last executing test programs: 16m54.921002433s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)=0x9732) listen(0xffffffffffffffff, 0xec) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x800) close(0x3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x3) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x14) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x0, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x12d, 0x4, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0xa, 0x4, 0x8000000, 0xdffffffa]}) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x107, 0x94802) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) 16m38.970439495s ago: executing program 32 (id=1): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)=0x9732) listen(0xffffffffffffffff, 0xec) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x800) close(0x3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x3) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x14) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x0, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x12d, 0x4, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0xa, 0x4, 0x8000000, 0xdffffffa]}) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x107, 0x94802) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) 16m30.207430835s ago: executing program 4 (id=35): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 16m28.768644516s ago: executing program 4 (id=38): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='nv', 0x2) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000180)='D', 0x1}], 0x1}}], 0x1, 0x24006010) sendmmsg$inet_sctp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000540)="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", 0x46e}], 0x1, 0x0, 0x0, 0x44010}], 0x1, 0x10) 16m28.513494792s ago: executing program 4 (id=40): socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000480)={0x0, 0x2, 0x1000, 0xfffffffe, 0x25a, 0x0, r3}, &(0x7f00000014c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x2033f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x8000, 0x2, 0xdfffffff}}], 0x1, 0x0, 0x0) 16m27.06677193s ago: executing program 4 (id=43): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0xec) accept4$bt_l2cap(r1, 0x0, 0x0, 0x800) close(0x3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r2, 0x0) listen(0xffffffffffffffff, 0x3) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x14) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x0, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x12d, 0x4, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0xa, 0x4, 0x8000000, 0xdffffffa]}) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x107, 0x94802) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) 16m25.919811996s ago: executing program 4 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 16m23.932371685s ago: executing program 4 (id=52): ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) times(0xfffffffffffffffc) ioctl$SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, &(0x7f0000000100)=0xfffff078) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, 0x0) mkdir(0x0, 0x64) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x800, 0x5, 0x4, 0x80000000, 0x0, 0x45, 0xfffffffffffffffd, 0x4], 0xd5dd0000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16m8.472181545s ago: executing program 33 (id=52): ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) times(0xfffffffffffffffc) ioctl$SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, &(0x7f0000000100)=0xfffff078) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, 0x0) mkdir(0x0, 0x64) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x800, 0x5, 0x4, 0x80000000, 0x0, 0x45, 0xfffffffffffffffd, 0x4], 0xd5dd0000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m52.528018908s ago: executing program 1 (id=1389): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) write$bt_hci(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="27bc4a"], 0x5) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}], 0x1, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4m50.006504093s ago: executing program 1 (id=1394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 4m48.737271609s ago: executing program 1 (id=1395): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYBLOB="00000000000000007608000000c000001800000000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x80000, &(0x7f0000000400)={[{}, {'erspan0\x00'}, {}, {}, {'GPL\x00'}, {'\\@'}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x63, 0x66, 0x30, 0x61, 0x61, 0x63], 0x2d, [0x64, 0xd, 0x63, 0x64], 0x2d, [0x37, 0x1, 0x32, 0x38], 0x2d, [0x39, 0x63, 0x64, 0x35], 0x2d, [0x38, 0x0, 0x37, 0x30, 0x31, 0x33, 0x31, 0x30]}}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@obj_role={'obj_role', 0x3d, ')'}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r4}}]}) r5 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r5, 0x0, 0x0, 0x8040) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7313}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4m47.4005738s ago: executing program 1 (id=1397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa20}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, 0x0) 4m42.317607814s ago: executing program 1 (id=1406): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYBLOB="00000000000000007608000000c000001800000000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x80000, &(0x7f0000000400)={[{}, {'erspan0\x00'}, {}, {}, {'GPL\x00'}, {'\\@'}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x63, 0x66, 0x30, 0x61, 0x61, 0x63], 0x2d, [0x64, 0xd, 0x63, 0x64], 0x2d, [0x37, 0x1, 0x32, 0x38], 0x2d, [0x39, 0x63, 0x64, 0x35], 0x2d, [0x38, 0x0, 0x37, 0x30, 0x31, 0x33, 0x31, 0x30]}}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@obj_role={'obj_role', 0x3d, ')'}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r4}}]}) r5 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r5, 0x0, 0x0, 0x8040) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7313}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4m40.875787173s ago: executing program 1 (id=1410): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, 0x0) socket$l2tp6(0xa, 0x2, 0x73) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 4m25.099155438s ago: executing program 34 (id=1410): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, 0x0) socket$l2tp6(0xa, 0x2, 0x73) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 4.058947944s ago: executing program 5 (id=2802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.845015361s ago: executing program 3 (id=2806): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e40)={0x38, r1, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x38}}, 0x0) 3.674995455s ago: executing program 5 (id=2809): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000080)=0x4, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/41, 0xc}, 0xffffff81}], 0x3d5, 0x45833af92e4b38ff, 0x0) 3.441461055s ago: executing program 2 (id=2813): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000048004807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.272381629s ago: executing program 3 (id=2814): syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES8=r0], 0x44}}, 0x8000) 3.202593857s ago: executing program 6 (id=2815): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e0000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0x8) 3.034329182s ago: executing program 3 (id=2816): syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02de2b", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}}}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x28, 0x81, 0xfffff034}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.997077241s ago: executing program 6 (id=2817): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x77, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2.890527866s ago: executing program 2 (id=2818): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc082}, 0xc000) 2.880753752s ago: executing program 7 (id=2819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2.591767241s ago: executing program 2 (id=2820): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x94) 2.565609876s ago: executing program 6 (id=2821): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 2.523904646s ago: executing program 3 (id=2822): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0xdea}, {&(0x7f0000000240)="b0c089c1c3e1216756615dde8fd8e358908803df4459f506479ab9cf61eb0266", 0x20}], 0x6) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4000}, 0x18) close(0x4) 2.444365602s ago: executing program 2 (id=2823): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd11, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2.410877901s ago: executing program 7 (id=2824): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x7, 0x1}}, @val={0x76, 0x6, {0xfc, 0xf5, 0x30, 0x81}}}}, @NL80211_ATTR_IE_ASSOC_RESP={0xa, 0x80, [@chsw_timing={0x68, 0x4, {0x3ff}}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x200}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 2.041101985s ago: executing program 2 (id=2825): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38000000030101c2ae04000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000"], 0x38}}, 0x0) r1 = socket(0x2b, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000228bd7000ffdbdf2507000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0x7}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) mmap(&(0x7f0000002000/0x4000)=nil, 0x4021, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r8, 0xfffffdc8, &(0x7f0000000340)}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000003c0)=ANY=[@ANYBLOB="800000000802110000010802110000005050505050500063c8b5e1410c98403bfda2112a0b000000000000000000640001000012bcb2fc61dca02864d19884114976094ba46f010076065c0504000600"], 0x42) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff, 0x5cd3766825369f45}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 1.997982219s ago: executing program 7 (id=2826): syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES8=r0], 0x44}}, 0x8000) 1.78186722s ago: executing program 5 (id=2827): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e0000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0x8) 1.648348067s ago: executing program 7 (id=2828): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.496654746s ago: executing program 6 (id=2829): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x80, 0x0}, 0x800) 1.365518814s ago: executing program 5 (id=2830): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 1.335696512s ago: executing program 7 (id=2831): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f", 0x10}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b4", 0xbb}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000014c0)="fa98151f51a5cd01a13cca732ada71da23eb1dbc1760afa900e0a7e5bd", 0x1d}], 0x1}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0), &(0x7f0000000700), 0x0, 0x20000000000000c4}}, 0x40) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 1.180857511s ago: executing program 5 (id=2832): syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02de2b", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}}}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x28, 0x81, 0xfffff034}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 523.311404ms ago: executing program 3 (id=2833): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x94) 405.614043ms ago: executing program 6 (id=2834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 391.692291ms ago: executing program 3 (id=2835): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e40)={0x38, r2, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x38}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) nanosleep(&(0x7f0000000340)={r4, r5+60000000}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000200)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @val={0x10, 0x1, 0x21}}, 0x21) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) 131.264526ms ago: executing program 5 (id=2836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x4f62b68f6fa20884}, {0xc, 0xb}, {0xa, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x80000000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 47.539927ms ago: executing program 7 (id=2837): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 6.088862ms ago: executing program 2 (id=2838): syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES8=r0], 0x44}}, 0x8000) 0s ago: executing program 6 (id=2839): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc082}, 0xc000) kernel console output (not intermixed with test programs): lse inactive [ 540.919533][ T9208] vivid-004: RDS Music: false inactive [ 540.920433][ T9208] vivid-004: ================== END STATUS ================== [ 545.892026][ T9256] netlink: 'syz.1.739': attribute type 8 has an invalid length. [ 547.305958][ T9038] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.306084][ T9038] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.306730][ T9038] bridge_slave_0: entered allmulticast mode [ 547.881347][ T9038] bridge_slave_0: entered promiscuous mode [ 547.898702][ T9038] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.898840][ T9038] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.899055][ T9038] bridge_slave_1: entered allmulticast mode [ 547.949385][ T9038] bridge_slave_1: entered promiscuous mode [ 548.068319][ T9038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.093886][ T9038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.334247][ T9276] netlink: 'syz.3.742': attribute type 1 has an invalid length. [ 548.700497][ T9276] 8021q: adding VLAN 0 to HW filter on device bond2 [ 548.964492][ T9038] team0: Port device team_slave_0 added [ 549.459567][ T9038] team0: Port device team_slave_1 added [ 551.262655][ T9038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.262671][ T9038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.262692][ T9038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.349684][ T8729] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 551.378001][ T9314] netlink: 'syz.1.750': attribute type 1 has an invalid length. [ 551.458253][ T8729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 551.646182][ T9038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.646195][ T9038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.646216][ T9038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.749638][ T9314] 8021q: adding VLAN 0 to HW filter on device bond2 [ 551.796142][ T8729] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 551.819506][ T8729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 551.843589][ T8729] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 551.888911][ T8729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 552.005294][ T1144] bridge_slave_1: left allmulticast mode [ 552.005332][ T1144] bridge_slave_1: left promiscuous mode [ 552.005609][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.165192][ T1144] bridge_slave_0: left allmulticast mode [ 553.165230][ T1144] bridge_slave_0: left promiscuous mode [ 553.165420][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.635804][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.735954][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.796936][ T1144] bond0 (unregistering): Released all slaves [ 553.879206][ T8729] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 553.926758][ T8729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 554.519817][ T9038] hsr_slave_0: entered promiscuous mode [ 554.538864][ T9038] hsr_slave_1: entered promiscuous mode [ 554.544166][ T9038] debugfs: 'hsr0' already exists in 'hsr' [ 554.544196][ T9038] Cannot