last executing test programs:

1m27.476724486s ago: executing program 0 (id=742):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x1000, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000000), 0x4)

1m27.372207655s ago: executing program 2 (id=744):
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x804, 0x4c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x4, @perf_bp={0x0, 0x4}, 0xa0, 0x58, 0x8, 0x6, 0x2, 0x2c9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x106, 0x40, 0x40, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r2}, 0x38)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xb, 0x1, 'nfacct\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

1m27.205829748s ago: executing program 0 (id=745):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061104e000000000063019900000000009500d3e2c25c20d3"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)

1m27.205345424s ago: executing program 0 (id=746):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x22)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0)

1m27.107048084s ago: executing program 0 (id=748):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x400400077ffffff}, 0xd03, 0x0, 0x0, 0x9, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a)

1m27.072749009s ago: executing program 2 (id=749):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

1m26.98915962s ago: executing program 2 (id=750):
r0 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r0, 0x110, 0x2, 0x0, 0x34)

1m26.988786377s ago: executing program 2 (id=751):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a300000000014000380080002400000000008000140"], 0x68}}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8094)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)}, 0x4044880)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x3e, &(0x7f00000002c0)=[{}, {}], 0x10, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8982, &(0x7f0000000080))
socket$kcm(0x2b, 0x1, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000)

1m26.60157228s ago: executing program 0 (id=755):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

1m26.498881655s ago: executing program 0 (id=756):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b3000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1m25.225026286s ago: executing program 2 (id=764):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0)

1m24.106491505s ago: executing program 2 (id=773):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000f40)={0x18, 0x1, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x3c, 0x3e, 0x400, 0x7fffc, 0x4, {0x1}, [@nested={0xc, 0x48, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @u32=0x100}]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1400c810}, 0x4008094)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20400, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0xb, 0x5, 0xfffff02c}, {0x6, 0x5, 0x4, 0x5}]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002400010325bd7000fcffffff1100000005000e"], 0x1c}, 0x1, 0x0, 0x0, 0x44897}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x10, 0x0, 0x3, 0x8, 0x800003fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2040)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xc9, 0x10, 0x0, 0x0, 0x0, 0x6, 0x7013a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3d, 0x4}, 0x10a, 0x0, 0x4000001, 0x3, 0x3f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0xe1, 0x1, 0x1}, 0x50)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r8, 0x10f, 0x86, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x700, 0x1}, 0x48)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x175a}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000)

1m23.848331641s ago: executing program 32 (id=773):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000f40)={0x18, 0x1, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x3c, 0x3e, 0x400, 0x7fffc, 0x4, {0x1}, [@nested={0xc, 0x48, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @u32=0x100}]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1400c810}, 0x4008094)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20400, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0xb, 0x5, 0xfffff02c}, {0x6, 0x5, 0x4, 0x5}]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002400010325bd7000fcffffff1100000005000e"], 0x1c}, 0x1, 0x0, 0x0, 0x44897}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x10, 0x0, 0x3, 0x8, 0x800003fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2040)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xc9, 0x10, 0x0, 0x0, 0x0, 0x6, 0x7013a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3d, 0x4}, 0x10a, 0x0, 0x4000001, 0x3, 0x3f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0xe1, 0x1, 0x1}, 0x50)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r8, 0x10f, 0x86, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x700, 0x1}, 0x48)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x175a}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000)

1m11.494079788s ago: executing program 33 (id=756):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b3000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.301993134s ago: executing program 4 (id=1813):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x40000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x43044)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4c880}, 0x884)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b0b, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

1.166334323s ago: executing program 4 (id=1816):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040000001c0001801800108014000d"], 0x34}}, 0x0)

1.165872936s ago: executing program 4 (id=1817):
r0 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4000000)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$sock(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000cc0)}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e0000000500"})
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

748.17799ms ago: executing program 3 (id=1824):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b00)={0xffffffffffffffff, 0x5, 0xfffffe71, 0x0, &(0x7f0000000600)="09006e0004000000000000000000000001dec3", 0x0, 0xd41, 0x0, 0xfffffffffffffee8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x48)

667.429729ms ago: executing program 3 (id=1826):
r0 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xe, 0x0, 0x0)

667.302598ms ago: executing program 3 (id=1827):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "98"}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x2}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

616.092609ms ago: executing program 3 (id=1829):
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$kcm(0x23, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8924, &(0x7f0000000080))

615.524606ms ago: executing program 3 (id=1831):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})

538.620952ms ago: executing program 1 (id=1832):
r0 = socket$kcm(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r0, 0x1, 0x1d, &(0x7f0000000240), 0x4)
recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2)

242.795471ms ago: executing program 1 (id=1833):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x31}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x80)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000300), &(0x7f0000000340)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f00000002c0)}, 0x20)

237.670034ms ago: executing program 4 (id=1834):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db00b904021d0800fd007c05e8fe55a10a000140014002020a0e1888caa971afff00060411000000160026000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43dbb19703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)

237.295221ms ago: executing program 1 (id=1835):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000800000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b9ff030768040600000014fd88a8", 0x0, 0x7fc, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x105}, 0x37)

186.782883ms ago: executing program 4 (id=1836):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020259040e9e1200002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfeb9}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4)

186.591545ms ago: executing program 1 (id=1837):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xd, 0x9}, 0x104101, 0x4, 0x0, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331d00"/27, 0x1b}], 0x1}, 0x0)

117.934307ms ago: executing program 4 (id=1838):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x14130}], 0x1}, 0x80d1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
close(r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r4 = socket$kcm(0x18, 0x0, 0x0)
recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10023)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0x7fff, 0x14}, 0xc)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_procfs$namespace(r8, &(0x7f00000001c0)='ns/pid_for_children\x00')
sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newae={0x64, 0x1e, 0x503, 0x70bd29, 0x25dfdbff, {{@in=@broadcast, 0x4d4, 0x2, 0xff}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3, 0x3506}, [@lifetime_val={0x24, 0x9, {0x5, 0x13e7, 0xee01, 0x8000000000000000}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

38.101947ms ago: executing program 1 (id=1839):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x1a4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1cc}, 0x1, 0x0, 0x0, 0x10}, 0x4000800)

37.782636ms ago: executing program 1 (id=1840):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xb2, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)

