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.224502][ T5593] netlink: 'syz.4.64': attribute type 1 has an invalid length. [ 86.229723][ T2555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.237613][ T5593] netlink: 'syz.4.64': attribute type 2 has an invalid length. [ 86.252498][ T5593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.64'. [ 86.278299][ T2555] veth1_macvtap: left promiscuous mode [ 86.284419][ T2555] veth0_macvtap: left promiscuous mode [ 86.290116][ T2555] veth1_vlan: left promiscuous mode [ 86.295644][ T2555] veth0_vlan: left promiscuous mode [ 86.338225][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.661553][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.748416][ T2555] team0 (unregistering): Port device team_slave_1 removed [ 86.786513][ T2555] team0 (unregistering): Port device team_slave_0 removed [ 86.926897][ T58] cfg80211: failed to load regulatory.db [ 87.156433][ T5584] netlink: 44 bytes leftover after parsing attributes in process `syz.3.61'. [ 87.378122][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.389620][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.403992][ T5603] netlink: 'syz.4.65': attribute type 1 has an invalid length. [ 87.415345][ T5476] chnl_net:caif_netlink_parms(): no params data found [ 87.433252][ T5600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.65'. [ 87.449721][ T5600] vlan1: entered promiscuous mode [ 87.464385][ T5600] vlan1: entered allmulticast mode [ 87.489702][ T5600] veth0_vlan: entered allmulticast mode [ 87.507644][ T5602] netlink: 'syz.3.66': attribute type 46 has an invalid length. [ 88.267355][ T5248] Bluetooth: hci3: command tx timeout [ 88.418404][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.435006][ T5476] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.444597][ T5476] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.460946][ T5476] bridge_slave_0: entered allmulticast mode [ 88.500998][ T5476] bridge_slave_0: entered promiscuous mode [ 88.523670][ T5476] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.543906][ T5476] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.571835][ T5476] bridge_slave_1: entered allmulticast mode [ 88.588397][ T5476] bridge_slave_1: entered promiscuous mode [ 88.674819][ T5476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.703315][ T5476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.799797][ T5476] team0: Port device team_slave_0 added [ 88.814744][ T5476] team0: Port device team_slave_1 added [ 88.825721][ T5659] __nla_validate_parse: 1 callbacks suppressed [ 88.825738][ T5659] netlink: 44 bytes leftover after parsing attributes in process `syz.4.76'. [ 88.874626][ T5476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.885207][ T5476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.921056][ T5476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.939406][ T5476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.949655][ T5476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.983693][ T5476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.101318][ T5476] hsr_slave_0: entered promiscuous mode [ 89.122500][ T5476] hsr_slave_1: entered promiscuous mode [ 89.137792][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.146473][ T5476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.156057][ T5476] Cannot create hsr debugfs directory [ 89.467333][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.708241][ T5682] lo: entered allmulticast mode [ 89.737594][ T5682] lo: left allmulticast mode [ 90.190100][ T5706] trusted_key: syz.2.85 sent an empty control message without MSG_MORE. [ 90.211665][ T5706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'. [ 90.337283][ T5248] Bluetooth: hci3: command tx timeout [ 90.428034][ T5340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.476991][ T5715] x_tables: duplicate underflow at hook 3 [ 90.509551][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.530891][ T5724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.89'. [ 90.616119][ T5476] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.640136][ T5727] netlink: 44 bytes leftover after parsing attributes in process `syz.2.90'. [ 90.657548][ T5727] netlink: 21 bytes leftover after parsing attributes in process `syz.2.90'. [ 90.696632][ T5727] netlink: 21 bytes leftover after parsing attributes in process `syz.2.90'. [ 90.739721][ T5476] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.757025][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.808301][ T5476] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.847738][ T5476] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.947223][ T5738] netlink: 144 bytes leftover after parsing attributes in process `syz.2.94'. [ 90.988025][ T5738] netlink: 76 bytes leftover after parsing attributes in process `syz.2.94'. [ 90.998261][ T5738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'. [ 91.150442][ T5743] netlink: 'syz.3.95': attribute type 2 has an invalid length. [ 91.181038][ T5743] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.95'. [ 91.181346][ T5746] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 91.230240][ T5476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.290536][ T5476] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.350806][ T5553] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.358019][ T5553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.420757][ T5553] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.428045][ T5553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.537874][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.577027][ T5240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.589237][ T5240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.598776][ T5240] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.607053][ T5240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.659057][ T5240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.666723][ T5240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.827846][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.838400][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.850147][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.873629][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.908542][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.043998][ T5765] netlink: 'syz.2.99': attribute type 18 has an invalid length. [ 92.417795][ T5240] Bluetooth: hci3: command tx timeout [ 92.540387][ T5476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.644301][ T5755] chnl_net:caif_netlink_parms(): no params data found [ 92.895471][ T2555] tipc: Subscription rejected, illegal request [ 93.175673][ T5476] veth0_vlan: entered promiscuous mode [ 93.219367][ T5755] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.250733][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.286072][ T5755] bridge_slave_0: entered allmulticast mode [ 93.329783][ T5755] bridge_slave_0: entered promiscuous mode [ 93.378149][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.409248][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.459403][ T5755] bridge_slave_1: entered allmulticast mode [ 93.488634][ T5755] bridge_slave_1: entered promiscuous mode [ 93.516712][ T5832] netlink: 'syz.3.108': attribute type 5 has an invalid length. [ 93.691669][ T5476] veth1_vlan: entered promiscuous mode [ 93.697502][ T5240] Bluetooth: hci5: command tx timeout [ 93.800763][ T5755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.986403][ T5755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.198940][ T5755] team0: Port device team_slave_0 added [ 94.236125][ T5755] team0: Port device team_slave_1 added [ 94.397969][ T5476] veth0_macvtap: entered promiscuous mode [ 94.438786][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.446046][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.482284][ T5755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.496731][ T5877] netlink: 'syz.3.118': attribute type 10 has an invalid length. [ 94.508449][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.545949][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.575581][ T5877] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 94.599721][ T5873] netlink: 'syz.2.117': attribute type 4 has an invalid length. [ 94.669934][ T5476] veth1_macvtap: entered promiscuous mode [ 94.709631][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.725897][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.769938][ T5755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.946072][ T2555] bridge_slave_1: left allmulticast mode [ 94.967294][ T2555] bridge_slave_1: left promiscuous mode [ 95.001590][ T2555] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.101737][ T2555] bridge_slave_0: left allmulticast mode [ 95.143810][ T2555] bridge_slave_0: left promiscuous mode [ 95.163718][ T2555] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.210338][ T5917] __nla_validate_parse: 2 callbacks suppressed [ 95.210358][ T5917] netlink: 104 bytes leftover after parsing attributes in process `syz.3.124'. [ 95.711038][ T5285] net_ratelimit: 335 callbacks suppressed [ 95.711057][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.784595][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.787415][ T5240] Bluetooth: hci5: command tx timeout [ 96.074556][ T2555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.110479][ T2555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.133012][ T2555] bond0 (unregistering): Released all slaves [ 96.417510][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.605090][ T5755] hsr_slave_0: entered promiscuous mode [ 96.632153][ T5755] hsr_slave_1: entered promiscuous mode [ 96.656580][ T5755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.680727][ T5755] Cannot create hsr debugfs directory [ 96.732808][ T5476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.777426][ T5476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.817889][ T5286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.821750][ T5476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.868831][ T5476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.891166][ T5476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.903711][ T5476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.936076][ T5476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.995714][ T5980] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 97.109287][ T5476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.153885][ T5476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.182187][ T5476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.193595][ T5476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.205007][ T5476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.217861][ T5476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.234294][ T5476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.245973][ T5476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.258102][ T5476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.376345][ T2555] hsr_slave_0: left promiscuous mode [ 97.388663][ T2555] hsr_slave_1: left promiscuous mode [ 97.401728][ T2555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.417335][ T2555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.434662][ T2555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.442643][ T2555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.473475][ T2555] veth1_macvtap: left promiscuous mode [ 97.481466][ T2555] veth0_macvtap: left promiscuous mode [ 97.487770][ T2555] veth1_vlan: left promiscuous mode [ 97.496363][ T2555] veth0_vlan: left promiscuous mode [ 97.861682][ T5240] Bluetooth: hci5: command tx timeout [ 97.868924][ T5286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.002442][ T2555] team0 (unregistering): Port device team_slave_1 removed [ 98.090305][ T2555] team0 (unregistering): Port device team_slave_0 removed [ 98.567192][ T5476] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.576534][ T5476] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.586119][ T5476] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.595259][ T5476] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.615884][ T6003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.139'. [ 98.642491][ T6005] tipc: Started in network mode [ 98.647925][ T6005] tipc: Node identity ac1414aa, cluster identity 4711 [ 98.658889][ T6005] tipc: Enabled bearer , priority 10 [ 98.738289][ T941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.903576][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.315913][ T6036] xt_nfacct: accounting object `syz0' does not exists [ 99.517792][ T5558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.525741][ T5558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.688067][ T5546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.743114][ T5546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.776984][ T58] tipc: Node number set to 2886997162 [ 99.937551][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.947564][ T5240] Bluetooth: hci5: command tx timeout [ 100.307731][ T5755] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.343484][ T5755] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.473485][ T5567] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.549383][ T5755] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.638500][ T5755] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.761236][ T5567] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.982582][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.015122][ T5567] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.179651][ T5567] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.223532][ T6110] netlink: 20 bytes leftover after parsing attributes in process `syz.3.162'. [ 101.250689][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'. [ 101.279403][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'. [ 101.535804][ T6118] wireguard0: entered promiscuous mode [ 101.600491][ T5248] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 101.611147][ T5248] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.621083][ T5248] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 101.629277][ T5248] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 101.637116][ T5248] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 101.646289][ T5248] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.686614][ T5755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.698088][ T5567] bridge_slave_1: left allmulticast mode [ 101.717058][ T5567] bridge_slave_1: left promiscuous mode [ 101.747830][ T5567] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.773422][ T5567] bridge_slave_0: left allmulticast mode [ 101.795764][ T5288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.817829][ T5567] bridge_slave_0: left promiscuous mode [ 101.825398][ T5567] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.902987][ T6131] netlink: 104 bytes leftover after parsing attributes in process `syz.4.167'. [ 102.024174][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.262208][ T5288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.411704][ T5567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.432382][ T5567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.444235][ T5567] bond0 (unregistering): Released all slaves [ 102.476815][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.172'. [ 102.580380][ T5755] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.812559][ T5558] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.819799][ T5558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.854344][ T5558] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.861591][ T5558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.901358][ T5288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.909538][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.021336][ T6165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.031337][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.058455][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.074607][ T6165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.496496][ T5567] hsr_slave_0: left promiscuous mode [ 103.562828][ T5567] hsr_slave_1: left promiscuous mode [ 103.624532][ T5567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.654444][ T5567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.689567][ T5567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.697443][ T5240] Bluetooth: hci2: command tx timeout [ 103.708003][ T5567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.770481][ T5567] veth1_macvtap: left promiscuous mode [ 103.782664][ T5567] veth0_macvtap: left promiscuous mode [ 103.797349][ T5567] veth1_vlan: left promiscuous mode [ 103.802871][ T5567] veth0_vlan: left promiscuous mode [ 104.335545][ T5567] team0 (unregistering): Port device team_slave_1 removed [ 104.381688][ T5567] team0 (unregistering): Port device team_slave_0 removed [ 104.782881][ T6191] bridge1: entered promiscuous mode [ 104.822230][ T6195] netlink: 'syz.3.182': attribute type 7 has an invalid length. [ 104.837733][ T6195] netlink: 140 bytes leftover after parsing attributes in process `syz.3.182'. [ 104.954280][ T6200] netlink: 'syz.2.184': attribute type 2 has an invalid length. [ 105.019151][ T5755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.516260][ T6124] chnl_net:caif_netlink_parms(): no params data found [ 105.777589][ T5240] Bluetooth: hci2: command tx timeout [ 105.855671][ T5755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.934951][ T6124] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.963020][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.986368][ T6124] bridge_slave_0: entered allmulticast mode [ 106.005291][ T6124] bridge_slave_0: entered promiscuous mode [ 106.023526][ T6124] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.041170][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.056618][ T6124] bridge_slave_1: entered allmulticast mode [ 106.072959][ T6124] bridge_slave_1: entered promiscuous mode [ 106.177393][ T5284] net_ratelimit: 5 callbacks suppressed [ 106.177410][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.236766][ T6124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.263896][ T6124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.470944][ T6124] team0: Port device team_slave_0 added [ 106.503397][ T6124] team0: Port device team_slave_1 added [ 106.727467][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.745259][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.753955][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.794042][ T6124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.807911][ T6283] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 106.819314][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.826375][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.858049][ T6124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.965229][ T5755] veth0_vlan: entered promiscuous mode [ 107.104939][ T6124] hsr_slave_0: entered promiscuous mode [ 107.116577][ T6296] x_tables: duplicate underflow at hook 1 [ 107.130265][ T6124] hsr_slave_1: entered promiscuous mode [ 107.150550][ T6124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.167547][ T6124] Cannot create hsr debugfs directory [ 107.219296][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.323815][ T5755] veth1_vlan: entered promiscuous mode [ 107.600088][ T6321] netlink: 'syz.2.208': attribute type 1 has an invalid length. [ 107.716668][ T6323] netlink: 24 bytes leftover after parsing attributes in process `syz.4.209'. [ 107.803974][ T6321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.208'. [ 107.828151][ T6321] bond2: entered allmulticast mode [ 107.857509][ T5240] Bluetooth: hci2: command tx timeout [ 107.931578][ T6333] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 107.957558][ T6333] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 108.020258][ T6333] bond2: (slave ip6gre1): making interface the new active one [ 108.053703][ T6333] ip6gre1: entered allmulticast mode [ 108.075379][ T6333] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 108.126048][ T5755] veth0_macvtap: entered promiscuous mode [ 108.161698][ T5755] veth1_macvtap: entered promiscuous mode [ 108.243299][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.211'. [ 108.264416][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.283945][ T6353] Cannot find add_set index 0 as target [ 108.290211][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.211'. [ 108.425533][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.464004][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.481192][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.493586][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.505792][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.660599][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.669201][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.712965][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.757247][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.778828][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.793250][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.803434][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.814254][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.833613][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.845005][ T5755] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.853971][ T5755] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.863636][ T5755] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.872635][ T5755] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.143105][ T6376] netlink: 40 bytes leftover after parsing attributes in process `syz.2.218'. [ 109.260595][ T6124] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 109.297540][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.305701][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.325019][ T2539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.334577][ T6124] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 109.363020][ T2539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.391375][ T6124] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 109.437361][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'. [ 109.481184][ T6124] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 109.530986][ T5567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.588805][ T5567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.695979][ T6402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.704973][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.897351][ T6124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.942444][ T5240] Bluetooth: hci2: command tx timeout [ 109.983185][ T6124] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.005581][ T5553] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.012770][ T5553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.099795][ T5553] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.106992][ T5553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.557442][ T6448] netlink: 'syz.4.236': attribute type 2 has an invalid length. [ 110.628644][ T6448] netlink: 'syz.4.236': attribute type 8 has an invalid length. [ 110.651428][ T6451] netlink: 'syz.4.236': attribute type 1 has an invalid length. [ 110.674526][ T6448] netlink: 132 bytes leftover after parsing attributes in process `syz.4.236'. [ 110.803561][ T6460] netlink: 104 bytes leftover after parsing attributes in process `syz.0.237'. [ 110.843867][ T6124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.899624][ T6458] netlink: 'syz.3.238': attribute type 3 has an invalid length. [ 110.947607][ T6458] netlink: 'syz.3.238': attribute type 1 has an invalid length. [ 110.973235][ T6458] netlink: 130160 bytes leftover after parsing attributes in process `syz.3.238'. [ 111.082587][ T6461] syz.3.238 (6461) used greatest stack depth: 18384 bytes left [ 111.163921][ T6124] veth0_vlan: entered promiscuous mode [ 111.282647][ T6124] veth1_vlan: entered promiscuous mode [ 111.377724][ T58] net_ratelimit: 4 callbacks suppressed [ 111.377741][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.434768][ T6124] veth0_macvtap: entered promiscuous mode [ 111.577485][ T6124] veth1_macvtap: entered promiscuous mode [ 111.697558][ T5340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.750886][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.794161][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.814456][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.831449][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.850815][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.891387][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.915064][ T6124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.935038][ T6492] netlink: 'syz.0.245': attribute type 64 has an invalid length. [ 111.976940][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.244'. [ 112.004862][ T6506] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 112.083722][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.147688][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.199602][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.251295][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.274472][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.297167][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.314519][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.325430][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.345854][ T6124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.395307][ T6514] warning: `syz.0.249' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.427276][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.460008][ T6124] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.504843][ T6124] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.536698][ T6124] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.556072][ T6124] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.724023][ T6536] Bluetooth: MGMT ver 1.23 [ 112.729560][ T6535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.252'. [ 112.769301][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.253'. [ 113.126257][ T6549] netlink: 40 bytes leftover after parsing attributes in process `syz.2.256'. [ 113.175725][ T5553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.210132][ T5553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.248246][ T6553] netlink: 72 bytes leftover after parsing attributes in process `syz.3.258'. [ 113.270406][ T5541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.300066][ T6555] netlink: 44 bytes leftover after parsing attributes in process `syz.0.257'. [ 113.305212][ T5541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.463868][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.468847][ T6560] netlink: 'syz.3.260': attribute type 1 has an invalid length. [ 113.508421][ T6560] netlink: 'syz.3.260': attribute type 1 has an invalid length. [ 113.531401][ T6562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.536462][ T6560] netlink: 9328 bytes leftover after parsing attributes in process `syz.3.260'. [ 113.594830][ T6562] dvmrp0: entered allmulticast mode [ 113.600456][ T6560] netlink: 'syz.3.260': attribute type 1 has an invalid length. [ 114.498095][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.715961][ T6618] netlink: 48 bytes leftover after parsing attributes in process `syz.3.270'. [ 114.737883][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.867645][ T5541] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.905636][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'. [ 115.362353][ T5541] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.491506][ T5541] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.538694][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.581720][ T6648] netlink: 44 bytes leftover after parsing attributes in process `syz.3.276'. [ 115.625880][ T5541] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.648632][ T5248] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.659579][ T5248] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.666954][ T6649] netlink: 'syz.0.278': attribute type 34 has an invalid length. [ 115.675835][ T5248] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.687308][ T5248] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.698837][ T5248] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 115.706547][ T5248] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.713572][ T6651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.278'. [ 116.055871][ T5541] bridge_slave_1: left allmulticast mode [ 116.077243][ T5541] bridge_slave_1: left promiscuous mode [ 116.083259][ T5541] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.101239][ T5541] bridge_slave_0: left allmulticast mode [ 116.107269][ T5541] bridge_slave_0: left promiscuous mode [ 116.113070][ T5541] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.432666][ T6668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.441516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.581074][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.637576][ T5541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.649142][ T5541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.662564][ T5541] bond0 (unregistering): Released all slaves [ 117.250405][ T6650] chnl_net:caif_netlink_parms(): no params data found [ 117.380791][ T5541] hsr_slave_0: left promiscuous mode [ 117.407731][ T5541] hsr_slave_1: left promiscuous mode [ 117.443213][ T5541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.467737][ T5541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.488392][ T5541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.500554][ T5541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.525454][ T5541] veth1_macvtap: left promiscuous mode [ 117.531240][ T5541] veth0_macvtap: left promiscuous mode [ 117.536964][ T5541] veth1_vlan: left promiscuous mode [ 117.542477][ T5541] veth0_vlan: left promiscuous mode [ 117.618836][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.777428][ T5248] Bluetooth: hci2: command tx timeout [ 117.785051][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.174105][ T5541] team0 (unregistering): Port device team_slave_1 removed [ 118.214812][ T5541] team0 (unregistering): Port device team_slave_0 removed [ 118.274130][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.658752][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.703906][ T6724] netlink: 44 bytes leftover after parsing attributes in process `syz.3.291'. [ 118.861026][ T6728] netlink: 32 bytes leftover after parsing attributes in process `syz.2.292'. [ 118.898631][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.906817][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.955775][ T6731] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 118.999006][ T6650] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.018839][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.036307][ T6650] bridge_slave_0: entered allmulticast mode [ 119.063042][ T6650] bridge_slave_0: entered promiscuous mode [ 119.092320][ T6650] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.116080][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.137364][ T6650] bridge_slave_1: entered allmulticast mode [ 119.150042][ T6650] bridge_slave_1: entered promiscuous mode [ 119.262895][ T6740] netlink: 44 bytes leftover after parsing attributes in process `syz.3.294'. [ 119.284406][ T6650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.325638][ T6650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.444003][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'. [ 119.461729][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 119.490999][ T6650] team0: Port device team_slave_0 added [ 119.523715][ T6650] team0: Port device team_slave_1 added [ 119.666883][ T6650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.693388][ T6650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.728525][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.753507][ T6650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.769856][ T6650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.776913][ T6650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.803785][ T6650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.857422][ T5248] Bluetooth: hci2: command tx timeout [ 120.152477][ T6650] hsr_slave_0: entered promiscuous mode [ 120.247594][ T6650] hsr_slave_1: entered promiscuous mode [ 120.297332][ T6650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.304956][ T6650] Cannot create hsr debugfs directory [ 120.366566][ T6762] netlink: 'syz.0.298': attribute type 10 has an invalid length. [ 120.413394][ T6762] geneve0: entered promiscuous mode [ 120.484061][ T6762] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 120.702704][ T6787] netlink: 44 bytes leftover after parsing attributes in process `syz.2.304'. [ 120.754916][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.305'. [ 120.787369][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.305'. [ 120.826817][ T6789] netlink: 'syz.0.305': attribute type 1 has an invalid length. [ 120.849180][ T6789] netlink: 'syz.0.305': attribute type 1 has an invalid length. [ 120.864378][ T6789] netlink: 'syz.0.305': attribute type 2 has an invalid length. [ 120.917877][ T6789] netlink: 68 bytes leftover after parsing attributes in process `syz.0.305'. [ 120.956727][ T6791] netlink: 'syz.0.305': attribute type 1 has an invalid length. [ 120.971310][ T6791] netlink: 'syz.0.305': attribute type 1 has an invalid length. [ 120.997392][ T6791] netlink: 'syz.0.305': attribute type 2 has an invalid length. [ 121.023239][ T6791] netlink: 68 bytes leftover after parsing attributes in process `syz.0.305'. [ 121.572050][ T6821] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 121.777621][ T5242] net_ratelimit: 8 callbacks suppressed [ 121.777639][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.868557][ T6650] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 121.900518][ T6650] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 121.921066][ T6650] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 121.937417][ T5248] Bluetooth: hci2: command tx timeout [ 121.941097][ T6650] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 121.949995][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.186251][ T6650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.236540][ T6650] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.253779][ T2539] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.260963][ T2539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.284367][ T2539] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.291726][ T2539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.349621][ T6847] macvtap0: entered promiscuous mode [ 122.355102][ T6847] macvtap0: entered allmulticast mode [ 122.362663][ T6847] veth0_macvtap: entered allmulticast mode [ 122.457048][ T6650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.759529][ T6867] netlink: 'syz.2.320': attribute type 1 has an invalid length. [ 122.818182][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.163593][ T6650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.441242][ T6650] veth0_vlan: entered promiscuous mode [ 123.519707][ T6650] veth1_vlan: entered promiscuous mode [ 123.596403][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.607707][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.609619][ T6650] veth0_macvtap: entered promiscuous mode [ 123.621870][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.638763][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.657517][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 123.665706][ T5240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.721258][ T6650] veth1_macvtap: entered promiscuous mode [ 123.749242][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.760181][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.795856][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.822084][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.859391][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.872699][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.912542][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.956397][ T6914] Bluetooth: MGMT ver 1.23 [ 123.961265][ T6650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.981084][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.998713][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.018307][ T5248] Bluetooth: hci2: command tx timeout [ 124.024755][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.046092][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.056375][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.073920][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.085474][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.104320][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.116134][ T6650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.190764][ T6918] __nla_validate_parse: 4 callbacks suppressed [ 124.190784][ T6918] netlink: 44 bytes leftover after parsing attributes in process `syz.0.326'. [ 124.238512][ T6650] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.263588][ T6650] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.282569][ T6650] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.295683][ T6650] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.474693][ T6931] bridge0: port 2(bridge_slave_1) entered listening state [ 124.901255][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.981529][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.007382][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.038664][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.196091][ T5546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.206442][ T6971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.227274][ T5546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.355305][ T6901] chnl_net:caif_netlink_parms(): no params data found [ 125.544336][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.339'. [ 125.673861][ T6988] netlink: 44 bytes leftover after parsing attributes in process `syz.3.338'. [ 125.697925][ T5248] Bluetooth: hci3: command tx timeout [ 125.724633][ T6901] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.743102][ T6901] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.754919][ T6901] bridge_slave_0: entered allmulticast mode [ 125.767476][ T6901] bridge_slave_0: entered promiscuous mode [ 125.794294][ T6901] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.801690][ T6901] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.815900][ T6901] bridge_slave_1: entered allmulticast mode [ 125.829621][ T6901] bridge_slave_1: entered promiscuous mode [ 125.924689][ T6901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.938013][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.962096][ T6901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.992509][ T6997] bridge0: port 2(bridge_slave_1) entered listening state [ 126.113054][ T6901] team0: Port device team_slave_0 added [ 126.150419][ T6901] team0: Port device team_slave_1 added [ 126.170610][ T7009] xt_l2tp: missing protocol rule (udp|l2tpip) [ 126.190807][ T7009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.343'. [ 126.261752][ T6901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.278524][ T6901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.347161][ T6901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.399467][ T6901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.431078][ T6901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.461147][ T6901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.482654][ T7011] netlink: 44 bytes leftover after parsing attributes in process `syz.2.342'. [ 126.501785][ T7015] netlink: 'syz.0.344': attribute type 21 has an invalid length. [ 126.517701][ T7020] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 126.521820][ T7015] netlink: 128 bytes leftover after parsing attributes in process `syz.0.344'. [ 126.545488][ T7015] netlink: 'syz.0.344': attribute type 4 has an invalid length. [ 126.554466][ T7015] netlink: 'syz.0.344': attribute type 5 has an invalid length. [ 126.576278][ T7015] netlink: 3 bytes leftover after parsing attributes in process `syz.0.344'. [ 126.676539][ T7021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.344'. [ 126.714744][ T6901] hsr_slave_0: entered promiscuous mode [ 126.724920][ T6901] hsr_slave_1: entered promiscuous mode [ 126.735643][ T6901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.752321][ T6901] Cannot create hsr debugfs directory [ 126.980654][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.091007][ T6901] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.222097][ T6901] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.421896][ T5541] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.519623][ T6901] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.595829][ T6901] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.700600][ T5541] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.761919][ T6901] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 127.775199][ T6901] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 127.782653][ T5248] Bluetooth: hci3: command tx timeout [ 127.809669][ T5541] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.822731][ T6901] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 127.832726][ T6901] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 127.878088][ T5541] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.017983][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.026157][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.066252][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'. [ 128.134657][ T5541] bridge_slave_1: left allmulticast mode [ 128.149068][ T5541] bridge_slave_1: left promiscuous mode [ 128.157536][ T5541] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.396972][ T5541] bridge_slave_0: left allmulticast mode [ 128.415698][ T5541] bridge_slave_0: left promiscuous mode [ 128.427408][ T5541] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.499440][ T5288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.612233][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 128.633586][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 128.642104][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 128.650920][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 128.662317][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 128.669982][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.059245][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.084105][ T5541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.095242][ T5541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.106215][ T5541] bond0 (unregistering): Released all slaves [ 129.127488][ T6901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.373227][ T6901] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.403210][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.518710][ T2555] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.525927][ T2555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.557489][ T7090] netlink: 44 bytes leftover after parsing attributes in process `syz.3.354'. [ 129.606968][ T7081] netlink: 44 bytes leftover after parsing attributes in process `syz.2.356'. [ 129.666164][ T2555] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.673390][ T2555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.799956][ T7097] netlink: 36 bytes leftover after parsing attributes in process `syz.0.357'. [ 129.857787][ T5248] Bluetooth: hci3: command tx timeout [ 129.864245][ T5541] hsr_slave_0: left promiscuous mode [ 129.879177][ T5541] hsr_slave_1: left promiscuous mode [ 129.896363][ T5541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.905421][ T5541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.918026][ T5541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.935917][ T5541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.962391][ T5541] veth1_macvtap: left promiscuous mode [ 129.977435][ T5541] veth0_macvtap: left promiscuous mode [ 129.985482][ T5541] veth1_vlan: left promiscuous mode [ 129.992219][ T5541] veth0_vlan: left promiscuous mode [ 130.098450][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.315229][ T7112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.343495][ T7112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.361847][ T7112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.386006][ T7112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.668720][ T5541] team0 (unregistering): Port device team_slave_1 removed [ 130.711506][ T5541] team0 (unregistering): Port device team_slave_0 removed [ 