create hsr debugfs directory [ 554.969779][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 554.974651][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 554.993416][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 555.029704][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 555.030702][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 555.083397][ T9346] netlink: 36 bytes leftover after parsing attributes in process `syz.2.757'. [ 556.834095][ T9368] netlink: 132 bytes leftover after parsing attributes in process `syz.3.760'. [ 557.232531][ T5607] Bluetooth: hci2: command tx timeout [ 557.253364][ T1144] hsr_slave_0: left promiscuous mode [ 557.290227][ T1144] hsr_slave_1: left promiscuous mode [ 557.291263][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.066124][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.265083][ T5607] Bluetooth: hci2: command tx timeout [ 559.647576][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 559.696010][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 560.143035][ T9392] netlink: 36 bytes leftover after parsing attributes in process `syz.1.766'. [ 560.275380][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 560.426723][ T9401] netlink: 36 bytes leftover after parsing attributes in process `syz.2.769'. [ 561.541592][ T5607] Bluetooth: hci2: command tx timeout [ 561.773908][ T9408] netlink: 'syz.1.770': attribute type 3 has an invalid length. [ 561.774004][ T9408] netlink: 'syz.1.770': attribute type 3 has an invalid length. [ 561.774098][ T9408] netlink: 'syz.1.770': attribute type 3 has an invalid length. [ 561.774153][ T9408] netlink: 'syz.1.770': attribute type 3 has an invalid length. [ 561.774196][ T9408] netlink: 'syz.1.770': attribute type 3 has an invalid length. [ 561.774239][ T9408] netlink: 'syz.1.770': attribute type 3 has an invalid length. [ 561.774282][ T9408] netlink: 'syz.1.770': attribute type 3 has an invalid length. [ 561.774324][ T9408] netlink: 'syz.1.770': attribute type 3 has an invalid length. [ 561.774367][ T9408] netlink: 'syz.1.770': attribute type 3 has an invalid length. [ 561.774410][ T9408] netlink: 'syz.1.770': attribute type 3 has an invalid length. [ 561.842140][ T9408] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.770'. [ 561.842162][ T9408] openvswitch: netlink: Message has 512 unknown bytes. [ 563.137106][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.137182][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.603306][ T5607] Bluetooth: hci2: command tx timeout [ 570.112726][ T9469] NILFS (nullb0): couldn't find nilfs on the device [ 574.189391][ T9507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.794'. [ 574.189431][ T9507] openvswitch: netlink: Flow key attr not present in new flow. [ 579.831825][ T9342] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.832101][ T9342] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.842937][ T9342] bridge_slave_0: entered allmulticast mode [ 579.872078][ T9342] bridge_slave_0: entered promiscuous mode [ 579.909555][ T9342] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.909641][ T9342] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.909827][ T9342] bridge_slave_1: entered allmulticast mode [ 579.963871][ T9342] bridge_slave_1: entered promiscuous mode [ 581.078264][ T9342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.125715][ T9342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.500391][ T9342] team0: Port device team_slave_0 added [ 583.510614][ T9342] team0: Port device team_slave_1 added [ 583.818718][ T9342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.818736][ T9342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.818768][ T9342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.822950][ T9342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.822968][ T9342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.823030][ T9342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.671574][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 584.676239][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 584.680700][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 584.687814][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 585.515861][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 585.946685][ T9342] hsr_slave_0: entered promiscuous mode [ 585.948235][ T9342] hsr_slave_1: entered promiscuous mode [ 585.949172][ T9342] debugfs: 'hsr0' already exists in 'hsr' [ 585.949197][ T9342] Cannot create hsr debugfs directory [ 587.805298][ T5607] Bluetooth: hci4: command tx timeout [ 589.228414][ T1144] bridge_slave_1: left allmulticast mode [ 589.228451][ T1144] bridge_slave_1: left promiscuous mode [ 589.228735][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.414123][ T1144] bridge_slave_0: left allmulticast mode [ 589.414162][ T1144] bridge_slave_0: left promiscuous mode [ 589.414436][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.831339][ T5607] Bluetooth: hci4: command tx timeout [ 590.296023][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.255917][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.528860][ T1144] bond0 (unregistering): Released all slaves [ 591.761066][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 591.907198][ T5607] Bluetooth: hci4: command tx timeout [ 593.985040][ T5607] Bluetooth: hci4: command tx timeout [ 594.305703][ T1144] hsr_slave_0: left promiscuous mode [ 595.168360][ T1144] hsr_slave_1: left promiscuous mode [ 595.172286][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.209584][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.387922][ T9708] vivid-004: ================= START STATUS ================= [ 596.387940][ T9708] vivid-004: Radio HW Seek Mode: Bounded [ 596.387958][ T9708] vivid-004: Radio Programmable HW Seek: false [ 596.387972][ T9708] vivid-004: RDS Rx I/O Mode: Block I/O [ 596.387985][ T9708] vivid-004: Generate RBDS Instead of RDS: false [ 596.388000][ T9708] vivid-004: RDS Reception: true [ 596.388012][ T9708] vivid-004: RDS Program Type: 0 inactive [ 596.388030][ T9708] vivid-004: RDS PS Name: inactive [ 596.388046][ T9708] vivid-004: RDS Radio Text: inactive [ 596.388063][ T9708] vivid-004: RDS Traffic Announcement: false inactive [ 596.388079][ T9708] vivid-004: RDS Traffic Program: false inactive [ 596.388096][ T9708] vivid-004: RDS Music: false inactive [ 596.388113][ T9708] vivid-004: ================== END STATUS ================== [ 596.688128][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 596.759182][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 597.563946][ T9722] validate_nla: 37 callbacks suppressed [ 597.563962][ T9722] netlink: 'syz.3.841': attribute type 8 has an invalid length. [ 598.358501][ T9741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.847'. [ 599.871256][ T9775] NILFS (nullb0): couldn't find nilfs on the device [ 601.280557][ T9608] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.283260][ T9608] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.283486][ T9608] bridge_slave_0: entered allmulticast mode [ 601.337036][ T9608] bridge_slave_0: entered promiscuous mode [ 601.585268][ T9792] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 601.585925][ T9792] cramfs: wrong magic [ 601.734378][ T9794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.861'. [ 601.762786][ T9608] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.762886][ T9608] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.763078][ T9608] bridge_slave_1: entered allmulticast mode [ 601.802032][ T9608] bridge_slave_1: entered promiscuous mode [ 604.097961][ T9608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.520628][ T9608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.830295][ T9822] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 604.838372][ T9822] cramfs: wrong magic [ 606.024690][ T9608] team0: Port device team_slave_0 added [ 606.516852][ T9342] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 606.567641][ T9342] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 606.898328][ T9608] team0: Port device team_slave_1 added [ 606.915203][ T9342] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 606.957860][ T9342] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 607.145441][ T9342] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 608.201012][ T9342] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 608.384389][ T9342] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 608.413278][ T9342] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 608.423650][ T9608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.423669][ T9608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.423702][ T9608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.593199][ T9608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.593219][ T9608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.593251][ T9608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.900043][ T9608] hsr_slave_0: entered promiscuous mode [ 608.901398][ T9608] hsr_slave_1: entered promiscuous mode [ 608.902312][ T9608] debugfs: 'hsr0' already exists in 'hsr' [ 608.902336][ T9608] Cannot create hsr debugfs directory [ 611.136733][ T1144] bridge_slave_1: left allmulticast mode [ 611.136777][ T1144] bridge_slave_1: left promiscuous mode [ 611.137062][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.351445][ T1144] bridge_slave_0: left allmulticast mode [ 611.351477][ T1144] bridge_slave_0: left promiscuous mode [ 611.351724][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.156013][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.276020][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.360168][ T1144] bond0 (unregistering): Released all slaves [ 614.107143][ T1144] hsr_slave_0: left promiscuous mode [ 614.146348][ T1144] hsr_slave_1: left promiscuous mode [ 614.147201][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.186654][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.627140][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 614.687086][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 615.589534][ T9930] NILFS (nullb0): couldn't find nilfs on the device [ 616.342819][ T9928] netlink: 'syz.1.884': attribute type 2 has an invalid length. [ 616.342843][ T9928] netlink: 232 bytes leftover after parsing attributes in process `syz.1.884'. [ 616.580628][ T9934] 8021q: adding VLAN 0 to HW filter on device bond3 [ 616.912863][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 616.965317][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 616.971988][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 616.982359][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 616.988617][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 618.866314][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.891'. [ 619.347334][ T5607] Bluetooth: hci5: command tx timeout [ 619.967998][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 620.262531][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 620.721973][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.737019][ T31] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 620.737053][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.737089][ T31] usb 4-1: Product: syz [ 620.737105][ T31] usb 4-1: Manufacturer: syz [ 620.737121][ T31] usb 4-1: SerialNumber: syz [ 620.788935][ T31] usb 4-1: config 0 descriptor?? [ 620.898588][ T31] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 621.012665][ T9993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.898'. [ 621.138362][ T31] usb 4-1: USB disconnect, device number 6 [ 621.425671][ T5607] Bluetooth: hci5: command tx timeout [ 623.505090][ T5607] Bluetooth: hci5: command tx timeout [ 623.763915][T10038] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.906'. [ 623.763937][T10038] openvswitch: netlink: Message has 512 unknown bytes. [ 624.157913][ T9608] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 624.243055][ T9608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 624.243456][T10037] netlink: 'syz.2.906': attribute type 3 has an invalid length. [ 624.243645][T10037] netlink: 'syz.2.906': attribute type 3 has an invalid length. [ 624.243694][T10037] netlink: 'syz.2.906': attribute type 3 has an invalid length. [ 624.243739][T10037] netlink: 'syz.2.906': attribute type 3 has an invalid length. [ 624.243782][T10037] netlink: 'syz.2.906': attribute type 3 has an invalid length. [ 624.243832][T10037] netlink: 'syz.2.906': attribute type 3 has an invalid length. [ 624.243881][T10037] netlink: 'syz.2.906': attribute type 3 has an invalid length. [ 624.243924][T10037] netlink: 'syz.2.906': attribute type 3 has an invalid length. [ 624.243974][T10037] netlink: 'syz.2.906': attribute type 3 has an invalid length. [ 624.244018][T10037] netlink: 'syz.2.906': attribute type 3 has an invalid length. [ 624.386777][ T9608] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 624.561980][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.579956][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.237019][ T9608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 625.585121][ T5607] Bluetooth: hci5: command tx timeout [ 626.906586][ T9608] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 627.219478][ T9608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 627.365215][ T9608] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 627.425743][ T9608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 630.932766][ T9940] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.933007][ T9940] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.933237][ T9940] bridge_slave_0: entered allmulticast mode [ 630.961203][ T9940] bridge_slave_0: entered promiscuous mode [ 631.319678][ T9940] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.319837][ T9940] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.320161][ T9940] bridge_slave_1: entered allmulticast mode [ 631.327351][ T9940] bridge_slave_1: entered promiscuous mode [ 632.597019][ T9940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.638303][ T9608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.659244][ T9940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.775324][ T1144] bridge_slave_1: left allmulticast mode [ 632.775362][ T1144] bridge_slave_1: left promiscuous mode [ 632.775643][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.939831][ T1144] bridge_slave_0: left allmulticast mode [ 632.939871][ T1144] bridge_slave_0: left promiscuous mode [ 632.940132][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.508422][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.608875][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.646824][ T1144] bond0 (unregistering): Released all slaves [ 635.095593][ T9940] team0: Port device team_slave_0 added [ 635.192209][ T9940] team0: Port device team_slave_1 added [ 635.356536][ T9608] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.450373][ T9940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.450386][ T9940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.450407][ T9940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.559452][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.559676][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.563233][ T9940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.563250][ T9940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.563288][ T9940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.885090][ T1144] hsr_slave_0: left promiscuous mode [ 635.935152][ T1144] hsr_slave_1: left promiscuous mode [ 635.936182][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.998528][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.315900][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 