0s ago: executing program 3 (id=1841):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x4000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x1369a, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x9)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000f000000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:60844' (ED25519) to the list of known hosts.
syzkaller login: [   55.679000][ T5833] cgroup: Unknown subsys name 'net'
[   55.807453][ T5833] cgroup: Unknown subsys name 'cpuset'
[   55.813458][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.226538][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.606481][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.609883][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.613256][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.616495][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.619924][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.686804][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.689698][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.692962][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.696482][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.699614][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.716068][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.722105][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.725864][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.729942][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.734433][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.846270][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   62.954966][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.957923][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.960499][ T5847] bridge_slave_0: entered allmulticast mode
[   62.964868][ T5847] bridge_slave_0: entered promiscuous mode
[   62.971389][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.974628][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.977796][ T5847] bridge_slave_1: entered allmulticast mode
[   62.981967][ T5847] bridge_slave_1: entered promiscuous mode
[   62.995564][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   63.059645][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.075732][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.123491][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   63.129226][ T5847] team0: Port device team_slave_0 added
[   63.131519][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.135194][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.137619][ T5853] bridge_slave_0: entered allmulticast mode
[   63.141102][ T5853] bridge_slave_0: entered promiscuous mode
[   63.161208][ T5847] team0: Port device team_slave_1 added
[   63.174892][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.177883][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.180628][ T5853] bridge_slave_1: entered allmulticast mode
[   63.184855][ T5853] bridge_slave_1: entered promiscuous mode
[   63.220017][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.223587][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.233410][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.255808][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.268608][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.271526][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.283381][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.289958][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.347342][ T5853] team0: Port device team_slave_0 added
[   63.351718][ T5853] team0: Port device team_slave_1 added
[   63.390813][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.393742][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.396439][ T5855] bridge_slave_0: entered allmulticast mode
[   63.400091][ T5855] bridge_slave_0: entered promiscuous mode
[   63.417295][ T5847] hsr_slave_0: entered promiscuous mode
[   63.421343][ T5847] hsr_slave_1: entered promiscuous mode
[   63.425442][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.427823][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.430343][ T5855] bridge_slave_1: entered allmulticast mode
[   63.433636][ T5855] bridge_slave_1: entered promiscuous mode
[   63.466341][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.468962][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.479315][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.484553][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.487115][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.497232][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.503003][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.531399][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.598177][ T5855] team0: Port device team_slave_0 added
[   63.617302][ T5855] team0: Port device team_slave_1 added
[   63.624030][ T5853] hsr_slave_0: entered promiscuous mode
[   63.627158][ T5853] hsr_slave_1: entered promiscuous mode
[   63.629622][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   63.631585][ T5853] Cannot create hsr debugfs directory
[   63.679316][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.681730][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.691679][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.723694][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.726621][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.737273][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.856979][ T5855] hsr_slave_0: entered promiscuous mode
[   63.859828][ T5855] hsr_slave_1: entered promiscuous mode
[   63.861949][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   63.864669][ T5855] Cannot create hsr debugfs directory
[   63.977396][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.004121][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.026954][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.042307][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.085925][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.096550][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.123508][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.129955][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.181236][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.190985][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.207939][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.215793][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.296896][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.335124][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   64.348895][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.351432][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.360771][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.365263][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.367824][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.412310][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   64.428894][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.431874][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.445128][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.468691][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.471788][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.481709][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   64.498317][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.501410][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.520918][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.523790][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.595560][ T5855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.653320][   T54] Bluetooth: hci0: command tx timeout
[   64.713853][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.727364][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.734182][   T54] Bluetooth: hci1: command tx timeout
[   64.801803][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.813344][   T54] Bluetooth: hci2: command tx timeout
[   64.829268][ T5847] veth0_vlan: entered promiscuous mode
[   64.845230][ T5855] veth0_vlan: entered promiscuous mode
[   64.854001][ T5855] veth1_vlan: entered promiscuous mode
[   64.866137][ T5847] veth1_vlan: entered promiscuous mode
[   64.930589][ T5855] veth0_macvtap: entered promiscuous mode
[   64.939888][ T5847] veth0_macvtap: entered promiscuous mode
[   64.944266][ T5853] veth0_vlan: entered promiscuous mode
[   64.948985][ T5855] veth1_macvtap: entered promiscuous mode
[   64.957828][ T5847] veth1_macvtap: entered promiscuous mode
[   64.972057][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.985414][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.997147][ T5853] veth1_vlan: entered promiscuous mode
[   65.006171][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.017649][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.029961][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.035002][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.038791][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.060492][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.067582][ T5708] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.086469][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.092448][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.110930][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.139029][ T5853] veth0_macvtap: entered promiscuous mode