130.737747][ T5248] Bluetooth: hci2: command tx timeout [ 131.491583][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'. [ 131.716890][ T7069] chnl_net:caif_netlink_parms(): no params data found [ 131.760053][ T7135] xt_socket: unknown flags 0x50 [ 131.938388][ T5248] Bluetooth: hci3: command tx timeout [ 131.957935][ T7145] netlink: 44 bytes leftover after parsing attributes in process `syz.0.367'. [ 132.019423][ T7153] netlink: 44 bytes leftover after parsing attributes in process `syz.2.368'. [ 132.179372][ T58] net_ratelimit: 5 callbacks suppressed [ 132.179390][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.194150][ T7160] tipc: Invalid UDP bearer configuration [ 132.194210][ T7160] tipc: Enabling of bearer rejected, failed to enable media [ 132.232611][ T7069] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.247361][ T7069] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.254651][ T7069] bridge_slave_0: entered allmulticast mode [ 132.263329][ T7069] bridge_slave_0: entered promiscuous mode [ 132.280254][ T7069] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.303925][ T7069] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.318641][ T7069] bridge_slave_1: entered allmulticast mode [ 132.326748][ T7069] bridge_slave_1: entered promiscuous mode [ 132.411209][ T6901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.436181][ T7069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.461477][ T7069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.644534][ T7069] team0: Port device team_slave_0 added [ 132.686455][ T7069] team0: Port device team_slave_1 added [ 132.818432][ T5248] Bluetooth: hci2: command tx timeout [ 132.866961][ T7069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.884435][ T7069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.941748][ T7185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.944675][ T7069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.979464][ T7069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.989139][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.995493][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.006180][ T7069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.033176][ T7069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.219047][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.305599][ T7069] hsr_slave_0: entered promiscuous mode [ 133.327721][ T7069] hsr_slave_1: entered promiscuous mode [ 133.334542][ T7069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.342678][ T7069] Cannot create hsr debugfs directory [ 133.373796][ T7198] bridge0: port 2(bridge_slave_1) entered listening state [ 133.495873][ T6901] veth0_vlan: entered promiscuous mode [ 133.695855][ T6901] veth1_vlan: entered promiscuous mode [ 133.842537][ T7223] netlink: 44 bytes leftover after parsing attributes in process `syz.0.382'. [ 133.913740][ T7214] netlink: 44 bytes leftover after parsing attributes in process `syz.2.383'. [ 133.990150][ T6901] veth0_macvtap: entered promiscuous mode [ 134.077595][ T6901] veth1_macvtap: entered promiscuous mode [ 134.098466][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.260746][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.276765][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.311705][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.329821][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.341023][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.351365][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.377144][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.394985][ T6901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.522860][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.547224][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.574556][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.593094][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.615505][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.638513][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.679838][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.705974][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.724289][ T6901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.769783][ T7248] bridge0: port 2(bridge_slave_1) entered listening state [ 134.812991][ T6901] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.827794][ T6901] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.836543][ T6901] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.862733][ T6901] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.900925][ T5248] Bluetooth: hci2: command tx timeout [ 134.914973][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.048377][ T7256] xt_time: unknown flags 0x4 [ 135.141639][ T7256] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 135.178163][ T7258] netlink: 20 bytes leftover after parsing attributes in process `syz.2.394'. [ 135.304745][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.344928][ T2539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.379182][ T2539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.427966][ T7266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.436381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.454895][ T7069] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 135.520534][ T7069] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 135.559062][ T5541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.568536][ T7069] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 135.568997][ T5541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.611455][ T7069] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 135.678856][ T7277] netlink: 44 bytes leftover after parsing attributes in process `syz.2.398'. [ 136.003229][ T7069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.049266][ T7293] netlink: 44 bytes leftover after parsing attributes in process `syz.0.399'. [ 136.132220][ T7069] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.217617][ T7297] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.272224][ T2539] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.279467][ T2539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.338096][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.413475][ T7297] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.459360][ T5541] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.466565][ T5541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.503345][ T7311] sctp: [Deprecated]: syz.2.405 (pid 7311) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.503345][ T7311] Use struct sctp_sack_info instead [ 136.563707][ T7312] netlink: 76 bytes leftover after parsing attributes in process `syz.2.405'. [ 136.587523][ T7311] netlink: 76 bytes leftover after parsing attributes in process `syz.2.405'. [ 136.597926][ T7297] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.744155][ T7297] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.776503][ T7318] xt_l2tp: wrong L2TP version: 0 [ 136.796015][ T7318] netlink: 'syz.2.407': attribute type 1 has an invalid length. [ 136.837573][ T7318] netlink: 'syz.2.407': attribute type 2 has an invalid length. [ 136.883050][ T7318] netlink: 'syz.2.407': attribute type 2 has an invalid length. [ 136.974067][ T7326] netlink: 'syz.3.409': attribute type 2 has an invalid length. [ 136.979299][ T5248] Bluetooth: hci2: command tx timeout [ 137.004993][ T7326] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.409'. [ 137.025729][ T7329] bridge0: port 2(bridge_slave_1) entered listening state [ 137.132299][ T7297] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.206987][ T7297] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.309115][ T7297] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.318395][ T7342] net_ratelimit: 11 callbacks suppressed [ 137.318412][ T7342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.332907][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.360704][ T7342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.363345][ T7297] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.369386][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.376975][ T7342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.394835][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.415275][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.644775][ T7069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.812581][ T7069] veth0_vlan: entered promiscuous mode [ 137.893298][ T7366] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 137.964758][ T7069] veth1_vlan: entered promiscuous mode [ 138.065120][ T7374] team_slave_0: entered promiscuous mode [ 138.071234][ T7374] team_slave_1: entered promiscuous mode [ 138.107547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.115927][ T7374] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 138.125532][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.419'. [ 138.179126][ T7383] netlink: 44 bytes leftover after parsing attributes in process `syz.0.418'. [ 138.250186][ T7069] veth0_macvtap: entered promiscuous mode [ 138.286502][ T7069] veth1_macvtap: entered promiscuous mode [ 138.363876][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.409600][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.420157][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.439019][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.451474][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.467290][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.479253][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.501221][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.513426][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.528030][ T7069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.556350][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.567427][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.569267][ T7399] tls_set_device_offload: netdev not found [ 138.582185][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.595762][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.608900][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.619855][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.639599][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.657667][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.669422][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.681581][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.709124][ T7069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.745970][ T7069] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.764026][ T7069] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.787512][ T7069] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.811455][ T7069] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.175623][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.182943][ T7416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.297561][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.330374][ T2539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.351064][ T2539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.461263][ T5541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.498874][ T5541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.781894][ T7449] ip6t_srh: unknown srh invflags 5F00 [ 139.988740][ T7456] Illegal XDP return value 65535 on prog (id 90) dev N/A, expect packet loss! [ 140.296567][ T7468] pimreg: entered allmulticast mode [ 140.499846][ T7477] netlink: 44 bytes leftover after parsing attributes in process `syz.3.437'. [ 140.649509][ T7486] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.442'. [ 140.900631][ T5546] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.433763][ T5546] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.529470][ T5546] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.666351][ T5546] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.936561][ T5546] bridge_slave_1: left allmulticast mode [ 141.965722][ T5546] bridge_slave_1: left promiscuous mode [ 141.986193][ T5546] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.039199][ T5546] bridge_slave_0: left allmulticast mode [ 142.044886][ T5546] bridge_slave_0: left promiscuous mode [ 142.095991][ T5546] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.281700][ T7509] xt_CT: No such helper "syz1" [ 142.334840][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 142.353946][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 142.362462][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 142.402963][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 142.412445][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 142.421982][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 142.582594][ T5286] net_ratelimit: 13 callbacks suppressed [ 142.582613][ T5286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.629417][ T7522] delete_channel: no stack [ 142.944871][ T5546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.963374][ T5546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.976214][ T5546] bond0 (unregistering): Released all slaves [ 143.024971][ T7522] netlink: 666 bytes leftover after parsing attributes in process `syz.3.451'. [ 143.627573][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.268162][ T5546] hsr_slave_0: left promiscuous mode [ 144.377141][ T941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.397397][ T5546] hsr_slave_1: left promiscuous mode [ 144.447355][ T5546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.487273][ T5546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.537869][ T5546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.557474][ T5248] Bluetooth: hci2: command tx timeout [ 144.584379][ T5546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.699113][ T5546] veth1_macvtap: left promiscuous mode [ 144.747291][ T5546] veth0_macvtap: left promiscuous mode [ 144.778340][ T5546] veth1_vlan: left promiscuous mode [ 144.808539][ T5546] veth0_vlan: left promiscuous mode [ 145.249220][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.258932][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.303582][ T5546] team0 (unregistering): Port device team_slave_1 removed [ 146.344170][ T5546] team0 (unregistering): Port device team_slave_0 removed [ 146.587704][ T5248] Bluetooth: hci2: command tx timeout [ 146.743398][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'. [ 146.752590][ T7563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'. [ 146.789105][ T7570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.462'. [ 146.861074][ T7577] sch_tbf: burst 5 is lower than device team0 mtu (1514) ! [ 146.945550][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031395c00: rx timeout, send abort [ 146.954959][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031397800: rx timeout, send abort [ 146.963515][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888031395c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 146.978086][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888031397800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 147.090945][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'. [ 147.115105][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'. [ 147.133582][ T7582] netlink: 'syz.0.462': attribute type 3 has an invalid length. [ 147.297406][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.336224][ T7515] chnl_net:caif_netlink_parms(): no params data found [ 147.377838][ T5288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.424665][ T7598] netlink: 44 bytes leftover after parsing attributes in process `syz.2.465'. [ 147.544648][ T7608] vlan3: entered promiscuous mode [ 147.559688][ T7608] vlan3: entered allmulticast mode [ 147.880706][ T7515] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.917505][ T7515] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.950572][ T7515] bridge_slave_0: entered allmulticast mode [ 147.980882][ T7515] bridge_slave_0: entered promiscuous mode [ 148.026963][ T7515] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.066213][ T7515] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.113103][ T7515] bridge_slave_1: entered allmulticast mode [ 148.153790][ T7515] bridge_slave_1: entered promiscuous mode [ 148.340312][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.410920][ T7515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.519764][ T7515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.605565][ T7663] netlink: 60 bytes leftover after parsing attributes in process `syz.2.478'. [ 148.649516][ T7665] netlink: 56 bytes leftover after parsing attributes in process `syz.4.479'. [ 148.668013][ T5248] Bluetooth: hci2: command tx timeout [ 148.678874][ T7515] team0: Port device team_slave_0 added [ 148.686218][ T7665] netlink: 56 bytes leftover after parsing attributes in process `syz.4.479'. [ 148.698928][ T7515] team0: Port device team_slave_1 added [ 148.833518][ T7676] ipvlan2: entered promiscuous mode [ 148.895779][ T7689] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 148.972371][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'. [ 149.092451][ T7515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.134815][ T7515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.227146][ T7515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.286226][ T7515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.325311][ T7515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.378223][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.429392][ T7515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.589034][ T7515] hsr_slave_0: entered promiscuous mode [ 149.611984][ T7724] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 149.619198][ T7515] hsr_slave_1: entered promiscuous mode [ 149.641876][ T7515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.665647][ T7515] Cannot create hsr debugfs directory [ 150.334276][ T7761] Bluetooth: MGMT ver 1.23 [ 150.418423][ T5288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.426615][ T5288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.535971][ T7769] netlink: 'syz.2.497': attribute type 2 has an invalid length. [ 150.553770][ T7761] netlink: 'syz.4.494': attribute type 1 has an invalid length. [ 150.738399][ T5248] Bluetooth: hci2: command tx timeout [ 150.903213][ T5288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.350137][ T7810] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.437004][ T7814] netlink: 'syz.4.509': attribute type 10 has an invalid length. [ 151.462031][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.484297][ T7814] team_slave_0: left promiscuous mode [ 151.497551][ T7814] team_slave_1: left promiscuous mode [ 151.540176][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.548309][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.593034][ T7814] batman_adv: batadv0: Adding interface: team0 [ 151.606620][ T7814] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.632786][ T7814] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 151.769528][ T7826] __nla_validate_parse: 7 callbacks suppressed [ 151.769546][ T7826] netlink: 165 bytes leftover after parsing attributes in process `syz.0.512'. [ 151.806302][ T7515] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 151.814163][ T7826] netlink: 277 bytes leftover after parsing attributes in process `syz.0.512'. [ 151.840453][ T7515] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 151.869324][ T7515] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 151.890622][ T7515] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 152.248877][ T7515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.336853][ T7515] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.412716][ T2539] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.419909][ T2539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.488313][ T5541] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.495577][ T5541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.538628][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.571442][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'. [ 152.580047][ T7826] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 152.607915][ T7865] bridge_slave_1: left allmulticast mode [ 152.613594][ T7865] bridge_slave_1: left promiscuous mode [ 152.654177][ T7865] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.697833][ T7865] bridge_slave_0: left allmulticast mode [ 152.703523][ T7865] bridge_slave_0: left promiscuous mode [ 152.741438][ T7865] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.625178][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.659716][ T7907] netlink: 44 bytes leftover after parsing attributes in process `syz.3.526'. [ 153.746611][ T7515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.892731][ T7933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.530'. [ 153.932836][ T7515] veth0_vlan: entered promiscuous mode [ 153.992167][ T7515] veth1_vlan: entered promiscuous mode [ 154.130904][ T7515] veth0_macvtap: entered promiscuous mode [ 154.146770][ T7515] veth1_macvtap: entered promiscuous mode [ 154.213913][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.243549][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.270627][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.291194][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.310528][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.326962][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.346624][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.365149][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.378637][ T7515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.454829][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.527474][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.562817][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.601684][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.654654][ T7960] netlink: 104 bytes leftover after parsing attributes in process `syz.4.534'. [ 154.663064][ T5286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.665135][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.682490][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.707830][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.728274][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.766714][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.804851][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.843315][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.868975][ T7515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.939537][ T7967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.022720][ T7515] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.039431][ T7515] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.054296][ T7515] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.094687][ T7515] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.230881][ T7980] netlink: 28 bytes leftover after parsing attributes in process `syz.4.538'. [ 155.271980][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.538'. [ 155.493588][ T5570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.513838][ T5570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.554898][ T7990] macvlan0: entered allmulticast mode [ 155.634570][ T5546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.678814][ T5546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.697854][ T5286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.037823][ T8015] batadv_slave_1: entered promiscuous mode [ 156.047915][ T8005] netlink: 44 bytes leftover after parsing attributes in process `syz.0.543'. [ 156.062987][ T8015] netlink: 44 bytes leftover after parsing attributes in process `syz.2.545'. [ 156.118804][ T8012] batadv_slave_1: left promiscuous mode [ 156.738212][ T8050] cannot load conntrack support for proto=3 [ 156.738525][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.920991][ T5546] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.993557][ T8060] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.311643][ T5546] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.678473][ T5546] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.707990][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.778071][ T5286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.804461][ T8094] netlink: 100 bytes leftover after parsing attributes in process `syz.0.556'. [ 157.833984][ T8094] netlink: 'syz.0.556': attribute type 4 has an invalid length. [ 157.846590][ T5546] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.851214][ T8094] netlink: 'syz.0.556': attribute type 1 has an invalid length. [ 157.888327][ T8094] netlink: 88156 bytes leftover after parsing attributes in process `syz.0.556'. [ 157.966494][ T8094] netlink: 36 bytes leftover after parsing attributes in process `syz.0.556'. [ 158.036842][ T8103] netlink: 'syz.2.560': attribute type 18 has an invalid length. [ 158.159494][ T8105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.561'. [ 158.214953][ T8105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.561'. [ 158.249111][ T5546] bridge_slave_1: left allmulticast mode [ 158.254796][ T5546] bridge_slave_1: left promiscuous mode [ 158.297470][ T5546] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.326151][ T5546] bridge_slave_0: left allmulticast mode [ 158.334376][ T5546] bridge_slave_0: left promiscuous mode [ 158.346728][ T5546] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.405544][ T8117] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 158.425640][ T8117] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.562'. [ 158.461368][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.477126][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.485113][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.498258][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.507242][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 158.515500][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.821387][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.856504][ T5546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.873076][ T5546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.884100][ T5546] bond0 (unregistering): Released all slaves [ 159.467944][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'. [ 159.521125][ T8155] openvswitch: netlink: Message has 4 unknown bytes. [ 159.762293][ T8155] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 159.787341][ T8155] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 159.880946][ T5286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.904391][ T5546] hsr_slave_0: left promiscuous mode [ 159.951884][ T5546] hsr_slave_1: left promiscuous mode [ 159.975794][ T5546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.989015][ T5546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.008426][ T5546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.022329][ T5546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.063369][ T5546] veth1_macvtap: left promiscuous mode [ 160.069405][ T5546] veth0_macvtap: left promiscuous mode [ 160.075194][ T5546] veth1_vlan: left promiscuous mode [ 160.081459][ T5546] veth0_vlan: left promiscuous mode [ 160.578030][ T5240] Bluetooth: hci2: command tx timeout [ 160.747428][ T5288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.759970][ T5546] team0 (unregistering): Port device team_slave_1 removed [ 160.805277][ T5546] team0 (unregistering): Port device team_slave_0 removed [ 160.904430][ T5286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.150826][ T5288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.291336][ T8196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.579'. [ 161.721752][ T8216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.584'. [ 161.764923][ T8120] chnl_net:caif_netlink_parms(): no params data found [ 161.940840][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.021776][ T8230] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 162.210022][ T8245] netlink: 104 bytes leftover after parsing attributes in process `syz.3.591'. [ 162.219408][ T8238] netlink: 'syz.2.589': attribute type 10 has an invalid length. [ 162.316406][ T8238] batman_adv: batadv0: Adding interface: team0 [ 162.334254][ T8251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.343937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.356609][ T8238] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.405376][ T8238] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 162.501398][ T8120] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.564918][ T8120] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.593946][ T8120] bridge_slave_0: entered allmulticast mode [ 162.619326][ T8120] bridge_slave_0: entered promiscuous mode [ 162.657443][ T5240] Bluetooth: hci2: command tx timeout [ 162.671149][ T8120] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.719119][ T8120] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.744661][ T8120] bridge_slave_1: entered allmulticast mode [ 162.778151][ T8120] bridge_slave_1: entered promiscuous mode [ 162.879707][ T8120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.900007][ T8120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.949545][ T8275] netlink: 'syz.2.598': attribute type 21 has an invalid length. [ 162.975644][ T8275] netlink: 'syz.2.598': attribute type 1 has an invalid length. [ 162.985144][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.074042][ T8120] team0: Port device team_slave_0 added [ 163.104999][ T8279] netlink: 'syz.0.599': attribute type 11 has an invalid length. [ 163.118729][ T8120] team0: Port device team_slave_1 added [ 163.127525][ T8279] netlink: 211132 bytes leftover after parsing attributes in process `syz.0.599'. [ 163.221043][ T8281] netlink: 'syz.4.600': attribute type 10 has an invalid length. [ 163.231442][ T8281] netlink: 55 bytes leftover after parsing attributes in process `syz.4.600'. [ 163.373044][ T8120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.384485][ T8288] netlink: 104 bytes leftover after parsing attributes in process `syz.0.602'. [ 163.412251][ T8120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.500887][ T8120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.567554][ T8294] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.604'. [ 163.679136][ T8120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.695862][ T8301] netlink: 'syz.2.606': attribute type 5 has an invalid length. [ 163.704183][ T8120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.704211][ T8120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.796193][ T8298] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 163.823879][ T8298] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 164.017905][ T5284] net_ratelimit: 2 callbacks suppressed [ 164.017924][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.041890][ T8120] hsr_slave_0: entered promiscuous mode [ 164.053452][ T8120] hsr_slave_1: entered promiscuous mode [ 164.063127][ T8319] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.609'. [ 164.087181][ T8120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.114467][ T8120] Cannot create hsr debugfs directory [ 164.122230][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.609'. [ 164.580101][ T8344] netlink: 16 bytes leftover after parsing attributes in process `syz.4.613'. [ 164.737521][ T5240] Bluetooth: hci2: command tx timeout [ 164.793232][ T8347] gtp0: entered promiscuous mode [ 164.824431][ T8347] gtp0: entered allmulticast mode [ 165.035820][ T8357] netlink: 100 bytes leftover after parsing attributes in process `syz.3.617'. [ 165.067269][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.085750][ T8358] netlink: 40 bytes leftover after parsing attributes in process `syz.3.617'. [ 165.107981][ T8357] netlink: 40 bytes leftover after parsing attributes in process `syz.3.617'. [ 165.140593][ T8358] nbd: socks must be embedded in a SOCK_ITEM attr [ 165.448233][ T8373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.456752][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.478042][ T8373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.486812][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.512203][ T8373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.557501][ T8373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.566066][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.853575][ T8390] netlink: 'syz.3.625': attribute type 10 has an invalid length. [ 165.929829][ T8390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.955306][ T8390] team0: Port device batadv0 added [ 165.957759][ T8394] NCSI netlink: No device for ifindex 0 [ 166.022500][ T8120] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 166.064903][ T8120] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 166.090224][ T8399] netlink: 'syz.0.627': attribute type 7 has an invalid length. [ 166.099569][ T5286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.128483][ T8120] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 166.196413][ T8120] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 166.528035][ T8120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.567721][ T8412] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 166.602254][ T8120] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.664621][ T5570] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.671827][ T5570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.817236][ T5240] Bluetooth: hci2: command tx timeout [ 166.916941][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.924159][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.418688][ T8452] netlink: 'syz.2.641': attribute type 2 has an invalid length. [ 167.606980][ T8471] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 167.635351][ T8468] bridge0: port 2(bridge_slave_1) entered listening state [ 167.765208][ T8120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.912343][ T8120] veth0_vlan: entered promiscuous mode [ 167.961383][ T8120] veth1_vlan: entered promiscuous mode [ 168.107861][ T8120] veth0_macvtap: entered promiscuous mode [ 168.132250][ T8120] veth1_macvtap: entered promiscuous mode [ 168.171596][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.230676][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.257405][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.293338][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.317632][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.328745][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.340281][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.351541][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.363796][ T8120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.477635][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.539074][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.591877][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.629901][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.664091][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.704686][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.733313][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.761835][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.775078][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.802658][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.842626][ T8120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.873065][ T8511] netlink: 'syz.2.655': attribute type 1 has an invalid length. [ 168.887266][ T8511] netlink: 'syz.2.655': attribute type 2 has an invalid length. [ 168.969653][ T8519] __nla_validate_parse: 13 callbacks suppressed [ 168.969671][ T8519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.657'. [ 169.036482][ T8120] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.069309][ T8120] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.084556][ T8120] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.093779][ T8120] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.106567][ T8535] ================================================================== [ 169.114668][ T8535] BUG: KASAN: slab-out-of-bounds in btf_datasec_check_meta+0x2c9/0x9a0 [ 169.123071][ T8535] Read of size 1 at addr ffff888034ad12ba by task syz.3.660/8535 [ 169.130801][ T8535] [ 169.133142][ T8535] CPU: 1 UID: 0 PID: 8535 Comm: syz.3.660 Not tainted 6.11.0-rc6-syzkaller-00219-g3e705251d998 #0 [ 169.143741][ T8535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 169.153817][ T8535] Call Trace: [ 169.157104][ T8535] [ 169.160034][ T8535] dump_stack_lvl+0x241/0x360 [ 169.164710][ T8535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.169905][ T8535] ? __pfx__printk+0x10/0x10 [ 169.174493][ T8535] ? _printk+0xd5/0x120 [ 169.178638][ T8535] ? __virt_addr_valid+0x183/0x530 [ 169.183741][ T8535] ? __virt_addr_valid+0x183/0x530 [ 169.188845][ T8535] print_report+0x169/0x550 [ 169.193346][ T8535] ? __virt_addr_valid+0x183/0x530 [ 169.198449][ T8535] ? __virt_addr_valid+0x183/0x530 [ 169.203552][ T8535] ? __virt_addr_valid+0x45f/0x530 [ 169.208656][ T8535] ? __phys_addr+0xba/0x170 [ 169.213152][ T8535] ? btf_datasec_check_meta+0x2c9/0x9a0 [ 169.218708][ T8535] kasan_report+0x143/0x180 [ 169.223213][ T8535] ? btf_datasec_check_meta+0x2c9/0x9a0 [ 169.228758][ T8535] btf_datasec_check_meta+0x2c9/0x9a0 [ 169.234136][ T8535] btf_parse_type_sec+0x4d5/0x2620 [ 169.239250][ T8535] ? bpf_verifier_vlog+0x32b/0x860 [ 169.244460][ T8535] ? btf_check_sec_info+0x379/0x4f0 [ 169.249662][ T8535] ? __pfx_btf_parse_type_sec+0x10/0x10 [ 169.255207][ T8535] ? btf_parse_str_sec+0x21f/0x2b0 [ 169.260316][ T8535] btf_new_fd+0x43f/0xd30 [ 169.264649][ T8535] ? __pfx_btf_new_fd+0x10/0x10 [ 169.269496][ T8535] ? bpf_btf_load+0xcf/0x1a0 [ 169.274086][ T8535] __sys_bpf+0x6ef/0x810 [ 169.278325][ T8535] ? __pfx___sys_bpf+0x10/0x10 [ 169.283089][ T8535] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 169.289083][ T8535] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 169.295428][ T8535] ? do_syscall_64+0x100/0x230 [ 169.300211][ T8535] __x64_sys_bpf+0x7c/0x90 [ 169.304622][ T8535] do_syscall_64+0xf3/0x230 [ 169.309121][ T8535] ? clear_bhb_loop+0x35/0x90 [ 169.313810][ T8535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.319709][ T8535] RIP: 0033:0x7f16a557def9 [ 169.324124][ T8535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.343809][ T8535] RSP: 002b:00007f16a6295038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 169.352219][ T8535] RAX: ffffffffffffffda RBX: 00007f16a5736058 RCX: 00007f16a557def9 [ 169.360184][ T8535] RDX: 0000000000000028 RSI: 0000000020000400 RDI: 0000000000000012 [ 169.368142][ T8535] RBP: 00007f16a55f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 169.376105][ T8535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.384077][ T8535] R13: 0000000000000000 R14: 00007f16a5736058 R15: 00007fffd91b1588 [ 169.392050][ T8535] [ 169.395058][ T8535] [ 169.397372][ T8535] Allocated by task 8535: [ 169.401682][ T8535] kasan_save_track+0x3f/0x80 [ 169.406356][ T8535] __kasan_kmalloc+0x98/0xb0 [ 169.410948][ T8535] __kmalloc_node_noprof+0x22a/0x440 [ 169.416225][ T8535] __kvmalloc_node_noprof+0x72/0x190 [ 169.421514][ T8535] btf_new_fd+0x265/0xd30 [ 169.425861][ T8535] __sys_bpf+0x6ef/0x810 [ 169.430102][ T8535] __x64_sys_bpf+0x7c/0x90 [ 169.434509][ T8535] do_syscall_64+0xf3/0x230 [ 169.439004][ T8535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.444893][ T8535] [ 169.447206][ T8535] The buggy address belongs to the object at ffff888034ad1280 [ 169.447206][ T8535] which belongs to the cache kmalloc-64 of size 64 [ 169.461081][ T8535] The buggy address is located 0 bytes to the right of [ 169.461081][ T8535] allocated 58-byte region [ffff888034ad1280, ffff888034ad12ba) [ 169.475494][ T8535] [ 169.477816][ T8535] The buggy address belongs to the physical page: [ 169.484223][ T8535] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34ad1 [ 169.492968][ T8535] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 169.500416][ T8535] page_type: 0xfdffffff(slab) [ 169.505083][ T8535] raw: 00fff00000000000 ffff88801ac418c0 ffffea0000a7e9c0 dead000000000003 [ 169.513654][ T8535] raw: 0000000000000000 0000000080200020 00000001fdffffff 0000000000000000 [ 169.522220][ T8535] page dumped because: kasan: bad access detected [ 169.528652][ T8535] page_owner tracks the page as allocated [ 169.534352][ T8535] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 23241082338, free_ts 0 [ 169.551962][ T8535] post_alloc_hook+0x1f3/0x230 [ 169.556718][ T8535] get_page_from_freelist+0x2e4c/0x2f10 [ 169.562259][ T8535] __alloc_pages_noprof+0x256/0x6c0 [ 169.567455][ T8535] alloc_slab_page+0x5f/0x120 [ 169.572216][ T8535] allocate_slab+0x5a/0x2f0 [ 169.576713][ T8535] ___slab_alloc+0xcd1/0x14b0 [ 169.581394][ T8535] __slab_alloc+0x58/0xa0 [ 169.585717][ T8535] __kmalloc_noprof+0x25a/0x400 [ 169.590563][ T8535] kobject_get_path+0xb8/0x230 [ 169.595314][ T8535] kobject_uevent_env+0x2a5/0x8e0 [ 169.600332][ T8535] driver_register+0x2d6/0x320 [ 169.605086][ T8535] __platform_driver_probe+0x11d/0x250 [ 169.610537][ T8535] do_one_initcall+0x248/0x880 [ 169.615296][ T8535] do_initcall_level+0x157/0x210 [ 169.620228][ T8535] do_initcalls+0x3f/0x80 [ 169.624549][ T8535] kernel_init_freeable+0x435/0x5d0 [ 169.629754][ T8535] page_owner free stack trace missing [ 169.635120][ T8535] [ 169.637430][ T8535] Memory state around the buggy address: [ 169.643066][ T8535] ffff888034ad1180: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 169.651113][ T8535] ffff888034ad1200: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 169.659160][ T8535] >ffff888034ad1280: 00 00 00 00 00 00 00 02 fc fc fc fc fc fc fc fc [ 169.667205][ T8535] ^ [ 169.673078][ T8535] ffff888034ad1300: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 169.681122][ T8535] ffff888034ad1380: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 169.689169][ T8535] ================================================================== [ 169.702987][ T5286] net_ratelimit: 6 callbacks suppressed [ 169.703002][ T5286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.761097][ T8535] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 169.768332][ T8535] CPU: 0 UID: 0 PID: 8535 Comm: syz.3.660 Not tainted 6.11.0-rc6-syzkaller-00219-g3e705251d998 #0 [ 169.778938][ T8535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 169.789076][ T8535] Call Trace: [ 169.792351][ T8535] [ 169.795277][ T8535] dump_stack_lvl+0x241/0x360 [ 169.799954][ T8535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.805146][ T8535] ? __pfx__printk+0x10/0x10 [ 169.809729][ T8535] ? preempt_schedule+0xe1/0xf0 [ 169.814573][ T8535] ? vscnprintf+0x5d/0x90 [ 169.818901][ T8535] panic+0x349/0x860 [ 169.822796][ T8535] ? check_panic_on_warn+0x21/0xb0 [ 169.827900][ T8535] ? __pfx_panic+0x10/0x10 [ 169.832311][ T8535] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 169.838292][ T8535] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 169.844617][ T8535] ? print_report+0x502/0x550 [ 169.849303][ T8535] check_panic_on_warn+0x86/0xb0 [ 169.854229][ T8535] ? btf_datasec_check_meta+0x2c9/0x9a0 [ 169.859766][ T8535] end_report+0x77/0x160 [ 169.864204][ T8535] kasan_report+0x154/0x180 [ 169.868714][ T8535] ? btf_datasec_check_meta+0x2c9/0x9a0 [ 169.874257][ T8535] btf_datasec_check_meta+0x2c9/0x9a0 [ 169.879630][ T8535] btf_parse_type_sec+0x4d5/0x2620 [ 169.884740][ T8535] ? bpf_verifier_vlog+0x32b/0x860 [ 169.889856][ T8535] ? btf_check_sec_info+0x379/0x4f0 [ 169.895051][ T8535] ? __pfx_btf_parse_type_sec+0x10/0x10 [ 169.900593][ T8535] ? btf_parse_str_sec+0x21f/0x2b0 [ 169.905705][ T8535] btf_new_fd+0x43f/0xd30 [ 169.910042][ T8535] ? __pfx_btf_new_fd+0x10/0x10 [ 169.914891][ T8535] ? bpf_btf_load+0xcf/0x1a0 [ 169.919481][ T8535] __sys_bpf+0x6ef/0x810 [ 169.923742][ T8535] ? __pfx___sys_bpf+0x10/0x10 [ 169.928506][ T8535] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 169.934501][ T8535] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 169.940829][ T8535] ? do_syscall_64+0x100/0x230 [ 169.945591][ T8535] __x64_sys_bpf+0x7c/0x90 [ 169.950006][ T8535] do_syscall_64+0xf3/0x230 [ 169.954499][ T8535] ? clear_bhb_loop+0x35/0x90 [ 169.959172][ T8535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.965058][ T8535] RIP: 0033:0x7f16a557def9 [ 169.969465][ T8535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.989060][ T8535] RSP: 002b:00007f16a6295038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 169.997463][ T8535] RAX: ffffffffffffffda RBX: 00007f16a5736058 RCX: 00007f16a557def9 [ 170.005446][ T8535] RDX: 0000000000000028 RSI: 0000000020000400 RDI: 0000000000000012 [ 170.013411][ T8535] RBP: 00007f16a55f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 170.021373][ T8535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.029344][ T8535] R13: 0000000000000000 R14: 00007f16a5736058 R15: 00007fffd91b1588 [ 170.037326][ T8535] [ 170.040660][ T8535] Kernel Offset: disabled [ 170.044983][ T8535] Rebooting in 86400 seconds..