637.413957][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 638.127814][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.945'. [ 638.127840][T10177] openvswitch: netlink: Flow key attr not present in new flow. [ 638.187091][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 638.198467][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.200167][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.622593][ T9940] hsr_slave_0: entered promiscuous mode [ 638.636410][ T9940] hsr_slave_1: entered promiscuous mode [ 638.650298][ T9940] debugfs: 'hsr0' already exists in 'hsr' [ 638.650328][ T9940] Cannot create hsr debugfs directory [ 638.863512][T10185] NILFS (nullb0): couldn't find nilfs on the device [ 644.830937][T10233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.955'. [ 644.830965][T10233] openvswitch: netlink: Flow key attr not present in new flow. [ 644.878618][ T5259] 8021q: adding VLAN 0 to HW filter on device eth10 [ 646.669641][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 647.085438][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 647.658143][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 647.679875][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 647.680937][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 649.746494][ T5611] Bluetooth: hci2: command tx timeout [ 649.760414][T10270] tipc: Enabling of bearer rejected, failed to enable media [ 649.920093][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.965'. [ 649.920121][T10281] openvswitch: netlink: Flow key attr not present in new flow. [ 651.825073][ T5611] Bluetooth: hci2: command tx timeout [ 654.590142][ T5611] Bluetooth: hci2: command tx timeout [ 654.660525][T10319] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.974'. [ 654.660549][T10319] openvswitch: netlink: Message has 512 unknown bytes. [ 655.092061][T10318] validate_nla: 37 callbacks suppressed [ 655.092076][T10318] netlink: 'syz.1.974': attribute type 3 has an invalid length. [ 655.092146][T10318] netlink: 'syz.1.974': attribute type 3 has an invalid length. [ 655.092189][T10318] netlink: 'syz.1.974': attribute type 3 has an invalid length. [ 655.092232][T10318] netlink: 'syz.1.974': attribute type 3 has an invalid length. [ 655.093290][T10318] netlink: 'syz.1.974': attribute type 3 has an invalid length. [ 655.093352][T10318] netlink: 'syz.1.974': attribute type 3 has an invalid length. [ 655.093395][T10318] netlink: 'syz.1.974': attribute type 3 has an invalid length. [ 655.093437][T10318] netlink: 'syz.1.974': attribute type 3 has an invalid length. [ 655.093479][T10318] netlink: 'syz.1.974': attribute type 3 has an invalid length. [ 655.093524][T10318] netlink: 'syz.1.974': attribute type 3 has an invalid length. [ 655.198764][T10321] tipc: Enabling of bearer rejected, failed to enable media [ 655.223543][T10324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.976'. [ 656.771318][ T5611] Bluetooth: hci2: command tx timeout [ 658.457318][ T9940] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 658.768153][ T9940] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 658.839857][T10372] tipc: Enabling of bearer rejected, failed to enable media [ 659.079578][T10382] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 659.174868][T10383] netlink: 52 bytes leftover after parsing attributes in process `syz.2.987'. [ 659.582009][T10382] cramfs: wrong magic [ 660.075604][T10389] netlink: 232 bytes leftover after parsing attributes in process `syz.1.989'. [ 660.194444][T10392] netlink: 36 bytes leftover after parsing attributes in process `syz.3.990'. [ 660.307569][ T9940] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 660.383327][ T9940] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 660.424496][ T9940] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 660.516582][ T9940] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 660.573077][ T9940] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 660.670867][ T9940] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 660.896462][T10405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.993'. [ 662.575637][T10426] validate_nla: 38 callbacks suppressed [ 662.575658][T10426] netlink: 'syz.3.997': attribute type 2 has an invalid length. [ 662.575674][T10426] netlink: 232 bytes leftover after parsing attributes in process `syz.3.997'. [ 663.694735][T10437] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 663.724525][T10437] cramfs: wrong magic [ 663.869510][T10440] netlink: 52 bytes leftover after parsing attributes in process `syz.1.999'. [ 667.497471][T10468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1007'. [ 668.135564][ T57] bridge_slave_1: left allmulticast mode [ 668.135604][ T57] bridge_slave_1: left promiscuous mode [ 668.136065][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.352584][T10487] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 668.372622][T10487] cramfs: wrong magic [ 668.393212][T10487] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1010'. [ 668.752569][ T57] bridge_slave_0: left allmulticast mode [ 668.752605][ T57] bridge_slave_0: left promiscuous mode [ 668.777709][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.807465][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 670.885961][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.107582][ T57] bond0 (unregistering): Released all slaves [ 672.318131][T10515] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1018'. [ 672.952448][T10528] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1022'. [ 672.952469][T10528] openvswitch: netlink: Message has 512 unknown bytes. [ 672.980220][ T57] hsr_slave_0: left promiscuous mode [ 673.015264][ T57] hsr_slave_1: left promiscuous mode [ 673.018512][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.067832][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.769113][T10539] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 674.789381][T10539] cramfs: wrong magic [ 674.810656][T10539] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1026'. [ 676.373733][T10545] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1028'. [ 676.437115][ T57] team0 (unregistering): Port device team_slave_1 removed [ 676.532050][ T57] team0 (unregistering): Port device team_slave_0 removed [ 676.549859][ T5607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 676.596982][ T5607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 676.609559][ T5607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 676.627210][ T5607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 676.642963][ T5607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 677.061083][T10527] netlink: 'syz.1.1022': attribute type 3 has an invalid length. [ 677.061167][T10527] netlink: 'syz.1.1022': attribute type 3 has an invalid length. [ 677.061213][T10527] netlink: 'syz.1.1022': attribute type 3 has an invalid length. [ 677.061256][T10527] netlink: 'syz.1.1022': attribute type 3 has an invalid length. [ 677.061298][T10527] netlink: 'syz.1.1022': attribute type 3 has an invalid length. [ 677.061341][T10527] netlink: 'syz.1.1022': attribute type 3 has an invalid length. [ 677.061384][T10527] netlink: 'syz.1.1022': attribute type 3 has an invalid length. [ 677.061426][T10527] netlink: 'syz.1.1022': attribute type 3 has an invalid length. [ 677.061468][T10527] netlink: 'syz.1.1022': attribute type 3 has an invalid length. [ 677.061510][T10527] netlink: 'syz.1.1022': attribute type 3 has an invalid length. [ 677.462231][T10561] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1031'. [ 677.721217][T10249] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.721367][T10249] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.721626][T10249] bridge_slave_0: entered allmulticast mode [ 677.759414][T10249] bridge_slave_0: entered promiscuous mode [ 677.810514][T10249] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.813771][T10249] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.814015][T10249] bridge_slave_1: entered allmulticast mode [ 677.850489][T10249] bridge_slave_1: entered promiscuous mode [ 678.241558][T10249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.345077][T10249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.407074][T10577] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1036'. [ 678.667852][T10249] team0: Port device team_slave_0 added [ 678.691454][T10249] team0: Port device team_slave_1 added [ 679.022690][ T5607] Bluetooth: hci4: command tx timeout [ 681.030778][ T5607] Bluetooth: hci4: command tx timeout [ 681.300581][T10606] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 681.334126][T10606] cramfs: wrong magic [ 681.448173][T10606] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1040'. [ 682.371868][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 682.396869][T10249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.396888][T10249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.396919][T10249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.597825][T10249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.597845][T10249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.597877][T10249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.749876][T10620] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1046'. [ 683.514732][ T5607] Bluetooth: hci4: command tx timeout [ 684.996460][T10249] hsr_slave_0: entered promiscuous mode [ 684.998044][T10249] hsr_slave_1: entered promiscuous mode [ 684.999031][T10249] debugfs: 'hsr0' already exists in 'hsr' [ 684.999057][T10249] Cannot create hsr debugfs directory [ 685.585093][ T5607] Bluetooth: hci4: command tx timeout [ 685.653897][T10655] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1058'. [ 685.990551][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.990633][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.495269][ T5259] 8021q: adding VLAN 0 to HW filter on device eth10 [ 689.172527][T10700] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1071'. [ 690.298655][T10708] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1073'. [ 691.161329][T10726] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1080'. [ 695.845118][T10547] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.845248][T10547] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.845484][T10547] bridge_slave_0: entered allmulticast mode [ 695.855492][T10547] bridge_slave_0: entered promiscuous mode [ 695.898722][T10547] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.898983][T10547] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.899248][T10547] bridge_slave_1: entered allmulticast mode [ 695.902244][T10547] bridge_slave_1: entered promiscuous mode [ 696.135271][T10776] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1090'. [ 698.592254][T10793] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1094'. [ 699.014044][T10547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.043198][T10547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.402678][T10814] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1100'. [ 700.499001][T10816] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1101'. [ 700.499038][T10816] openvswitch: netlink: Flow key attr not present in new flow. [ 701.837805][T10547] team0: Port device team_slave_0 added [ 702.096202][T10547] team0: Port device team_slave_1 added [ 702.503764][T10547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.503784][T10547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.503817][T10547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.601779][T10547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.601808][T10547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.601840][T10547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.689850][ T57] bridge_slave_1: left allmulticast mode [ 703.689883][ T57] bridge_slave_1: left promiscuous mode [ 703.691441][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.766756][T10855] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1111'. [ 704.044973][ T57] bridge_slave_0: left allmulticast mode [ 704.045026][ T57] bridge_slave_0: left promiscuous mode [ 704.045308][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.130686][T10863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1114'. [ 704.130715][T10863] openvswitch: netlink: Flow key attr not present in new flow. [ 706.651221][T10882] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1116'. [ 707.395795][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.475759][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.557092][ T57] bond0 (unregistering): Released all slaves [ 707.608831][T10547] hsr_slave_0: entered promiscuous mode [ 707.613486][T10547] hsr_slave_1: entered promiscuous mode [ 707.630598][T10547] debugfs: 'hsr0' already exists in 'hsr' [ 707.630629][T10547] Cannot create hsr debugfs directory [ 707.843358][T10900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1120'. [ 708.845362][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 708.882473][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 708.887783][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 708.920286][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 708.957156][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 709.625081][ T57] hsr_slave_0: left promiscuous mode [ 709.645152][ T57] hsr_slave_1: left promiscuous mode [ 709.646200][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.804012][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.900063][T10931] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1124'. [ 710.900092][T10931] openvswitch: netlink: Flow key attr not present in new flow. [ 711.146418][ T5607] Bluetooth: hci5: command tx timeout [ 712.816055][ T57] team0 (unregistering): Port device team_slave_1 removed [ 712.891030][ T57] team0 (unregistering): Port device team_slave_0 removed [ 713.185087][ T5607] Bluetooth: hci5: command tx timeout [ 713.340706][ T5259] 8021q: adding VLAN 0 to HW filter on device eth10 [ 715.457299][ T5607] Bluetooth: hci5: command tx timeout [ 716.924647][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'. [ 716.924672][T10985] openvswitch: netlink: Flow key attr not present in new flow. [ 717.550547][ T5607] Bluetooth: hci5: command tx timeout [ 731.795205][T10909] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.795350][T10909] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.795596][T10909] bridge_slave_0: entered allmulticast mode [ 731.841669][T10909] bridge_slave_0: entered promiscuous mode [ 731.893569][T10909] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.893761][T10909] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.893985][T10909] bridge_slave_1: entered allmulticast mode [ 731.929170][T10909] bridge_slave_1: entered promiscuous mode [ 732.808924][T10909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.067321][T11120] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 733.129283][T10909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.833091][T10909] team0: Port device team_slave_0 added [ 734.846954][T10909] team0: Port device team_slave_1 added [ 734.968861][T10909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.968881][T10909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.968919][T10909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.973827][T10909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.973844][T10909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.973876][T10909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.685404][T10909] hsr_slave_0: entered promiscuous mode [ 735.689595][T10909] hsr_slave_1: entered promiscuous mode [ 735.690629][T10909] debugfs: 'hsr0' already