[   65.156398][ T5853] veth1_macvtap: entered promiscuous mode
[   65.195410][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.198802][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.201727][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.233223][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.270183][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.271043][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.279147][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.279466][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.286185][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.289803][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.331182][   T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.343853][   T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.392091][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.419628][ T3612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.421721][   T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.422308][ T3612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.434099][   T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.500934][ T3579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.506860][ T3579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.693007][ T5919] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.554303][ T5962] netlink: 'syz.0.23': attribute type 4 has an invalid length.
[   66.557528][ T5962] netlink: 'syz.0.23': attribute type 3 has an invalid length.
[   66.561066][ T5962] netlink: 132 bytes leftover after parsing attributes in process `syz.0.23'.
[   66.740806][   T54] Bluetooth: hci0: command tx timeout
[   66.799204][ T5974] netlink: 'syz.0.30': attribute type 6 has an invalid length.
[   66.803770][ T5974] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.30'.
[   66.848992][   T54] Bluetooth: hci1: command tx timeout
[   66.893886][   T54] Bluetooth: hci2: command tx timeout
[   67.247312][ T5993] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.37'.
[   67.538788][ T6014] netlink: 'syz.2.48': attribute type 10 has an invalid length.
[   67.580479][ T6014] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.587270][ T6014] team0: Port device batadv0 added
[   67.761780][ T6017] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   67.831412][ T6021] netlink: 180 bytes leftover after parsing attributes in process `syz.0.51'.
[   68.021395][ T6032] lo: entered allmulticast mode
[   68.030201][ T6032] lo: entered promiscuous mode
[   68.032332][ T6032] lo: left allmulticast mode
[   68.109380][   T54] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5
[   68.460735][ T6059] netlink: 56 bytes leftover after parsing attributes in process `syz.0.64'.
[   68.467058][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.64'.
[   68.594283][    C0] hrtimer: interrupt took 32983 ns
[   68.835759][ T6078] netlink: 'syz.0.69': attribute type 10 has an invalid length.
[   68.838759][ T6078] netlink: 2 bytes leftover after parsing attributes in process `syz.0.69'.
[   68.841651][ T6078] team0: entered promiscuous mode
[   68.852625][ T6078] team_slave_0: entered promiscuous mode
[   68.857441][ T6078] team_slave_1: entered promiscuous mode
[   68.862194][ T6078] bridge0: port 3(team0) entered blocking state
[   68.873224][   T54] Bluetooth: hci0: command tx timeout
[   68.880052][ T6078] bridge0: port 3(team0) entered disabled state
[   68.886646][ T6078] team0: entered allmulticast mode
[   68.888921][ T6078] team_slave_0: entered allmulticast mode
[   68.891559][ T6078] team_slave_1: entered allmulticast mode
[   68.906252][   T54] Bluetooth: hci1: command tx timeout
[   68.914922][ T6078] bridge0: port 3(team0) entered blocking state
[   68.918020][ T6078] bridge0: port 3(team0) entered forwarding state
[   69.034466][   T54] Bluetooth: hci2: command tx timeout
[   69.133414][ T6084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   70.485033][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'.
[   70.596422][ T6112] netlink: 'syz.2.85': attribute type 10 has an invalid length.
[   70.892829][   T54] Bluetooth: hci0: command tx timeout
[   70.974442][   T54] Bluetooth: hci1: command tx timeout
[   71.055437][   T54] Bluetooth: hci2: command tx timeout
[   71.250965][ T6112] batman_adv: batadv0: Adding interface: netdevsim0
[   71.254908][ T6112] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.272068][ T6112] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   71.304241][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.306825][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.422949][ T6122] -1: renamed from syzkaller0
[   71.492278][ T6125] netlink: 'syz.0.88': attribute type 1 has an invalid length.
[   71.497549][ T6125] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.88'.
[   71.558425][ T6124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.90'.
[   71.685156][ T6133] syz.1.94 uses obsolete (PF_INET,SOCK_PACKET)
[   72.787390][ T6150] netlink: 'syz.2.102': attribute type 39 has an invalid length.
[   72.905275][ T6154] __nla_validate_parse: 1 callbacks suppressed
[   72.905349][ T6154] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.104'.
[   73.323084][ T6183] Zero length message leads to an empty skb
[   73.458223][ T6197] netlink: 'syz.0.120': attribute type 29 has an invalid length.
[   73.465382][ T6197] netlink: 'syz.0.120': attribute type 29 has an invalid length.
[   73.623529][ T6208] netlink: 14 bytes leftover after parsing attributes in process `syz.2.123'.
[   73.837064][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'.
[   73.896431][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'.
[   75.821255][ T6268] netlink: 14 bytes leftover after parsing attributes in process `syz.0.149'.
[   75.879944][ T6273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.150'.
[   76.087246][ T6278] netlink: 'syz.0.152': attribute type 4 has an invalid length.
[   76.096425][ T6278] netlink: 'syz.0.152': attribute type 4 has an invalid length.
[   76.100235][ T6278] netlink: 199756 bytes leftover after parsing attributes in process `syz.0.152'.
[   76.330108][ T6284] =======================================================
[   76.330108][ T6284] WARNING: The mand mount option has been deprecated and
[   76.330108][ T6284]          and is ignored by this kernel. Remove the mand
[   76.330108][ T6284]          option from the mount to silence this warning.
[   76.330108][ T6284] =======================================================
[   76.365464][ T6285] netlink: 211576 bytes leftover after parsing attributes in process `syz.2.154'.
[   76.506148][ T6293] netlink: 60 bytes leftover after parsing attributes in process `syz.1.159'.
[   76.529729][ T6293] netlink: 60 bytes leftover after parsing attributes in process `syz.1.159'.
[   76.548447][ T6296] netlink: 'syz.0.161': attribute type 1 has an invalid length.
[   76.551991][ T6296] netlink: 'syz.0.161': attribute type 1 has an invalid length.
[   76.758679][ T6310] netlink: zone id is out of range
[   76.760927][ T6310] netlink: zone id is out of range
[   76.764204][ T6310] netlink: zone id is out of range
[   76.766585][ T6310] netlink: zone id is out of range
[   76.768949][ T6310] netlink: zone id is out of range
[   76.771130][ T6310] netlink: zone id is out of range
[   76.773967][ T6310] netlink: zone id is out of range
[   76.776196][ T6310] netlink: zone id is out of range
[   76.778492][ T6310] netlink: zone id is out of range
[   76.780773][ T6310] netlink: zone id is out of range
[   77.097186][ T6318] netlink: 'syz.2.169': attribute type 4 has an invalid length.
[   77.118196][ T6319] netlink: 'syz.1.170': attribute type 39 has an invalid length.
[   77.390430][ T6332] netlink: 'syz.0.176': attribute type 1 has an invalid length.
[   77.826033][ T6362] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   77.828906][ T6362] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   78.617410][ T6377] netlink: 'syz.0.195': attribute type 21 has an invalid length.
[   78.620510][ T6377] __nla_validate_parse: 3 callbacks suppressed
[   78.620521][ T6377] netlink: 128 bytes leftover after parsing attributes in process `syz.0.195'.
[   78.635396][ T6377] netlink: 'syz.0.195': attribute type 4 has an invalid length.
[   78.638522][ T6377] netlink: 'syz.0.195': attribute type 5 has an invalid length.
[   78.641593][ T6377] netlink: 3 bytes leftover after parsing attributes in process `syz.0.195'.
[   79.045695][ T6383] netlink: 'syz.2.197': attribute type 28 has an invalid length.
[   79.049314][ T6383] netlink: 2 bytes leftover after parsing attributes in process `syz.2.197'.
[   79.508337][ T6378] delete_channel: no stack
[   80.034330][ T6396] netlink: 60 bytes leftover after parsing attributes in process `syz.0.202'.
[   80.040562][ T6396] unsupported nlmsg_type 40
[   80.090520][ T6399] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   80.499946][ T6413] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.204'.
[   81.865117][ T6432] netlink: 104 bytes leftover after parsing attributes in process `syz.0.217'.
[   82.014136][ T6435] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.218'.
[   82.296147][ T6438] netlink: 22 bytes leftover after parsing attributes in process `syz.2.219'.
[   82.564332][ T6450] netlink: 'syz.1.224': attribute type 21 has an invalid length.
[   83.420250][ T6472] netlink: 'syz.2.233': attribute type 1 has an invalid length.
[   83.958507][ T6508] netlink: 60 bytes leftover after parsing attributes in process `syz.0.250'.
[   83.963862][ T6507] netlink: 60 bytes leftover after parsing attributes in process `syz.0.250'.
[   83.968177][ T6508] netlink: 60 bytes leftover after parsing attributes in process `syz.0.250'.
[   84.422039][ T6526] raw_sendmsg: syz.1.258 forgot to set AF_INET. Fix it!
[   84.486942][   T54] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3
[   84.579135][ T6531] netlink: 'syz.0.260': attribute type 1 has an invalid length.
[   84.589364][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.260'.
[   84.980472][ T6566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.276'.
[   85.419933][ T6589] netlink: 48 bytes leftover after parsing attributes in process `syz.1.287'.
[   86.199335][ T6602] net_ratelimit: 52 callbacks suppressed
[   86.199347][ T6602] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   86.446646][ T6625] netlink: 'syz.1.304': attribute type 15 has an invalid length.
[   86.449476][ T6625] netlink: 11318 bytes leftover after parsing attributes in process `syz.1.304'.
[   86.612914][ T6639] netlink: 'syz.2.311': attribute type 10 has an invalid length.
[   86.669787][    T9] cfg80211: failed to load regulatory.db
[   87.776495][   T54] Bluetooth: hci0: Malformed LE Event: 0x0d
[   88.151367][ T6715] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   88.829198][ T6760] netlink: 40 bytes leftover after parsing attributes in process `syz.1.359'.
[   89.081248][ T6764] netlink: 'syz.1.361': attribute type 11 has an invalid length.
[   89.088299][ T6764] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.361'.
[   89.107583][ T6763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.146772][ T6770] Driver unsupported XDP return value 0 on prog  (id 126) dev N/A, expect packet loss!
[   89.615318][ T6788] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.370'.
[   90.835472][   T54] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[   91.182929][ T6855] netlink: 68 bytes leftover after parsing attributes in process `syz.2.401'.
[   91.205467][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.404'.
[   91.263391][ T6861] netlink: 32 bytes leftover after parsing attributes in process `syz.0.405'.
[   91.267213][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'.
[   92.220534][ T6893] netlink: 60 bytes leftover after parsing attributes in process `syz.2.412'.
[   92.220720][ T6892] netlink: 'syz.0.411': attribute type 2 has an invalid length.
[   92.236895][ T6889] netlink: 60 bytes leftover after parsing attributes in process `syz.2.412'.
[   92.241022][ T6892] netlink: 'syz.0.411': attribute type 1 has an invalid length.
[   92.255756][ T6889] netlink: 60 bytes leftover after parsing attributes in process `syz.2.412'.
[   92.259760][ T6892] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.411'.
[   92.280246][ T6892] block nbd5: not configured, cannot reconfigure
[   94.378031][ T6941] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.434'.
[   94.383650][ T6941] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.434'.
[   94.394533][ T6940] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.434'.
[   96.567838][ T6996] netlink: 'syz.1.456': attribute type 9 has an invalid length.
[   96.570986][ T6996] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.456'.
[   96.996272][ T7015] netlink: 'syz.1.464': attribute type 12 has an invalid length.
[   96.999918][ T7015] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.464'.
[   97.065809][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'.
[   97.388656][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.475'.
[   97.423617][ T7038] : entered promiscuous mode
[   97.427274][ T7036] lo speed is unknown, defaulting to 1000
[   97.440626][ T7036] lo speed is unknown, defaulting to 1000
[   97.472050][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.477'.
[   97.706749][ T7036] lo speed is unknown, defaulting to 1000
[   97.732223][ T7036] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   97.814643][ T7056] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.482'.
[   97.819855][ T7036] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   97.958850][ T7036] lo speed is unknown, defaulting to 1000
[   97.971364][ T7036] lo speed is unknown, defaulting to 1000
[   97.980082][ T7036] lo speed is unknown, defaulting to 1000
[   99.175160][ T7076] -1: renamed from syzkaller0
[   99.342855][ T7085] blkio.reset_stats is deprecated
[  100.247025][ T7104] netlink: 'syz.1.500': attribute type 10 has an invalid length.
[  100.250321][ T7104] netlink: 40 bytes leftover after parsing attributes in process `syz.1.500'.
[  100.256941][ T7104] team0: entered promiscuous mode
[  100.259239][ T7104] team_slave_0: entered promiscuous mode
[  100.262465][ T7104] team_slave_1: entered promiscuous mode
[  100.265914][ T7104] team0: entered allmulticast mode
[  100.267659][ T7104] team_slave_0: entered allmulticast mode
[  100.269673][ T7104] team_slave_1: entered allmulticast mode
[  100.273028][ T7104] bridge0: port 3(team0) entered blocking state
[  100.281845][ T7104] bridge0: port 3(team0) entered disabled state
[  100.287859][ T7104] bridge0: port 3(team0) entered blocking state
[  100.290740][ T7104] bridge0: port 3(team0) entered forwarding state
[  101.072223][ T7132] xt_socket: unknown flags 0x20
[  101.167106][ T7136] netlink: 'syz.2.513': attribute type 1 has an invalid length.
[  101.170919][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.513'.
[  101.328011][ T7150] netlink: 'syz.1.520': attribute type 64 has an invalid length.
[  101.483098][ T7163] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.527'.
[  101.501361][ T7160] netlink: 44 bytes leftover after parsing attributes in process `syz.1.525'.
[  101.585600][ T7171] netlink: 104 bytes leftover after parsing attributes in process `syz.0.530'.
[  101.639568][ T7176] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.531'.
[  101.886992][ T7183] netlink: 132 bytes leftover after parsing attributes in process `syz.0.535'.
[  103.101163][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.543'.
[  103.312344][ T7216] netlink: 'syz.0.545': attribute type 10 has an invalid length.
[  103.320606][ T7216] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  103.661824][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'.
[  104.640246][ T7249] netlink: 'syz.2.558': attribute type 10 has an invalid length.
[  104.647340][ T7249] netlink: 40 bytes leftover after parsing attributes in process `syz.2.558'.
[  104.664267][ T7249] ipvlan1: entered promiscuous mode
[  104.666532][ T7249] ipvlan1: entered allmulticast mode
[  104.668781][ T7249] veth0_vlan: entered allmulticast mode
[  104.677927][ T7249] bridge0: port 3(ipvlan1) entered blocking state
[  104.680318][ T7249] bridge0: port 3(ipvlan1) entered disabled state
[  104.685228][ T7249] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  105.101166][ T5851] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6
[  105.876193][ T7275] delete_channel: no stack
[  105.897238][ T7275] delete_channel: no stack
[  106.314539][ T7299] syzkaller0: entered promiscuous mode
[  106.316910][ T7299] syzkaller0: entered allmulticast mode
[  106.390201][ T7301] netlink: 16 bytes leftover after parsing attributes in process `syz.1.582'.
[  106.646635][ T7313] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.857792][ T7318] netlink: 'syz.1.589': attribute type 10 has an invalid length.
[  106.861808][ T7318] netlink: 55 bytes leftover after parsing attributes in process `syz.1.589'.
[  107.338739][ T7340] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  107.543929][ T7346] netlink: 'syz.2.601': attribute type 27 has an invalid length.
[  107.550158][ T7346] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.601'.
[  107.589700][ T7314] delete_channel: no stack
[  107.703738][ T7318] syz.1.589 (7318) used greatest stack depth: 18256 bytes left
[  107.744195][ T7356] netlink: 'syz.1.605': attribute type 10 has an invalid length.
[  107.757758][ T7356] dummy0: entered promiscuous mode
[  107.760056][ T7356] dummy0: entered allmulticast mode
[  107.763059][ T7356] team0: Port device dummy0 added
[  108.593132][ T7418] netlink: 176 bytes leftover after parsing attributes in process `syz.0.635'.
[  108.681544][ T7419] netlink: 104 bytes leftover after parsing attributes in process `syz.0.635'.
[  108.704688][ T7418] netlink: 16 bytes leftover after parsing attributes in process `syz.0.635'.
[  108.866267][ T7434] netlink: 'syz.0.642': attribute type 1 has an invalid length.