exists in 'hsr' [ 735.690655][T10909] Cannot create hsr debugfs directory [ 737.550419][T11179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 737.595492][ T57] bridge_slave_1: left allmulticast mode [ 737.595531][ T57] bridge_slave_1: left promiscuous mode [ 737.595806][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.630966][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1178'. [ 737.848784][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 737.879086][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 737.897342][ T57] bridge_slave_0: left allmulticast mode [ 737.897380][ T57] bridge_slave_0: left promiscuous mode [ 737.897677][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.913206][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 738.012633][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 738.030223][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 739.585885][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.646646][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.686927][ T57] bond0 (unregistering): Released all slaves [ 739.777744][T11182] veth0: entered promiscuous mode [ 740.152781][ T5607] Bluetooth: hci2: command tx timeout [ 741.787738][ T57] hsr_slave_0: left promiscuous mode [ 741.835108][ T57] hsr_slave_1: left promiscuous mode [ 741.836146][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.890466][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.547406][ T5607] Bluetooth: hci2: command tx timeout [ 744.625251][ T5607] Bluetooth: hci2: command tx timeout [ 745.916927][ T57] team0 (unregistering): Port device team_slave_1 removed [ 746.812443][ T5607] Bluetooth: hci2: command tx timeout [ 746.917235][ T57] team0 (unregistering): Port device team_slave_0 removed [ 747.440844][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.440917][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.841052][T11280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1207'. [ 750.830614][T11306] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 750.831329][T11306] cramfs: wrong magic [ 753.082323][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 755.134082][T11343] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1217'. [ 758.315221][T11188] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.315354][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.315607][T11188] bridge_slave_0: entered allmulticast mode [ 758.329141][T11188] bridge_slave_0: entered promiscuous mode [ 758.375901][T11188] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.376032][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.378979][T11188] bridge_slave_1: entered allmulticast mode [ 758.417376][T11188] bridge_slave_1: entered promiscuous mode [ 758.558221][T11379] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 758.558884][T11379] cramfs: wrong magic [ 759.013293][T11188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.050983][T11188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.728982][T11188] team0: Port device team_slave_0 added [ 761.096334][T11188] team0: Port device team_slave_1 added [ 763.055166][T11414] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 763.055818][T11414] cramfs: wrong magic [ 763.634778][T11188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.634798][T11188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.634829][T11188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.909521][T11188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.909540][T11188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.909564][T11188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 768.501463][T11188] hsr_slave_0: entered promiscuous mode [ 768.502911][T11188] hsr_slave_1: entered promiscuous mode [ 768.503921][T11188] debugfs: 'hsr0' already exists in 'hsr' [ 768.503962][T11188] Cannot create hsr debugfs directory [ 770.829653][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 770.921608][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 770.924015][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 770.966107][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 770.967057][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 773.721406][ T5611] Bluetooth: hci4: command tx timeout [ 773.980611][ T57] bridge_slave_1: left allmulticast mode [ 773.980651][ T57] bridge_slave_1: left promiscuous mode [ 773.980956][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.198225][ T57] bridge_slave_0: left allmulticast mode [ 774.198264][ T57] bridge_slave_0: left promiscuous mode [ 774.198545][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.541530][T11525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1261'. [ 774.541556][T11525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1261'. [ 775.145869][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 775.255851][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.329431][ T57] bond0 (unregistering): Released all slaves [ 775.395840][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 775.752027][ T5611] Bluetooth: hci4: command tx timeout [ 778.063029][ T5611] Bluetooth: hci4: command tx timeout [ 779.117281][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'. [ 779.494116][T11586] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 779.558810][T11587] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1275'. [ 779.564208][T11586] cramfs: wrong magic [ 780.065834][ T5611] Bluetooth: hci4: command tx timeout [ 781.518448][ T57] hsr_slave_0: left promiscuous mode [ 781.747306][ T57] hsr_slave_1: left promiscuous mode [ 781.748335][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.797373][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.985852][ T57] team0 (unregistering): Port device team_slave_1 removed [ 784.120148][ T57] team0 (unregistering): Port device team_slave_0 removed [ 789.380665][T11688] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1306'. [ 789.456831][T11693] validate_nla: 37 callbacks suppressed [ 789.456855][T11693] netlink: 'syz.1.1305': attribute type 1 has an invalid length. [ 789.577556][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1305'. [ 789.618307][T11691] veth0: entered promiscuous mode [ 792.983484][T11482] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.984248][T11482] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.984503][T11482] bridge_slave_0: entered allmulticast mode [ 793.011776][T11482] bridge_slave_0: entered promiscuous mode [ 793.022079][T11482] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.022320][T11482] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.022558][T11482] bridge_slave_1: entered allmulticast mode [ 793.047219][T11482] bridge_slave_1: entered promiscuous mode [ 793.133806][T11482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.129546][T11482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.771370][T11782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1317'. [ 794.883952][T11482] team0: Port device team_slave_0 added [ 794.915682][T11482] team0: Port device team_slave_1 added [ 795.431424][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1319'. [ 797.353908][T11482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.353926][T11482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.353959][T11482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.286058][T11482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.286077][T11482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.286109][T11482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.755276][T11482] hsr_slave_0: entered promiscuous mode [ 798.756555][T11482] hsr_slave_1: entered promiscuous mode [ 798.759037][T11482] debugfs: 'hsr0' already exists in 'hsr' [ 798.759056][T11482] Cannot create hsr debugfs directory [ 799.618469][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 799.676085][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 799.696358][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 799.700321][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 799.732927][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 801.986142][ T5611] Bluetooth: hci5: command tx timeout [ 804.189610][ T5611] Bluetooth: hci5: command tx timeout [ 805.178452][ T57] bridge_slave_1: left allmulticast mode [ 805.178490][ T57] bridge_slave_1: left promiscuous mode [ 805.178757][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.512034][ T57] bridge_slave_0: left allmulticast mode [ 805.512071][ T57] bridge_slave_0: left promiscuous mode [ 805.512335][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.243063][ T5611] Bluetooth: hci5: command tx timeout [ 807.424998][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 807.533139][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 807.628326][ T57] bond0 (unregistering): Released all slaves [ 807.723436][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 808.293964][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 808.339570][ T5611] Bluetooth: hci5: command tx timeout [ 808.997504][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.997578][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.586256][ T57] hsr_slave_0: left promiscuous mode [ 809.618046][ T57] hsr_slave_1: left promiscuous mode [ 809.620510][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.663154][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.872188][T11957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1351'. [ 810.231427][T11972] netlink: 'syz.2.1353': attribute type 1 has an invalid length. [ 810.437586][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1353'. [ 810.667483][ T57] team0 (unregistering): Port device team_slave_1 removed [ 810.766660][ T57] team0 (unregistering): Port device team_slave_0 removed [ 812.442274][ T5259] 8021q: adding VLAN 0 to HW filter on device eth11 [ 820.346637][T11840] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.346816][T11840] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.347052][T11840] bridge_slave_0: entered allmulticast mode [ 820.366511][T11840] bridge_slave_0: entered promiscuous mode [ 820.374593][T11840] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.374752][T11840] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.416569][T11840] bridge_slave_1: entered allmulticast mode [ 820.434605][T11840] bridge_slave_1: entered promiscuous mode [ 820.794511][T11840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.813406][T11840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.633904][T11840] team0: Port device team_slave_0 added [ 822.692246][T11840] team0: Port device team_slave_1 added [ 822.962993][T11840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.963013][T11840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.963052][T11840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.261855][T11840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.261873][T11840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.261904][T11840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.550341][T11840] hsr_slave_0: entered promiscuous mode [ 823.551933][T11840] hsr_slave_1: entered promiscuous mode [ 823.553024][T11840] debugfs: 'hsr0' already exists in 'hsr' [ 823.553064][T11840] Cannot create hsr debugfs directory [ 824.648421][T11482] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 824.766541][T11482] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 824.947547][T11482] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 825.785932][T11482] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 825.916028][T11482] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 826.008889][T11482] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 826.043565][T11482] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 826.081251][T12116] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1377'. [ 826.148621][T11482] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 832.001607][ T57] bridge_slave_1: left allmulticast mode [ 832.001645][ T57] bridge_slave_1: left promiscuous mode [ 832.001913][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.161385][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 833.201916][ T5607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 833.221244][ T5607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 833.222838][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 833.265213][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 833.537492][ T57] bridge_slave_0: left allmulticast mode [ 833.537531][ T57] bridge_slave_0: left promiscuous mode [ 833.537814][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.268878][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.629805][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.360137][ T5611] Bluetooth: hci2: command tx timeout [ 835.602379][ T57] bond0 (unregistering): Released all slaves [ 835.846837][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1393'. [ 837.457238][ T5611] Bluetooth: hci2: command tx timeout [ 838.470263][ T5729] Process accounting resumed [ 838.599692][ T57] hsr_slave_0: left promiscuous mode [ 838.667960][ T57] hsr_slave_1: left promiscuous mode [ 838.668985][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.911417][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.926756][ T5611] Bluetooth: hci2: command tx timeout [ 840.336551][ T57] team0 (unregistering): Port device team_slave_1 removed [ 840.395901][ T57] team0 (unregistering): Port device team_slave_0 removed [ 841.985674][ T5611] Bluetooth: hci2: command tx timeout [ 843.773912][T12268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1407'. [ 844.949727][T12278] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 847.567349][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1413'. [ 848.457498][T12314] netlink: 'syz.3.1416': attribute type 1 has an invalid length. [ 848.631030][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1416'. [ 850.482808][T12313] veth0: entered promiscuous mode [ 850.575621][T12313] veth0: left promiscuous mode [ 850.623133][T12180] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.627327][T12180] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.638680][T12180] bridge_slave_0: entered allmulticast mode [ 850.664564][T12180] bridge_slave_0: entered promiscuous mode [ 851.033186][T12352] netlink: 'syz.3.1417': attribute type 8 has an invalid length. [ 852.037543][T12180] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.037688][T12180] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.037923][T12180] bridge_slave_1: entered allmulticast mode [ 852.042863][T12180] bridge_slave_1: entered promiscuous mode [ 853.738882][T12366] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 854.058769][T12180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.613653][T12180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.613861][T11840] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 856.686789][T11840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 856.837618][T11840] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 856.868754][T11840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 856.931682][T11840] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 856.982705][T11840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 856.998500][T12180] team0: Port device team_slave_0 added [ 857.416831][T11840] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 857.498544][T11840] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 857.517807][T12180] team0: Port device team_slave_1 added [ 859.702970][T12380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 859.723687][T12380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.017124][T12399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1428'. [ 861.093527][ T5607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 861.148061][ T5607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 861.149894][ T5607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 861.169666][ T5607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 861.192995][ T5607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 861.404774][T12380] batman_adv: batadv0: Interface deactivated: gretap1 [ 861.549498][ T5611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 861.592106][ T5611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 861.600069][ T5611] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 861.607817][ T5611] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 861.610018][ T5611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 861.839619][T11840] kthread_run failed with err -4 [ 861.942398][ T1060] netdevsim netdevsim3 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.063394][T12417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 862.223916][ T1060] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.233464][ T1060] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.233621][ T1060] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.267602][T12180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.267621][T12180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.267661][T12180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.379652][T12180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.379670][T12180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.379880][T12180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.877030][T12180] hsr_slave_0: entered promiscuous mode [ 862.882240][T12180] hsr_slave_1: entered promiscuous mode [ 862.883259][T12180] debugfs: 'hsr0' already exists in 'hsr' [ 862.883284][T12180] Cannot create hsr debugfs directory [ 863.265222][ T5607] Bluetooth: hci4: command tx timeout [ 863.813215][ T5611] Bluetooth: hci6: command tx timeout [ 865.545224][ T5611] Bluetooth: hci4: command tx timeout [ 865.905116][ T5611] Bluetooth: hci6: command tx timeout [ 867.844426][ T5611] Bluetooth: hci4: command tx timeout [ 868.165552][ T5611] Bluetooth: hci6: command tx timeout [ 868.991373][ T10] Process accounting resumed [ 869.907811][ T5611] Bluetooth: hci4: command tx timeout [ 870.229990][ T5611] Bluetooth: hci6: command tx timeout [ 870.309929][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.310004][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.554506][T12493] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input14 [ 870.700795][ T57] bridge_slave_1: left allmulticast mode [ 870.700832][ T57] bridge_slave_1: left promiscuous mode [ 870.701109][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.381198][T12502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1445'. [ 871.698632][ T57] bridge_slave_0: left allmulticast mode [ 871.698669][ T57] bridge_slave_0: left promiscuous mode [ 871.698947][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.244430][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1447'. [ 873.506686][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 873.585741][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 873.646846][ T57] bond0 (unregistering): Released all slaves [ 873.821097][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 873.822467][T12501] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 876.377847][ T57] hsr_slave_0: left promiscuous mode [ 876.424993][ T57] hsr_slave_1: left promiscuous mode [ 876.425811][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 876.495804][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 876.847012][ T57] team0 (unregistering): Port device team_slave_1 removed [ 876.898358][ T57] team0 (unregistering): Port device team_slave_0 removed [ 879.476289][T12408] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.478022][T12408] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.478269][T12408] bridge_slave_0: entered allmulticast mode [ 879.484198][T12408] bridge_slave_0: entered promiscuous mode [ 879.492641][T12408] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.492771][T12408] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.492975][T12408] bridge_slave_1: entered allmulticast mode [ 879.499247][T12408] bridge_slave_1: entered promiscuous mode [ 880.748752][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1455'. [ 880.901127][T12567] netlink: 'syz.3.1457': attribute type 1 has an invalid length. [ 880.930937][T12408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.996380][T12408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.996959][T12566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1457'. [ 881.688990][T12397] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.689143][T12397] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.689355][T12397] bridge_slave_0: entered allmulticast mode [ 881.692736][T12397] bridge_slave_0: entered promiscuous mode [ 881.834428][T12408] team0: Port device team_slave_0 added [ 881.850590][T12397] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.850810][T12397] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.986618][T12397] bridge_slave_1: entered allmulticast mode [ 882.031299][T12397] bridge_slave_1: entered promiscuous mode [ 882.049435][T12408] team0: Port device team_slave_1 added [ 882.566970][T12397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.569101][T12408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.569117][T12408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.569150][T12408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.644208][T12397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.655318][T12408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.655336][T12408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.655369][T12408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.816597][T12397] team0: Port device team_slave_0 added [ 884.477926][T12397] team0: Port device team_slave_1 added [ 884.969805][T12408] hsr_slave_0: entered promiscuous mode [ 884.972803][T12408] hsr_slave_1: entered promiscuous mode [ 884.973812][T12408] debugfs: 'hsr0' already exists in 'hsr' [ 884.973835][T12408] Cannot create hsr debugfs directory [ 885.166037][T12397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 885.166053][T12397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.166076][T12397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.231363][T12397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.231381][T12397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.231413][T12397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.497614][T12397] hsr_slave_0: entered promiscuous mode [ 885.499018][T12397] hsr_slave_1: entered promiscuous mode [ 885.499957][T12397] debugfs: 'hsr0' already exists in 'hsr' [ 885.499984][T12397] Cannot create hsr debugfs directory [ 885.702975][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1468'. [ 886.562677][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1471'. [ 887.048330][T12648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1474'. [ 887.669371][T12180] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 887.707808][T12180] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 887.770021][T12180] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 887.811301][T12180] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 888.011978][T12661] NILFS (nullb0): couldn't find nilfs on the device [ 888.252268][T12667] netlink: 'syz.2.1479': attribute type 8 has an invalid length. [ 888.294719][T12180] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 888.328736][T12180] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 888.382481][T12180] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 888.443244][T12180] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 889.354678][T12408] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 889.390246][T12408] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 889.492370][T12408] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 889.523667][T12408] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 889.636216][T12408] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 889.674190][T12408] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 889.693786][T12408] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 889.774245][T12408] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 889.907947][ T57] bridge_slave_1: left allmulticast mode [ 889.907976][ T57] bridge_slave_1: left promiscuous mode [ 889.908168][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.058543][ T57] bridge_slave_0: left allmulticast mode [ 890.058572][ T57] bridge_slave_0: left promiscuous mode [ 890.058779][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.450913][T12704] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1489'. [ 890.746859][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 890.858403][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 890.917729][ T57] bond0 (unregistering): Released all slaves [ 891.846603][ T57] hsr_slave_0: left promiscuous mode [ 891.889365][ T57] hsr_slave_1: left promiscuous mode [ 891.890156][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 891.940784][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.550639][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 892.637651][ T5607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 892.641255][ T5607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 892.761788][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 893.638329][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 895.353562][ T57] team0 (unregistering): Port device team_slave_1 removed [ 895.425807][ T57] team0 (unregistering): Port device team_slave_0 removed [ 896.267232][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 896.267750][T12738] ±ÿm: renamed from lo [ 896.941435][T12408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.243698][ T5607] Bluetooth: hci2: command tx timeout [ 898.103084][T12408] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.193245][ T1060] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.193383][ T1060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.352712][ T1060] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.352852][ T1060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.265077][ T5607] Bluetooth: hci2: command tx timeout [ 900.560913][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1508'. [ 901.353939][ T5607] Bluetooth: hci2: command tx timeout [ 903.425110][ T5607] Bluetooth: hci2: command tx timeout [ 903.793621][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1516'. [ 905.393291][T12877] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1521'. [ 905.550290][T12397] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 905.625713][T12397] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 905.760740][T12397] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 905.820682][T12397] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 906.113013][T12887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1523'. [ 906.357231][T12397] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 906.393119][T12397] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 906.463393][T12397] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 906.554392][T12397] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 907.127336][T12734] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.149776][T12734] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.150032][T12734] bridge_slave_0: entered allmulticast mode [ 907.251846][T12734] bridge_slave_0: entered promiscuous mode [ 907.403716][T12734] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.403863][T12734] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.404118][T12734] bridge_slave_1: entered allmulticast mode [ 907.447672][T12734] bridge_slave_1: entered promiscuous mode [ 907.800418][T12734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.841676][T12734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 908.158516][T12734] team0: Port device team_slave_0 added [ 908.178044][T12408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 908.271175][T12734] team0: Port device team_slave_1 added [ 908.568470][T12734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.568487][T12734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.568512][T12734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.685438][ T57] bridge_slave_1: left allmulticast mode [ 908.685467][ T57] bridge_slave_1: left promiscuous mode [ 908.685661][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.817287][ T57] bridge_slave_0: left allmulticast mode [ 908.817316][ T57] bridge_slave_0: left promiscuous mode [ 908.817509][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.516330][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 909.595709][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 909.656763][ T57] bond0 (unregistering): Released all slaves [ 909.678015][T12734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.678028][T12734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.678050][T12734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.215600][T12734] hsr_slave_0: entered promiscuous mode [ 910.220873][T12734] hsr_slave_1: entered promiscuous mode [ 910.221593][T12734] debugfs: 'hsr0' already exists in 'hsr' [ 910.221617][T12734] Cannot create hsr debugfs directory [ 910.445045][ T57] hsr_slave_0: left promiscuous mode [ 910.486222][ T57] hsr_slave_1: left promiscuous mode [ 910.496438][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.535720][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 911.214899][T12974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1542'. [ 911.255586][ T57] team0 (unregistering): Port device team_slave_1 removed [ 911.295668][ T57] team0 (unregistering): Port device team_slave_0 removed [ 912.421704][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 912.652170][T12408] veth0_vlan: entered promiscuous mode [ 912.666008][T12397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.844597][T12997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1545'. [ 913.244197][T12408] veth1_vlan: entered promiscuous mode [ 913.381842][T12397] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.497358][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.497915][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.876297][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.876512][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.057540][T12408] veth0_macvtap: entered promiscuous mode [ 914.598270][T12408] veth1_macvtap: entered promiscuous mode [ 914.804330][T12408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 914.986646][T12408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.120576][ T3437] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.713413][ T3437] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.739419][ T3437] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.854731][ T3437] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.466602][ T3407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.466627][ T3407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.382789][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.382811][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.412650][T12734] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 918.519012][T12734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 918.537579][T12734] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 918.602628][T12734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 