[  109.258779][ T7447] netlink: 32 bytes leftover after parsing attributes in process `syz.2.645'.
[  109.262464][ T7447] openvswitch: netlink: Missing key (keys=40, expected=100)
[  109.451451][ T7460] netlink: 196 bytes leftover after parsing attributes in process `syz.1.653'.
[  109.555750][ T7465] netlink: 'syz.1.655': attribute type 11 has an invalid length.
[  109.559109][ T7465] netlink: 140 bytes leftover after parsing attributes in process `syz.1.655'.
[  109.891588][ T7478] netlink: 14 bytes leftover after parsing attributes in process `syz.0.661'.
[  110.032395][ T7478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.041801][ T7478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.049700][ T7478] bond0 (unregistering): Released all slaves
[  110.080587][ T7488] netlink: 'syz.2.665': attribute type 16 has an invalid length.
[  110.155901][ T7492] netlink: 'syz.0.667': attribute type 21 has an invalid length.
[  110.158918][ T7492] netlink: 'syz.0.667': attribute type 6 has an invalid length.
[  110.786756][ T7510] netlink: 'syz.0.673': attribute type 4 has an invalid length.
[  111.054852][ T7519] openvswitch: netlink: EtherType 50a is less than min 600
[  111.280810][ T7526] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  111.288155][ T7526] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  111.641234][ T7544] netlink: 'syz.1.686': attribute type 10 has an invalid length.
[  112.551785][ T7568] lo speed is unknown, defaulting to 1000
[  112.821763][ T7575] netlink: 'syz.2.699': attribute type 3 has an invalid length.
[  112.828400][ T7575] __nla_validate_parse: 3 callbacks suppressed
[  112.828410][ T7575] netlink: 132 bytes leftover after parsing attributes in process `syz.2.699'.
[  112.890654][ T7580] C: renamed from team_slave_0 (while UP)
[  112.895798][ T7580] netlink: 'syz.1.701': attribute type 4 has an invalid length.
[  112.899144][ T7580] netlink: 116 bytes leftover after parsing attributes in process `syz.1.701'.
[  112.903304][ T7580] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  112.916235][ T7583] netlink: 'syz.2.703': attribute type 2 has an invalid length.
[  112.919115][ T7583] netlink: 'syz.2.703': attribute type 1 has an invalid length.
[  113.446122][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  113.450168][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  113.456374][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  113.460502][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  113.466961][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  113.490375][ T7613] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.717'.
[  113.516820][ T7610] lo speed is unknown, defaulting to 1000
[  113.654256][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'.
[  113.678086][ T7610] chnl_net:caif_netlink_parms(): no params data found
[  113.874986][ T7610] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.877432][ T7610] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.879971][ T7610] bridge_slave_0: entered allmulticast mode
[  113.885035][ T7610] bridge_slave_0: entered promiscuous mode
[  113.888395][ T7610] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.890731][ T7610] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.893693][ T7610] bridge_slave_1: entered allmulticast mode
[  113.896641][ T7610] bridge_slave_1: entered promiscuous mode
[  113.922436][ T7610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.928968][ T7610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.950648][ T7610] team0: Port device team_slave_0 added
[  113.954619][ T7610] team0: Port device team_slave_1 added
[  113.988953][ T7610] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.991886][ T7610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.003652][ T7610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.009782][ T7610] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.012792][ T7610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.025140][ T7610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.080981][ T7610] hsr_slave_0: entered promiscuous mode
[  114.090206][ T7610] hsr_slave_1: entered promiscuous mode
[  114.106710][ T7610] debugfs: 'hsr0' already exists in 'hsr'
[  114.111228][ T7610] Cannot create hsr debugfs directory
[  114.307566][ T7610] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.386261][ T7610] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.456186][ T7610] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.469043][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.730'.
[  114.474644][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.730'.
[  114.513968][ T7610] batman_adv: batadv0: Removing interface: netdevsim0
[  114.523824][ T7610] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.648834][ T7650] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  114.652230][ T7650] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  114.738041][ T7610] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  114.747433][ T7610] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  114.756931][ T7610] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  114.765126][ T7610] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  114.855459][ T7610] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.875124][ T7610] 8021q: adding VLAN 0 to HW filter on device team0
[  114.885908][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.889007][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.900238][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.903286][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.057085][ T7610] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.149744][ T7610] veth0_vlan: entered promiscuous mode
[  115.175046][ T7610] veth1_vlan: entered promiscuous mode
[  115.227701][ T7610] veth0_macvtap: entered promiscuous mode
[  115.238373][ T7610] veth1_macvtap: entered promiscuous mode
[  115.273781][ T7610] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.292065][ T7610] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.311751][ T5897] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.319554][ T5897] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.334150][ T5897] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.337696][ T5897] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.499986][   T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.504724][   T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.533099][   T54] Bluetooth: hci2: command tx timeout
[  115.550407][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.555840][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.746571][ T7672] netlink: 168 bytes leftover after parsing attributes in process `syz.2.710'.
[  115.762182][ T7672] netlink: 'syz.2.710': attribute type 4 has an invalid length.
[  115.771954][ T7672] netlink: 152 bytes leftover after parsing attributes in process `syz.2.710'.
[  115.795637][ T7672] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  115.825987][ T7676] syzkaller0: entered promiscuous mode
[  115.833733][ T7676] syzkaller0: entered allmulticast mode
[  116.061617][ T7688] netlink: 'syz.2.743': attribute type 27 has an invalid length.
[  116.067280][ T7688] netlink: 164 bytes leftover after parsing attributes in process `syz.2.743'.
[  116.220383][ T7693] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  116.548364][ T7708] netlink: 14 bytes leftover after parsing attributes in process `syz.2.751'.
[  116.565517][   T54] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  117.612859][ T5851] Bluetooth: hci2: command tx timeout
[  118.913918][ T7753] option changes via remount are deprecated (pid=7752 comm=syz.1.768)
[  118.966807][ T7755] __nla_validate_parse: 4 callbacks suppressed
[  118.966822][ T7755] netlink: 156 bytes leftover after parsing attributes in process `syz.1.769'.
[  120.166033][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  120.174916][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  120.179807][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  120.188575][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  120.194198][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  120.797066][ T5897] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.935101][ T5897] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.948231][ T7774] syz.1.776: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  120.954936][ T7764] lo speed is unknown, defaulting to 1000
[  120.957407][ T7774] CPU: 1 UID: 0 PID: 7774 Comm: syz.1.776 Not tainted syzkaller #0 PREEMPT(full) 
[  120.957438][ T7774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  120.957445][ T7774] Call Trace:
[  120.957449][ T7774]  <TASK>
[  120.957454][ T7774]  dump_stack_lvl+0x189/0x250
[  120.957470][ T7774]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.957480][ T7774]  ? __pfx__printk+0x10/0x10
[  120.957492][ T7774]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  120.957503][ T7774]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  120.957513][ T7774]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  120.957524][ T7774]  warn_alloc+0x214/0x310
[  120.957538][ T7774]  ? stack_depot_save_flags+0x436/0x860