918.609873][T12734] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 918.805151][T12734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 918.811333][T12734] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 918.893627][T12734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 918.969025][T12397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.184370][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1559'. [ 920.826478][T12734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 920.977366][T13078] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1561'. [ 921.088487][T12734] 8021q: adding VLAN 0 to HW filter on device team0 [ 921.181109][ T3407] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.191395][ T3407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.279153][ T1060] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.281600][ T1060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 922.689481][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 922.744496][ T5611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 922.757425][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 922.764314][T13099] netlink: 212332 bytes leftover after parsing attributes in process `syz.2.1565'. [ 922.764334][T13099] openvswitch: netlink: Message has 512 unknown bytes. [ 922.842591][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 922.862582][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 923.404461][T13097] netlink: 'syz.2.1565': attribute type 3 has an invalid length. [ 923.404559][T13097] netlink: 'syz.2.1565': attribute type 3 has an invalid length. [ 923.404607][T13097] netlink: 'syz.2.1565': attribute type 3 has an invalid length. [ 923.404653][T13097] netlink: 'syz.2.1565': attribute type 3 has an invalid length. [ 923.404698][T13097] netlink: 'syz.2.1565': attribute type 3 has an invalid length. [ 923.404744][T13097] netlink: 'syz.2.1565': attribute type 3 has an invalid length. [ 923.456544][T13097] netlink: 'syz.2.1565': attribute type 3 has an invalid length. [ 923.456606][T13097] netlink: 'syz.2.1565': attribute type 3 has an invalid length. [ 923.456652][T13097] netlink: 'syz.2.1565': attribute type 3 has an invalid length. [ 923.456699][T13097] netlink: 'syz.2.1565': attribute type 3 has an invalid length. [ 925.025889][ T5607] Bluetooth: hci3: command tx timeout [ 925.314294][T13127] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1572'. [ 925.925602][T12734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 926.777024][T13161] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 926.858954][T13162] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1581'. [ 926.931126][T13161] cramfs: wrong magic [ 927.108199][ T5607] Bluetooth: hci3: command tx timeout [ 927.153989][T13162] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.231500][T13162] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.436847][T13187] NILFS (nullb0): couldn't find nilfs on the device [ 929.201411][ T5607] Bluetooth: hci3: command tx timeout [ 929.232167][T13095] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.232298][T13095] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.232976][T13095] bridge_slave_0: entered allmulticast mode [ 929.278054][T13095] bridge_slave_0: entered promiscuous mode [ 929.383259][T13095] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.383516][T13095] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.383707][T13095] bridge_slave_1: entered allmulticast mode [ 929.415204][T13095] bridge_slave_1: entered promiscuous mode [ 929.611769][T13095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.929287][T13095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 929.952330][T13201] validate_nla: 34 callbacks suppressed [ 929.952350][T13201] netlink: 'syz.7.1594': attribute type 1 has an invalid length. [ 930.076712][T13204] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1594'. [ 930.201431][T13202] veth0: entered promiscuous mode [ 930.378062][T13095] team0: Port device team_slave_0 added [ 930.575796][ T1060] bridge_slave_1: left allmulticast mode [ 930.575833][ T1060] bridge_slave_1: left promiscuous mode [ 930.576157][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.757496][ T1060] bridge_slave_0: left allmulticast mode [ 930.757553][ T1060] bridge_slave_0: left promiscuous mode [ 930.757824][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.219519][T13239] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1597'. [ 931.268098][ T5607] Bluetooth: hci3: command tx timeout [ 931.758402][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.758452][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.035717][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 932.117399][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 932.137981][ T1060] bond0 (unregistering): Released all slaves [ 932.178705][T13095] team0: Port device team_slave_1 added [ 932.598522][T13095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.598542][T13095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.598573][T13095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.776282][ T1060] hsr_slave_0: left promiscuous mode [ 932.815156][ T1060] hsr_slave_1: left promiscuous mode [ 932.816205][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 932.855919][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 933.425696][ T1060] team0 (unregistering): Port device team_slave_1 removed [ 933.476276][ T1060] team0 (unregistering): Port device team_slave_0 removed [ 933.719518][T13095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 933.719537][T13095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.719569][T13095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 933.724132][T12734] veth0_vlan: entered promiscuous mode [ 933.965224][T13261] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1606'. [ 934.069057][T12734] veth1_vlan: entered promiscuous mode [ 934.113221][T13095] hsr_slave_0: entered promiscuous mode [ 934.121069][T13095] hsr_slave_1: entered promiscuous mode [ 934.122293][T13095] debugfs: 'hsr0' already exists in 'hsr' [ 934.122318][T13095] Cannot create hsr debugfs directory [ 934.532581][T13270] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 934.603496][T13270] cramfs: wrong magic [ 934.686457][T13271] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1607'. [ 936.112501][T13296] netlink: 'syz.2.1615': attribute type 1 has an invalid length. [ 936.155366][T12734] veth0_macvtap: entered promiscuous mode [ 936.858656][T13304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1615'. [ 937.254645][T12734] veth1_macvtap: entered promiscuous mode [ 937.404629][T12734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 937.497193][T12734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 937.544343][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.561203][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.742991][T13321] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 937.766924][T13321] cramfs: wrong magic [ 937.793772][T13321] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1619'. [ 938.919535][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.955025][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 940.026805][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.100626][ T6005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.100651][ T6005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.257179][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.257204][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.655448][T13378] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 943.688600][T13378] cramfs: wrong magic [ 943.726485][T13378] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1632'. [ 945.502726][T13406] NILFS (nullb0): couldn't find nilfs on the device [ 947.246449][T13427] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1646'. [ 950.630559][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1655'. [ 950.757093][T13469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1656'. [ 950.757120][T13469] openvswitch: netlink: Flow key attr not present in new flow. [ 951.816309][T13095] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 951.829655][T13477] netlink: 'syz.7.1658': attribute type 8 has an invalid length. [ 952.122294][T13095] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 952.297883][T13095] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 952.460114][T13095] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 952.463505][T13095] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 952.559302][T13095] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 952.577385][T13095] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 952.616967][T13095] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 953.599505][T13095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.799478][T13095] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.830333][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.869962][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.501440][ T3285] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.501793][ T3285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.680010][T13519] syz.6.1666 (13519) used greatest stack depth: 18144 bytes left [ 956.532908][T13095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 956.610906][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1694'. [ 956.610933][T13605] openvswitch: netlink: Flow key attr not present in new flow. [ 958.289285][T13095] veth0_vlan: entered promiscuous mode [ 958.365682][T13095] veth1_vlan: entered promiscuous mode [ 958.518025][T13095] veth0_macvtap: entered promiscuous mode [ 958.593609][T13095] veth1_macvtap: entered promiscuous mode [ 958.628341][T13095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 958.699446][T13095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 958.776159][ T67] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.776723][ T67] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.780404][ T67] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.780456][ T67] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.799039][T13651] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1710'. [ 959.799068][T13651] openvswitch: netlink: Flow key attr not present in new flow. [ 961.157300][T13665] netlink: 'syz.2.1714': attribute type 8 has an invalid length. [ 961.363648][T13671] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 961.384554][T13671] cramfs: wrong magic [ 961.412695][T13671] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1717'. [ 962.440143][T13671] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.441390][T13671] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.537565][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.537589][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.715004][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.715026][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.396084][T13701] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input15 [ 965.299436][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 965.335349][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 965.339447][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 965.343934][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 965.357035][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 966.135092][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1743'. [ 966.135119][T13743] openvswitch: netlink: Flow key attr not present in new flow. [ 967.590155][ T5611] Bluetooth: hci4: command tx timeout [ 968.373637][T13766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1750'. [ 968.373663][T13766] openvswitch: netlink: Flow key attr not present in new flow. [ 969.675111][ T5607] Bluetooth: hci4: command tx timeout [ 970.050395][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1757'. [ 970.050420][T13788] openvswitch: netlink: Flow key attr not present in new flow. [ 970.325425][T13791] netlink: 'syz.6.1756': attribute type 3 has an invalid length. [ 970.325542][T13791] netlink: 'syz.6.1756': attribute type 3 has an invalid length. [ 970.325593][T13791] netlink: 'syz.6.1756': attribute type 3 has an invalid length. [ 970.330895][T13791] netlink: 'syz.6.1756': attribute type 3 has an invalid length. [ 970.330964][T13791] netlink: 'syz.6.1756': attribute type 3 has an invalid length. [ 970.331013][T13791] netlink: 'syz.6.1756': attribute type 3 has an invalid length. [ 970.331065][T13791] netlink: 'syz.6.1756': attribute type 3 has an invalid length. [ 970.331112][T13791] netlink: 'syz.6.1756': attribute type 3 has an invalid length. [ 970.331159][T13791] netlink: 'syz.6.1756': attribute type 3 has an invalid length. [ 970.331206][T13791] netlink: 'syz.6.1756': attribute type 3 has an invalid length. [ 971.935097][ T5607] Bluetooth: hci4: command tx timeout [ 973.004684][T13829] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1767'. [ 973.140274][T13723] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.140479][T13723] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.140697][T13723] bridge_slave_0: entered allmulticast mode [ 973.166129][T13723] bridge_slave_0: entered promiscuous mode [ 973.193959][T13723] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.194194][T13723] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.194447][T13723] bridge_slave_1: entered allmulticast mode [ 973.219476][T13723] bridge_slave_1: entered promiscuous mode [ 973.284239][T13723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 973.305502][T13723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 973.369508][T13723] team0: Port device team_slave_0 added [ 973.373843][T13723] team0: Port device team_slave_1 added [ 973.459444][T13723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.459466][T13723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.459501][T13723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.562505][T13723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.562524][T13723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.562556][T13723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.985380][ T5607] Bluetooth: hci4: command tx timeout [ 974.068586][T13830] syz.6.1766 (13830) used greatest stack depth: 17624 bytes left [ 974.237876][T13723] hsr_slave_0: entered promiscuous mode [ 974.240939][T13723] hsr_slave_1: entered promiscuous mode [ 974.242892][T13723] debugfs: 'hsr0' already exists in 'hsr' [ 974.242912][T13723] Cannot create hsr debugfs directory [ 980.464025][T13939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1812'. [ 980.464052][T13939] openvswitch: netlink: Flow key attr not present in new flow. [ 984.806077][T13994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 985.400846][T14006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1833'. [ 985.400871][T14006] openvswitch: netlink: Flow key attr not present in new flow. [ 987.279398][T14031] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1842'. [ 987.279549][T14031] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1842'. [ 987.492095][T14037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1845'. [ 987.492123][T14037] openvswitch: netlink: Flow key attr not present in new flow. [ 987.623657][T13723] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 987.839277][T13723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 988.204566][T13723] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 988.753050][T13723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 988.811931][T13723] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 988.858297][T13723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 988.925775][T13723] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 