[  120.957551][ T7774]  ? __pfx_warn_alloc+0x10/0x10
[  120.957563][ T7774]  ? kasan_save_track+0x4f/0x80
[  120.957573][ T7774]  ? xskq_create+0x56/0x170
[  120.957580][ T7774]  ? xsk_init_queue+0xb0/0x110
[  120.957585][ T7774]  ? xsk_setsockopt+0x57b/0x8d0
[  120.957595][ T7774]  ? do_sock_setsockopt+0x17c/0x1b0
[  120.957604][ T7774]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  120.957612][ T7774]  ? do_syscall_64+0xfa/0x3b0
[  120.957620][ T7774]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.957631][ T7774]  __vmalloc_node_range_noprof+0x125/0x12f0
[  120.957653][ T7774]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  120.957667][ T7774]  ? __kasan_kmalloc+0x93/0xb0
[  120.957678][ T7774]  vmalloc_user_noprof+0xad/0xf0
[  120.957690][ T7774]  ? xskq_create+0xbf/0x170
[  120.957698][ T7774]  xskq_create+0xbf/0x170
[  120.957707][ T7774]  xsk_init_queue+0xb0/0x110
[  120.957716][ T7774]  xsk_setsockopt+0x57b/0x8d0
[  120.957728][ T7774]  ? __pfx_xsk_setsockopt+0x10/0x10
[  120.957739][ T7774]  ? __pfx_aa_sk_perm+0x10/0x10
[  120.957752][ T7774]  ? __fget_files+0x2a/0x420
[  120.957758][ T7774]  ? aa_sock_opt_perm+0xff/0x1b0
[  120.957766][ T7774]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  120.957775][ T7774]  ? __pfx_xsk_setsockopt+0x10/0x10
[  120.957786][ T7774]  do_sock_setsockopt+0x17c/0x1b0
[  120.957797][ T7774]  __x64_sys_setsockopt+0x13f/0x1b0
[  120.957808][ T7774]  do_syscall_64+0xfa/0x3b0
[  120.957815][ T7774]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.957840][ T7774]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.957849][ T7774]  ? exc_page_fault+0x9f/0xf0
[  120.957857][ T7774]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.957864][ T7774] RIP: 0033:0x7fd71478ec29
[  120.957871][ T7774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.957878][ T7774] RSP: 002b:00007fd715638038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  120.957887][ T7774] RAX: ffffffffffffffda RBX: 00007fd7149d5fa0 RCX: 00007fd71478ec29
[  120.957892][ T7774] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[  120.957896][ T7774] RBP: 00007fd714811e41 R08: 0000000000000004 R09: 0000000000000000
[  120.957900][ T7774] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  120.957905][ T7774] R13: 00007fd7149d6038 R14: 00007fd7149d5fa0 R15: 00007ffeb09d0488
[  120.957916][ T7774]  </TASK>
[  120.958041][ T7774] Mem-Info:
[  121.074279][ T7774] active_anon:5336 inactive_anon:0 isolated_anon:0
[  121.074279][ T7774]  active_file:13314 inactive_file:38263 isolated_file:0
[  121.074279][ T7774]  unevictable:1768 dirty:407 writeback:0
[  121.074279][ T7774]  slab_reclaimable:9857 slab_unreclaimable:57652
[  121.074279][ T7774]  mapped:18058 shmem:2439 pagetables:910
[  121.074279][ T7774]  sec_pagetables:0 bounce:0
[  121.074279][ T7774]  kernel_misc_reclaimable:0
[  121.074279][ T7774]  free:280387 free_pcp:20737 free_cma:0
[  121.091360][ T7774] Node 0 active_anon:13824kB inactive_anon:0kB active_file:22392kB inactive_file:148096kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:57456kB dirty:1184kB writeback:0kB shmem:5084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5488kB pagetables:2600kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  121.105885][ T7774] Node 1 active_anon:7520kB inactive_anon:0kB active_file:30864kB inactive_file:4956kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:14776kB dirty:444kB writeback:0kB shmem:4672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5992kB pagetables:1040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  121.118852][ T7774] Node 0 DMA free:14628kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:464kB local_pcp:288kB free_cma:0kB
[  121.130940][ T7774] lowmem_reserve[]: 0 811 811 811 811
[  121.134500][ T7774] Node 0 DMA32 free:185920kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13824kB inactive_anon:0kB active_file:22392kB inactive_file:148096kB unevictable:3536kB writepending:1184kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:25180kB local_pcp:13824kB free_cma:0kB
[  121.147948][ T7774] lowmem_reserve[]: 0 0 0 0 0
[  121.150276][ T7774] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  121.165875][ T7774] lowmem_reserve[]: 0 0 854 854 854
[  121.168212][ T7774] Node 1 Normal free:470448kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7520kB inactive_anon:0kB active_file:30864kB inactive_file:4956kB unevictable:3536kB writepending:444kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:49348kB local_pcp:34196kB free_cma:0kB
[  121.181731][ T7774] lowmem_reserve[]: 0 0 0 0 0
[  121.184085][ T7774] Node 0 DMA: 2*4kB (U) 8*8kB (U) 14*16kB (U) 22*32kB (U) 19*64kB (U) 17*128kB (U) 10*256kB (U) 7*512kB (U) 0*1024kB 2*2048kB (UM) 0*4096kB = 14632kB
[  121.190677][ T7774] Node 0 DMA32: 1682*4kB (M) 319*8kB (ME) 204*16kB (UME) 126*32kB (UME) 73*64kB (UME) 38*128kB (UM) 18*256kB (M) 3*512kB (M) 10*1024kB (UM) 14*2048kB (UME) 28*4096kB (U) = 185856kB
[  121.198586][ T7774] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  121.205641][ T7774] Node 1 Normal: 1084*4kB (UME) 860*8kB (UME) 644*16kB (UM) 820*32kB (UME) 375*64kB (UME) 263*128kB (UME) 44*256kB (UM) 25*512kB (UME) 15*1024kB (UME) 5*2048kB (UM) 77*4096kB (UM) = 470480kB
[  121.212160][ T7774] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  121.215884][ T7774] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  121.219099][ T7774] 54016 total pagecache pages
[  121.220926][ T7774] 0 pages in swap cache
[  121.228329][ T7774] Free swap  = 124996kB
[  121.229776][ T7774] Total swap = 124996kB
[  121.231214][ T7774] 786301 pages RAM
[  121.232481][ T7774] 0 pages HighMem/MovableOnly
[  121.235643][ T7774] 241346 pages reserved
[  121.240152][ T7774] 0 pages cma reserved
[  121.273536][ T5897] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.326697][ T7764] chnl_net:caif_netlink_parms(): no params data found
[  121.405328][ T5897] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.480966][ T7779] netlink: 'syz.1.777': attribute type 3 has an invalid length.
[  121.500720][ T7779] netlink: 'syz.1.777': attribute type 1 has an invalid length.
[  121.511025][ T7779] netlink: 191264 bytes leftover after parsing attributes in process `syz.1.777'.
[  121.729776][ T7764] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.733439][ T7764] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.736935][ T7764] bridge_slave_0: entered allmulticast mode
[  121.741169][ T7764] bridge_slave_0: entered promiscuous mode
[  121.793715][ T7764] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.800158][ T7764] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.809393][ T7764] bridge_slave_1: entered allmulticast mode
[  121.815607][ T7764] bridge_slave_1: entered promiscuous mode
[  121.873698][ T5897] bridge_slave_1: left allmulticast mode
[  121.875685][ T5897] bridge_slave_1: left promiscuous mode
[  121.878933][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.889586][ T5897] bridge_slave_0: left allmulticast mode
[  121.892078][ T5897] bridge_slave_0: left promiscuous mode
[  121.896690][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.227173][ T5897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.234554][ T5897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.239914][ T5897] bond0 (unregistering): Released all slaves
[  122.253399][ T5851] Bluetooth: hci2: command tx timeout
[  122.256057][ T7764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.269068][ T7764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.378574][ T7764] team0: Port device team_slave_0 added
[  122.386977][ T7764] team0: Port device team_slave_1 added
[  122.455616][ T7764] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.459400][ T7764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.472389][ T7764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.509078][ T7764] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.511546][ T7764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.521429][ T7764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.599533][ T7764] hsr_slave_0: entered promiscuous mode
[  122.607346][ T7764] hsr_slave_1: entered promiscuous mode
[  122.609627][ T7764] debugfs: 'hsr0' already exists in 'hsr'
[  122.611612][ T7764] Cannot create hsr debugfs directory
[  122.620717][ T5897] hsr_slave_0: left promiscuous mode
[  122.624567][ T5897] hsr_slave_1: left promiscuous mode
[  122.626912][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.629571][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.632902][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.635620][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.657030][ T5897] veth1_macvtap: left promiscuous mode
[  122.659026][ T5897] veth0_macvtap: left promiscuous mode
[  122.661057][ T5897] veth1_vlan: left promiscuous mode
[  122.672785][ T5897] veth0_vlan: left promiscuous mode
[  122.896154][ T7796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.781'.
[  123.123994][ T5897] team0 (unregistering): Port device team_slave_1 removed
[  123.163137][ T5897] team0 (unregistering): Port device team_slave_0 removed