988.973075][T13723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 990.201386][T13723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.318409][T14092] validate_nla: 42 callbacks suppressed [ 990.318431][T14092] netlink: 'syz.6.1864': attribute type 1 has an invalid length. [ 990.361649][T13723] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.428351][T11738] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.429125][T11738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.643573][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.643709][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 992.887727][T13723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 993.206255][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.206330][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.298413][T13723] veth0_vlan: entered promiscuous mode [ 993.419152][T13723] veth1_vlan: entered promiscuous mode [ 993.629209][T13723] veth0_macvtap: entered promiscuous mode [ 993.663929][T13723] veth1_macvtap: entered promiscuous mode [ 993.786720][T13723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 994.013973][T13723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 994.124232][T11738] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.140265][ T6028] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.140570][ T6028] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.141150][ T6028] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.274269][ T5607] Bluetooth: hci6: command 0x0406 tx timeout [ 995.527007][T11738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.527030][T11738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.921627][T11738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.921656][T11738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.244626][T14207] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1910'. [ 997.172672][T14225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1919'. [ 997.172698][T14225] openvswitch: netlink: Flow key attr not present in new flow. [ 1000.298370][T14261] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1933'. [ 1000.623077][T14276] netlink: 'syz.7.1939': attribute type 8 has an invalid length. [ 1003.743977][ T5607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1003.799197][ T5607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1003.802814][ T5607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1003.804031][ T5607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1003.818066][ T5607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1003.980113][T14337] warning: `syz.7.1962' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1005.989675][ T5611] Bluetooth: hci0: command tx timeout [ 1007.652522][T14407] netlink: 'syz.6.1989': attribute type 8 has an invalid length. [ 1008.051553][T14327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.051720][T14327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.051898][T14327] bridge_slave_0: entered allmulticast mode [ 1008.063747][T14327] bridge_slave_0: entered promiscuous mode [ 1008.065207][ T5611] Bluetooth: hci0: command tx timeout [ 1008.094601][T14327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.108695][T14327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.108994][T14327] bridge_slave_1: entered allmulticast mode [ 1008.113580][T14327] bridge_slave_1: entered promiscuous mode [ 1008.380060][T14327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.441633][T14327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.049687][T14447] NILFS (nullb0): couldn't find nilfs on the device [ 1009.589526][T14327] team0: Port device team_slave_0 added [ 1009.616777][T14327] team0: Port device team_slave_1 added [ 1009.743577][T14327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.743597][T14327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.743630][T14327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.799936][T14327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.799957][T14327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.799987][T14327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.144916][ T5611] Bluetooth: hci0: command tx timeout [ 1011.468864][T14327] hsr_slave_0: entered promiscuous mode [ 1011.473444][T14327] hsr_slave_1: entered promiscuous mode [ 1011.487156][T14327] debugfs: 'hsr0' already exists in 'hsr' [ 1011.487193][T14327] Cannot create hsr debugfs directory [ 1011.873218][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2019'. [ 1011.873263][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2019'. [ 1012.232797][ T5611] Bluetooth: hci0: command tx timeout [ 1012.875117][T14498] input: syz0 as /devices/virtual/input/input16 [ 1014.308675][T14327] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.349582][T14496] bridge0: entered allmulticast mode [ 1018.167439][T14327] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.313582][T14540] input: syz0 as /devices/virtual/input/input17 [ 1023.716876][T14327] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.212708][T14327] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.890104][T14573] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2055'. [ 1025.047686][T14576] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1025.053747][T14576] syzkaller0: entered promiscuous mode [ 1025.053777][T14576] syzkaller0: entered allmulticast mode [ 1025.151799][T14579] netlink: 'syz.7.2058': attribute type 8 has an invalid length. [ 1026.253192][T14599] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2067'. [ 1027.110152][T14327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1027.163934][T14327] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1027.190285][T14327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1027.350611][T14327] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1027.363380][T14327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1027.416077][T14327] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1027.498910][T14327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1027.541011][T14327] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1027.738205][T14327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1027.786987][T14327] 8021q: adding VLAN 0 to HW filter on device team0 [ 1027.894388][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.894595][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.923238][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.923374][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.122799][T14636] tipc: Started in network mode [ 1029.122851][T14636] tipc: Node identity 469c2be617b4, cluster identity 4711 [ 1029.123613][T14636] tipc: Enabled bearer , priority 0 [ 1030.396862][T14635] tipc: Disabling bearer [ 1030.692518][ T31] tipc: Node number set to 1361587174 [ 1033.506970][T14687] syzkaller0: entered promiscuous mode [ 1033.507001][T14687] syzkaller0: entered allmulticast mode [ 1036.480461][T14725] gre0: entered promiscuous mode [ 1036.480490][T14725] gre0: entered allmulticast mode [ 1036.544972][ T5607] Bluetooth: hci2: command 0x0406 tx timeout [ 1037.046033][T14327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.380657][T14327] veth0_vlan: entered promiscuous mode [ 1037.403589][T14327] veth1_vlan: entered promiscuous mode [ 1037.560448][T14327] veth0_macvtap: entered promiscuous mode [ 1037.591302][T14327] veth1_macvtap: entered promiscuous mode [ 1037.684233][T14327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.755274][T14327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.802668][T11743] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.802904][T11743] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.802949][T11743] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.802982][T11743] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.585673][ T2296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.585695][ T2296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.784219][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.784371][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.432422][T14834] NILFS (nullb0): couldn't find nilfs on the device [ 1045.054146][T14851] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1045.964338][T14883] gre0: entered promiscuous mode [ 1045.964367][T14883] gre0: entered allmulticast mode [ 1045.993406][T14885] gre0: entered promiscuous mode [ 1045.993429][T14885] gre0: entered allmulticast mode [ 1046.506440][T14888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1047.931991][T14930] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2183'. [ 1048.824480][T14949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1049.373584][T14963] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2194'. [ 1049.717421][T14962] bridge0: port 3(batadv0) entered blocking state [ 1049.717638][T14962] bridge0: port 3(batadv0) entered disabled state [ 1049.717869][T14962] batadv0: entered allmulticast mode [ 1049.724265][T14962] batadv0: entered promiscuous mode [ 1049.868563][T11743] batman_adv: batadv0: IGMP Querier appeared [ 1049.868584][T11743] batman_adv: batadv0: MLD Querier appeared [ 1050.247000][T14976] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2201'. [ 1050.247025][T14976] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2201'. [ 1052.025114][T14996] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2208'. [ 1052.120494][T14999] NILFS (nullb0): couldn't find nilfs on the device [ 1052.960378][T14991] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1053.635251][T15028] gre0: entered promiscuous mode [ 1053.635280][T15028] gre0: entered allmulticast mode [ 1054.135339][T15037] netlink: 196 bytes leftover after parsing attributes in process `syz.7.2223'. [ 1054.633917][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.633991][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.836885][T15055] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2230'. [ 1054.951620][T15058] openvswitch: netlink: Flow key attr not present in new flow. [ 1055.342075][T15072] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2236'. [ 1055.406485][T15067] openvswitch: netlink: Flow key attr not present in new flow. [ 1055.691321][T15075] openvswitch: netlink: Flow key attr not present in new flow. [ 1056.023537][ T5611] Bluetooth: hci0: link tx timeout [ 1056.023917][ T5611] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1056.745990][T15098] NILFS (nullb0): couldn't find nilfs on the device [ 1056.828622][T15105] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2248'. [ 1057.321172][ T5611] Bluetooth: hci0: link tx timeout [ 1057.321193][ T5611] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1057.662253][T15125] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2257'. [ 1057.967074][T15131] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2260'. [ 1058.152474][ T5611] Bluetooth: hci0: command 0x0406 tx timeout [ 1058.395028][T15147] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2262'. [ 1058.395167][T15147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2262'. [ 1059.490126][T15170] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2274'. [ 1061.233857][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2285'. [ 1061.308343][T15194] hsr_slave_0: left promiscuous mode [ 1061.375518][T15196] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2286'. [ 1061.420167][T15194] hsr_slave_1: left promiscuous mode [ 1062.165897][T15213] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2292'. [ 1062.628805][T15223] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2297'. [ 1064.106913][T15262] netlink: 'syz.7.2315': attribute type 4 has an invalid length. [ 1064.523608][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2318'. [ 1064.523637][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2318'. [ 1065.879146][T15310] openvswitch: netlink: Flow key attr not present in new flow. [ 1067.694564][T15349] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2352'. [ 1067.694593][T15349] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2352'. [ 1069.881374][T15403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2378'. [ 1070.059525][T15407] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2378'. [ 1070.606163][T15412] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1070.946520][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2385'. [ 1071.054639][T15433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2385'. [ 1072.373446][T15464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2401'. [ 1072.373566][T15464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2401'. [ 1072.407386][T15464] gre0: entered promiscuous mode [ 1072.407413][T15464] gre0: entered allmulticast mode [ 1072.646166][ T5607] Bluetooth: hci4: link tx timeout [ 1072.648965][ T5607] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1072.660544][ T5607] Bluetooth: hci4: link tx timeout [ 1072.660562][ T5607] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1073.163550][T15488] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2413'. [ 1073.310080][T15498] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2415'. [ 1073.640032][ T5607] Bluetooth: hci4: link tx timeout [ 1073.640054][ T5607] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1073.640073][ T5607] Bluetooth: hci4: link tx timeout [ 1073.640084][ T5607] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1074.451294][T15529] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2429'. [ 1074.451337][T15529] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2429'. [ 1074.719384][ T5607] Bluetooth: hci4: command 0x0406 tx timeout [ 1077.313872][ T5607] Bluetooth: hci4: command 0x0406 tx timeout [ 1083.468581][T15642] netlink: 'syz.7.2468': attribute type 1 has an invalid length. [ 1084.240334][T15656] __nla_validate_parse: 1 callbacks suppressed [ 1084.240354][T15656] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2474'. [ 1084.277638][T15656] bond0: entered promiscuous mode [ 1084.277663][T15656] bond_slave_0: entered promiscuous mode [ 1084.279688][T15656] bond_slave_1: entered promiscuous mode [ 1084.345361][T15656] gretap0: entered promiscuous mode [ 1084.420951][T15656] hsr1: entered promiscuous mode [ 1084.625689][T15662] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2477'. [ 1084.886755][T15662] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2477'. [ 1084.889548][T15661] bridge_slave_0: left allmulticast mode [ 1084.903480][T15661] bridge_slave_0: left promiscuous mode [ 1084.904286][T15661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.116580][T15661] bridge_slave_1: left allmulticast mode [ 1085.116616][T15661] bridge_slave_1: left promiscuous mode [ 1085.116867][T15661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.327135][T15661] bond0: (slave bond_slave_0): Releasing backup interface [ 1085.551298][T15661] bond0: (slave bond_slave_1): Releasing backup interface [ 1085.644685][T15661] team0: Port device team_slave_0 removed [ 1085.751271][T15661] team0: Port device team_slave_1 removed [ 1085.762083][T15661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1085.762113][T15661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1085.809321][T15661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1085.809344][T15661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.063798][T15661] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1087.424916][ T5611] Bluetooth: hci3: command 0x0406 tx timeout [ 1087.803173][T15720] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2500'. [ 1088.067604][T15724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2500'. [ 1088.678961][T15739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2506'. [ 