[  124.069065][ T7764] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  124.096088][ T7764] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  124.105856][ T7764] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  124.124380][ T7764] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  124.322151][ T7814] netlink: 20 bytes leftover after parsing attributes in process `syz.1.784'.
[  124.332932][ T5851] Bluetooth: hci2: command tx timeout
[  124.343178][ T7764] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.376397][ T7764] 8021q: adding VLAN 0 to HW filter on device team0
[  124.399160][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.402329][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.435480][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.438118][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.513031][ T7821] netlink: 'syz.1.786': attribute type 6 has an invalid length.
[  124.646676][ T7764] 8021q: adding VLAN 0 to HW filter on device batadv0
[  124.690913][ T7764] veth0_vlan: entered promiscuous mode
[  124.704414][ T7764] veth1_vlan: entered promiscuous mode
[  124.717657][ T7764] veth0_macvtap: entered promiscuous mode
[  124.721832][ T7764] veth1_macvtap: entered promiscuous mode
[  124.749619][ T7764] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.759238][ T7764] batman_adv: batadv0: Interface activated: batadv_slave_1
[  124.767789][ T5897] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.770793][ T5897] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.800950][ T5897] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.806928][ T5897] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.877014][ T3612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.904618][ T3612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.932177][ T3258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.935368][ T3258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.985089][ T7840] netlink: 188 bytes leftover after parsing attributes in process `syz.1.789'.
[  125.172182][ T7853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.792'.
[  125.280610][ T7858] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.793'.
[  125.357019][ T7861] wg2: entered allmulticast mode
[  125.376181][ T7863] netlink: 'syz.3.794': attribute type 3 has an invalid length.
[  125.377320][ T7861] wg2: entered promiscuous mode
[  125.382400][ T7863] netlink: 'syz.3.794': attribute type 1 has an invalid length.
[  125.403331][ T7863] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.794'.
[  125.404098][ T7861] netlink: 36 bytes leftover after parsing attributes in process `syz.1.795'.
[  125.455550][ T7863] netlink: 'syz.3.794': attribute type 8 has an invalid length.
[  125.591011][ T7869] netlink: 1 bytes leftover after parsing attributes in process `syz.3.797'.
[  126.089695][ T7892] netlink: 'syz.3.806': attribute type 11 has an invalid length.
[  126.422913][ T5851] Bluetooth: hci2: command tx timeout
[  127.154921][ T7913] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.815'.
[  127.283973][ T7915] netlink: 40 bytes leftover after parsing attributes in process `syz.3.816'.
[  127.528240][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'.
[  128.366925][ T7915] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.404698][ T7915] bridge_slave_0 (unregistering): left allmulticast mode
[  128.407766][ T7915] bridge_slave_0 (unregistering): left promiscuous mode
[  128.410744][ T7915] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.535154][ T5851] Bluetooth: hci2: command tx timeout
[  129.268901][ T7942] sctp: [Deprecated]: syz.3.826 (pid 7942) Use of struct sctp_assoc_value in delayed_ack socket option.
[  129.268901][ T7942] Use struct sctp_sack_info instead
[  129.338813][ T7944] netlink: 'syz.1.827': attribute type 1 has an invalid length.
[  129.341695][ T7944] netlink: 'syz.1.827': attribute type 4 has an invalid length.
[  129.347360][ T7944] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.827'.
[  129.351416][ T7944] netlink: 'syz.1.827': attribute type 1 has an invalid length.
[  129.355628][ T7944] netlink: 'syz.1.827': attribute type 4 has an invalid length.
[  129.358828][ T7944] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.827'.
[  129.404980][ T7946] lo speed is unknown, defaulting to 1000
[  131.142627][ T7963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  131.149342][ T7963] IPv6: NLM_F_CREATE should be set when creating new route
[  131.157235][ T7963] IPv6: NLM_F_CREATE should be set when creating new route
[  132.262431][ T7982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.838'.
[  132.446556][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  132.453098][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  132.456989][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  132.463443][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  132.467239][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  132.543789][ T7984] lo speed is unknown, defaulting to 1000
[  132.616400][ T5708] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.726292][ T5708] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.736705][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.738869][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.786899][ T7992] netlink: 822 bytes leftover after parsing attributes in process `syz.3.840'.
[  132.790620][ T7992] netlink: 2 bytes leftover after parsing attributes in process `syz.3.840'.
[  132.856950][ T5708] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.945105][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.844'.
[  132.952380][ T5708] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.972270][ T7984] chnl_net:caif_netlink_parms(): no params data found
[  133.192380][ T7984] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.272801][ T7984] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.276102][ T7984] bridge_slave_0: entered allmulticast mode
[  133.294417][ T7984] bridge_slave_0: entered promiscuous mode
[  133.309188][ T7984] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.317695][ T7984] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.334331][ T7984] bridge_slave_1: entered allmulticast mode
[  133.342336][ T7984] bridge_slave_1: entered promiscuous mode
[  133.467887][ T5851] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  133.648942][ T7984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.665766][ T7984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.375548][ T7984] team0: Port device team_slave_0 added
[  134.380887][ T5708] team0: left allmulticast mode
[  134.384392][ T5708] team_slave_0: left allmulticast mode
[  134.386263][ T5708] team_slave_1: left allmulticast mode
[  134.390213][ T5708] bridge0: port 3(team0) entered disabled state
[  134.394283][ T5708] bridge_slave_1: left allmulticast mode
[  134.396192][ T5708] bridge_slave_1: left promiscuous mode
[  134.398380][ T5708] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.404929][ T5708] bridge_slave_0: left allmulticast mode
[  134.406919][ T5708] bridge_slave_0: left promiscuous mode
[  134.408916][ T5708] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.502811][   T54] Bluetooth: hci1: command tx timeout
[  134.527766][ T8023] netlink: 'syz.3.852': attribute type 3 has an invalid length.
[  134.531215][ T8023] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.852'.
[  134.713348][ T8031] netlink: 'syz.1.856': attribute type 10 has an invalid length.
[  134.728488][ T7984] team0: Port device team_slave_1 added
[  134.753916][ T8031] bridge0: port 3(team0) entered disabled state
[  134.757672][ T8031] team0: left allmulticast mode
[  134.760224][ T8031] C: left allmulticast mode
[  134.762096][ T8031] team_slave_1: left allmulticast mode
[  134.765960][ T8031] dummy0: left allmulticast mode
[  134.773747][ T8031] team0: left promiscuous mode
[  134.777066][ T8031] C: left promiscuous mode
[  134.780408][ T8031] team_slave_1: left promiscuous mode
[  134.789178][ T8031] dummy0: left promiscuous mode
[  134.791484][ T8031] bridge0: port 3(team0) entered disabled state
[  134.854287][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.855'.
[  134.925890][ T8031] team0: Cannot enslave team device to itself
[  135.008312][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.011252][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.029346][ T7984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.039895][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.051223][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.066735][ T7984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.226823][ T7984] hsr_slave_0: entered promiscuous mode
[  135.229524][ T7984] hsr_slave_1: entered promiscuous mode
[  135.231851][ T7984] debugfs: 'hsr0' already exists in 'hsr'
[  135.242159][ T7984] Cannot create hsr debugfs directory
[  135.438429][ T5708] hsr_slave_0: left promiscuous mode
[  135.504685][ T5708] hsr_slave_1: left promiscuous mode
[  135.507503][ T5708] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.510669][ T5708] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.532093][ T5708] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.534884][   T54] Bluetooth: hci2: command tx timeout