1088.678982][T15739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2506'. [ 1089.816913][T15756] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2513'. [ 1090.865965][T15784] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2524'. [ 1092.432241][T15789] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1092.432275][T15789] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1092.432312][T15789] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1093.183123][T15819] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2535'. [ 1093.472802][T15831] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2540'. [ 1093.774012][T15838] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2540'. [ 1093.917534][T15843] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2545'. [ 1095.187334][ T5611] Bluetooth: hci4: command 0x0406 tx timeout [ 1095.538201][T15844] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1095.538246][T15844] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1095.538268][T15844] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1095.946234][T15871] netlink: 'syz.6.2552': attribute type 8 has an invalid length. [ 1095.946256][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2552'. [ 1096.195564][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1096.641203][T15884] syzkaller0: entered promiscuous mode [ 1096.641231][T15884] syzkaller0: entered allmulticast mode [ 1096.679447][T15884] tipc: Enabled bearer , priority 0 [ 1096.741994][T15884] tipc: Resetting bearer [ 1096.769681][T15888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1096.912593][T15881] tipc: Resetting bearer [ 1097.145818][T15881] tipc: Disabling bearer [ 1097.595100][T15907] netlink: 'syz.5.2568': attribute type 4 has an invalid length. [ 1098.178106][T15922] syzkaller0: entered promiscuous mode [ 1098.178136][T15922] syzkaller0: entered allmulticast mode [ 1098.259038][T15922] tipc: Started in network mode [ 1098.259070][T15922] tipc: Node identity 366f3dcaefdb, cluster identity 4711 [ 1098.259687][T15922] tipc: Enabled bearer , priority 0 [ 1098.323692][T15922] tipc: Resetting bearer [ 1098.567272][T15921] tipc: Resetting bearer [ 1099.028764][T15921] tipc: Disabling bearer [ 1099.032873][T15940] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2582'. [ 1099.508765][T15947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.806445][ T10] tipc: Node number set to 3652468170 [ 1099.808843][T15931] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1099.808886][T15931] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1099.808909][T15931] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1100.152087][T15949] bridge_slave_0: left allmulticast mode [ 1100.152126][T15949] bridge_slave_0: left promiscuous mode [ 1100.152401][T15949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.286790][T15959] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1100.363942][T15949] bridge_slave_1: left allmulticast mode [ 1100.363969][T15949] bridge_slave_1: left promiscuous mode [ 1100.374059][T15949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.422620][T15965] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2588'. [ 1100.575748][T15949] bond0: (slave bond_slave_0): Releasing backup interface [ 1100.656188][T15949] bond0: (slave bond_slave_1): Releasing backup interface [ 1100.818613][T15949] team0: Port device team_slave_0 removed [ 1100.858909][T15949] team0: Port device team_slave_1 removed [ 1100.860075][T15949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1100.860100][T15949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1100.904480][T15949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1100.904507][T15949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1100.939329][T15949] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1100.990320][T15965] bond0: entered promiscuous mode [ 1100.990346][T15965] bond_slave_0: entered promiscuous mode [ 1100.990596][T15965] bond_slave_1: entered promiscuous mode [ 1101.028891][T15965] gretap0: entered promiscuous mode [ 1101.033041][T15965] debugfs: 'hsr0' already exists in 'hsr' [ 1101.033063][T15965] Cannot create hsr debugfs directory [ 1101.033080][T15965] hsr0: entered promiscuous mode [ 1101.621500][T15980] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2595'. [ 1101.849971][T15989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2599'. [ 1101.999838][T15996] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2600'. [ 1102.527751][T16003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1102.829380][T15985] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1102.833449][T15985] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1102.833477][T15985] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1103.142172][T16007] syzkaller0: entered promiscuous mode [ 1103.142202][T16007] syzkaller0: entered allmulticast mode [ 1103.242589][T16007] tipc: Enabled bearer , priority 0 [ 1103.318947][T16007] tipc: Resetting bearer [ 1103.375424][T16006] tipc: Resetting bearer [ 1103.666739][T16018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2607'. [ 1103.706702][T16006] tipc: Disabling bearer [ 1104.742741][T16048] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2620'. [ 1106.146139][T16076] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2632'. [ 1106.372108][T16080] syzkaller0: entered promiscuous mode [ 1106.372136][T16080] syzkaller0: entered allmulticast mode [ 1107.226022][T16104] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2645'. [ 1108.016729][T16130] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.2654'. [ 1110.436812][T16195] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1110.436905][T16195] syzkaller0: entered promiscuous mode [ 1110.436930][T16195] syzkaller0: entered allmulticast mode [ 1110.766979][T16214] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1113.582924][T16276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2723'. [ 1113.597377][T16276] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1113.661525][T16279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2722'. [ 1113.849152][T16288] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2722'. [ 1114.177615][T16293] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2730'. [ 1114.634412][T16308] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2735'. [ 1115.287436][T16329] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2745'. [ 1115.363746][T16335] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2746'. [ 1115.855930][T16352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1116.068531][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.068614][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.764584][T16336] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1116.764646][T16336] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1116.764667][T16336] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1116.778758][T16331] syzkaller0: entered promiscuous mode [ 1116.778787][T16331] syzkaller0: entered allmulticast mode [ 1117.557415][T16369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2753'. [ 1117.557461][T16369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1117.784980][T16377] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2757'. [ 1118.602659][T16401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2765'. [ 1118.602698][T16401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1119.446721][T16427] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2774'. [ 1119.649951][T16431] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2774'. [ 1119.989331][T16439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2779'. [ 1120.745288][T16439] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1121.032011][T16464] netlink: 'syz.3.2792': attribute type 12 has an invalid length. [ 1121.032033][T16464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2792'. [ 1121.630066][T16479] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2799'. [ 1121.630100][T16479] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1121.940888][T16489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1122.411782][T16505] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2811'. [ 1122.619680][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2814'. [ 1122.697280][T16511] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1122.945731][T16518] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2817'. [ 1123.019503][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2818'. [ 1123.019544][T16519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1123.031630][T16518] bond0: entered promiscuous mode [ 1123.031701][T16518] bond_slave_0: entered promiscuous mode [ 1123.054604][T16518] bond_slave_1: entered promiscuous mode [ 1123.130300][T16518] gretap0: entered promiscuous mode [ 1123.142334][T16518] debugfs: 'hsr1' already exists in 'hsr' [ 1123.142358][T16518] Cannot create hsr debugfs directory [ 1123.142375][T16518] hsr1: entered promiscuous mode [ 1123.552716][T16533] bond0: entered promiscuous mode [ 1123.602766][T16533] gretap0: entered promiscuous mode [ 1123.616307][T16533] debugfs: 'hsr1' already exists in 'hsr' [ 1123.616337][T16533] Cannot create hsr debugfs directory [ 1123.616482][T16533] hsr1: entered promiscuous mode [ 1123.792874][T16537] __nla_validate_parse: 3 callbacks suppressed [ 1123.792896][T16537] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2825'. [ 1123.957472][T16540] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2826'. [ 1123.957505][T16540] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1124.442750][T16550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1125.342750][T16553] ref_ctr_offset mismatch. inode: 0xbe offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1125.533169][T16564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2834'. [ 1125.649430][T16566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1125.682654][T16566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1125.883457][ T3285] ------------[ cut here ]------------ [ 1125.883472][ T3285] intreq != rdev->scan_req && intreq != rdev->int_scan_req [ 1125.883493][ T3285] WARNING: net/wireless/scan.c:1200 at cfg80211_scan_done+0x2ca/0x460, CPU#1: kworker/u8:13/3285 [ 1125.883751][ T3285] Modules linked in: [ 1125.883786][ T3285] CPU: 1 UID: 0 PID: 3285 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1125.883815][ T3285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1125.883829][ T3285] Workqueue: events_unbound cfg80211_wiphy_work [ 1125.883903][ T3285] RIP: 0010:cfg80211_scan_done+0x2ca/0x460 [ 1125.883942][ T3285] Code: 75 7b 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 15 cf 38 f7 90 0f 0b 90 e9 2f fe ff ff e8 07 cf 38 f7 90 <0f> 0b 90 e9 d4 fe ff ff e8 f9 ce 38 f7 48 8d 3d f2 93 33 05 67 48 [ 1125.883962][ T3285] RSP: 0018:ffffc9000f167960 EFLAGS: 00010293 [ 1125.883980][ T3285] RAX: ffffffff8a8c6a39 RBX: ffff88803ce88818 RCX: ffff888033260000 [ 1125.883997][ T3285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1125.884011][ T3285] RBP: ffffc9000f167a20 R08: 0000000000000000 R09: 0000000000000000 [ 1125.884025][ T3285] R10: dffffc0000000000 R11: fffffbfff1f5ef9f R12: ffff88803ce88800 [ 1125.884041][ T3285] R13: ffff88803dcc0278 R14: dffffc0000000000 R15: ffff88803dcc0880 [ 1125.884058][ T3285] FS: 0000000000000000(0000) GS:ffff888125d49000(0000) knlGS:0000000000000000 [ 1125.884078][ T3285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1125.884093][ T3285] CR2: 0000001b33c17ff8 CR3: 0000000037e8a000 CR4: 00000000003526f0 [ 1125.884112][ T3285] Call Trace: [ 1125.884121][ T3285] [ 1125.884136][ T3285] ? __pfx_cfg80211_scan_done+0x10/0x10 [ 1125.884193][ T3285] __ieee80211_scan_completed+0x548/0xb20 [ 1125.884311][ T3285] cfg80211_wiphy_work+0x29e/0x420 [ 1125.884343][ T3285] ? process_scheduled_works+0xa20/0x14e0 [ 1125.884455][ T3285] process_scheduled_works+0xa8e/0x14e0 [ 1125.884511][ T3285] ? __pfx_process_scheduled_works+0x10/0x10 [ 1125.884546][ T3285] ? assign_work+0x3cf/0x5d0 [ 1125.884578][ T3285] worker_thread+0xa47/0xfb0 [ 1125.884637][ T3285] kthread+0x388/0x470 [ 1125.884782][ T3285] ? __pfx_worker_thread+0x10/0x10 [ 1125.884811][ T3285] ? __pfx_kthread+0x10/0x10 [ 1125.884846][ T3285] ret_from_fork+0x514/0xb70 [ 1125.884984][ T3285] ? __pfx_ret_from_fork+0x10/0x10 [ 1125.885017][ T3285] ? __switch_to+0xc89/0x1420 [ 1125.885098][ T3285] ? __pfx_kthread+0x10/0x10 [ 1125.885131][ T3285] ret_from_fork_asm+0x1a/0x30 [ 1125.885220][ T3285] [ 1125.885232][ T3285] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1125.885255][ T3285] CPU: 1 UID: 0 PID: 3285 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1125.885281][ T3285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1125.885294][ T3285] Workqueue: events_unbound cfg80211_wiphy_work [ 1125.885326][ T3285] Call Trace: [ 1125.885335][ T3285] [ 1125.885343][ T3285] vpanic+0x56c/0xa60 [ 1125.885380][ T3285] ? __pfx__printk+0x10/0x10 [ 1125.885408][ T3285] ? __pfx_vpanic+0x10/0x10 [ 1125.885429][ T3285] ? is_bpf_text_address+0x292/0x2b0 [ 1125.885509][ T3285] ? is_bpf_text_address+0x26/0x2b0 [ 1125.885544][ T3285] panic+0xc5/0xd0 [ 1125.885565][ T3285] ? __pfx_panic+0x10/0x10 [ 1125.885598][ T3285] ? ret_from_fork_asm+0x1a/0x30 [ 1125.885628][ T3285] __warn+0x315/0x4c0 [ 1125.885650][ T3285] ? cfg80211_scan_done+0x2ca/0x460 [ 1125.885688][ T3285] ? cfg80211_scan_done+0x2ca/0x460 [ 1125.885723][ T3285] __report_bug+0x331/0x530 [ 1125.885839][ T3285] ? cfg80211_scan_done+0x2ca/0x460 [ 1125.885877][ T3285] ? __pfx___report_bug+0x10/0x10 [ 1125.885916][ T3285] ? __lock_acquire+0x683/0x2ce0 [ 1125.885999][ T3285] ? cfg80211_scan_done+0x2ca/0x460 [ 1125.886033][ T3285] report_bug+0x16a/0x220 [ 1125.886067][ T3285] ? cfg80211_scan_done+0x2ca/0x460 [ 1125.886100][ T3285] ? cfg80211_scan_done+0x2cc/0x460 [ 1125.886135][ T3285] handle_bug+0x9c/0x200 [ 1125.886200][ T3285] exc_invalid_op+0x1a/0x50 [ 1125.886223][ T3285] asm_exc_invalid_op+0x1a/0x20 [ 1125.886262][ T3285] RIP: 0010:cfg80211_scan_done+0x2ca/0x460 [ 1125.886298][ T3285] Code: 75 7b 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 15 cf 38 f7 90 0f 0b 90 e9 2f fe ff ff e8 07 cf 38 f7 90 <0f> 0b 90 e9 d4 fe ff ff e8 f9 ce 38 f7 48 8d 3d f2 93 33 05 67 48 [ 1125.886319][ T3285] RSP: 0018:ffffc9000f167960 EFLAGS: 00010293 [ 1125.886338][ T3285] RAX: ffffffff8a8c6a39 RBX: ffff88803ce88818 RCX: ffff888033260000 [ 1125.886355][ T3285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1125.886368][ T3285] RBP: ffffc9000f167a20 R08: 0000000000000000 R09: 0000000000000000 [ 1125.886382][ T3285] R10: dffffc0000000000 R11: fffffbfff1f5ef9f R12: ffff88803ce88800 [ 1125.886399][ T3285] R13: ffff88803dcc0278 R14: dffffc0000000000 R15: ffff88803dcc0880 [ 1125.886422][ T3285] ? cfg80211_scan_done+0x2c9/0x460 [ 1125.886467][ T3285] ? __pfx_cfg80211_scan_done+0x10/0x10 [ 1125.886514][ T3285] __ieee80211_scan_completed+0x548/0xb20 [ 1125.886562][ T3285] cfg80211_wiphy_work+0x29e/0x420 [ 1125.886594][ T3285] ? process_scheduled_works+0xa20/0x14e0 [ 1125.886619][ T3285] process_scheduled_works+0xa8e/0x14e0 [ 1125.886686][ T3285] ? __pfx_process_scheduled_works+0x10/0x10 [ 1125.886729][ T3285] ? assign_work+0x3cf/0x5d0 [ 1125.886758][ T3285] worker_thread+0xa47/0xfb0 [ 1125.886833][ T3285] kthread+0x388/0x470 [ 1125.886866][ T3285] ? __pfx_worker_thread+0x10/0x10 [ 1125.886890][ T3285] ? __pfx_kthread+0x10/0x10 [ 1125.886924][ T3285] ret_from_fork+0x514/0xb70 [ 1125.886962][ T3285] ? __pfx_ret_from_fork+0x10/0x10 [ 1125.886995][ T3285] ? __switch_to+0xc89/0x1420 [ 1125.887028][ T3285] ? __pfx_kthread+0x10/0x10 [ 1125.887060][ T3285] ret_from_fork_asm+0x1a/0x30 [ 1125.887102][ T3285] [ 1125.887725][ T3285] Kernel Offset: disabled