[  135.543756][ T5708] batman_adv: batadv0: Removing interface: batadv_slave_1
[  135.582019][ T5708] veth1_macvtap: left promiscuous mode
[  135.585660][ T5708] veth0_macvtap: left promiscuous mode
[  135.587968][ T5708] veth1_vlan: left promiscuous mode
[  135.589950][ T5708] veth0_vlan: left promiscuous mode
[  135.624730][ T8048] netlink: 67 bytes leftover after parsing attributes in process `syz.1.859'.
[  135.931060][ T5708] team_slave_1 (unregistering): left promiscuous mode
[  135.939955][ T5708] team0 (unregistering): Port device team_slave_1 removed
[  135.971083][ T5708] team_slave_0 (unregistering): left promiscuous mode
[  135.974430][ T5708] team0 (unregistering): Port device team_slave_0 removed
[  136.491886][ T7984] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  136.526395][ T7984] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  136.526825][ T8066] netlink: 163260 bytes leftover after parsing attributes in process `syz.1.864'.
[  136.551730][ T7984] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  136.573922][   T54] Bluetooth: hci1: command tx timeout
[  136.583461][ T7984] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  136.777253][ T7984] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.810136][ T7984] 8021q: adding VLAN 0 to HW filter on device team0
[  136.810919][ T8085] netlink: 'syz.1.870': attribute type 10 has an invalid length.
[  136.826638][ T8085] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.846333][ T8085] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  136.854344][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.856906][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.880148][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.883142][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.914670][ T8088] netlink: 56 bytes leftover after parsing attributes in process `syz.3.871'.
[  136.917798][ T8088] netlink: 56 bytes leftover after parsing attributes in process `syz.3.871'.
[  137.223888][ T7984] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.807808][ T7984] veth0_vlan: entered promiscuous mode
[  137.817343][ T7984] veth1_vlan: entered promiscuous mode
[  137.845684][ T7984] veth0_macvtap: entered promiscuous mode
[  137.850161][ T7984] veth1_macvtap: entered promiscuous mode
[  137.863379][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_0
[  137.871963][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.886780][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.890814][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.937162][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.952974][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.066322][   T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.070136][   T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.118441][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.121780][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.310774][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.883'.
[  138.349156][ T8147] netlink: 'syz.1.884': attribute type 6 has an invalid length.
[  138.354887][ T8147] netlink: 'syz.1.884': attribute type 1 has an invalid length.
[  138.359359][ T8147] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.884'.
[  138.427673][ T8148] : renamed from gre0 (while UP)
[  138.593503][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.886'.
[  138.654128][   T54] Bluetooth: hci1: command tx timeout
[  138.668805][ T8157] netlink: 'syz.4.888': attribute type 10 has an invalid length.
[  138.679343][ T8157] macvlan0: entered promiscuous mode
[  138.681450][ T8157] macvlan0: entered allmulticast mode
[  138.688148][ T8157] veth1_vlan: entered allmulticast mode
[  138.691542][ T8157] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  138.730153][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'.
[  138.921781][ T8178] netlink: 'syz.4.895': attribute type 10 has an invalid length.
[  138.940402][ T8178] batman_adv: batadv0: Adding interface: hsr_slave_1
[  138.967482][ T8178] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.986884][ T8178] batman_adv: batadv0: Interface activated: hsr_slave_1
[  139.097488][ T8188] sit0: entered allmulticast mode
[  139.111912][ T8188] sit0: entered promiscuous mode
[  139.411319][ T8206] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  139.450315][ T8208] netlink: 'syz.3.900': attribute type 3 has an invalid length.
[  140.361247][ T8218] netlink: 'syz.4.907': attribute type 33 has an invalid length.
[  140.365762][ T8218] __nla_validate_parse: 3 callbacks suppressed
[  140.365771][ T8218] netlink: 152 bytes leftover after parsing attributes in process `syz.4.907'.
[  140.371003][ T8218] mac80211_hwsim hwsim16 : renamed from wlan1 (while UP)
[  140.465686][ T8218] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  140.733022][   T54] Bluetooth: hci1: command tx timeout
[  140.928803][ T8240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.913'.
[  141.089341][ T8248] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.915'.
[  141.100977][ T8245] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.915'.
[  141.109327][ T8248] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.915'.
[  141.284558][ T8250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.916'.
[  141.319262][ T8254] netlink: 60 bytes leftover after parsing attributes in process `syz.1.918'.
[  141.326867][ T8254] netlink: 60 bytes leftover after parsing attributes in process `syz.1.918'.
[  141.330701][ T8256] netlink: 'syz.3.919': attribute type 13 has an invalid length.
[  141.337290][ T8254] netlink: 60 bytes leftover after parsing attributes in process `syz.1.918'.
[  141.386704][ T8260] openvswitch: netlink: Flow actions attr not present in new flow.
[  141.494756][ T8270] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.926'.
[  141.543298][ T8274] netlink: 'syz.4.922': attribute type 1 has an invalid length.
[  142.689513][ T8299] veth0_to_bond: default FDB implementation only supports local addresses
[  142.979636][ T8323] netlink: 'syz.3.946': attribute type 27 has an invalid length.
[  142.984195][ T8323] netlink: 'syz.3.946': attribute type 4 has an invalid length.
[  143.499621][ T8340] wg2: entered promiscuous mode
[  143.501788][ T8340] wg2: entered allmulticast mode
[  144.062269][ T8365] netlink: 'syz.3.963': attribute type 3 has an invalid length.
[  144.859731][ T8377] syzkaller0: entered promiscuous mode
[  144.861656][ T8377] syzkaller0: entered allmulticast mode
[  144.871553][ T8377] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  145.118444][ T8395] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  145.248379][ T8409] netlink: 'syz.3.984': attribute type 8 has an invalid length.
[  145.251540][ T8409] netlink: 'syz.3.984': attribute type 3 has an invalid length.
[  145.490736][ T8427] __nla_validate_parse: 18 callbacks suppressed
[  145.490819][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.991'.
[  145.810167][ T8440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.995'.
[  146.715490][ T8455] netlink: 'syz.1.999': attribute type 13 has an invalid length.
[  146.718789][ T8455] netlink: 'syz.1.999': attribute type 17 has an invalid length.
[  146.795880][ T8468] netlink: 'syz.3.1005': attribute type 1 has an invalid length.
[  146.799653][ T8468] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1005'.
[  146.907358][ T8455] 8021q: adding VLAN 0 to HW filter on device team0
[  146.940277][ T8455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  147.493388][ T8499] netlink: 'syz.1.1018': attribute type 29 has an invalid length.
[  147.858294][ T8528] netlink: 'syz.4.1026': attribute type 1 has an invalid length.
[  147.908585][ T8535] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1029'.
[  147.988462][ T8541] netlink: 'syz.1.1032': attribute type 21 has an invalid length.
[  148.073054][ T8548] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1034'.
[  148.077380][ T8548] netlink: 'syz.4.1034': attribute type 2 has an invalid length.
[  148.080195][ T8548] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1034'.
[  148.097022][ T8548] netlink: 'syz.4.1034': attribute type 2 has an invalid length.
[  148.100302][ T8548] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1034'.
[  148.429664][ T8557] netlink: 'syz.1.1040': attribute type 10 has an invalid length.
[  149.241439][ T8582] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1048'.
[  149.248757][ T8582] netlink: zone id is out of range
[  149.258222][ T8582] netlink: zone id is out of range
[  149.261343][ T8582] netlink: get zone limit has 8 unknown bytes
[  149.484027][ T8598] netlink: 'syz.4.1055': attribute type 23 has an invalid length.
[  149.487240][ T8598] IPv6: NLM_F_CREATE should be specified when creating new route
[  150.634350][ T8626] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1069'.
[  150.921434][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1072'.
[  150.980921][ T8636] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1071'.
[  151.992073][ T8665] validate_nla: 1 callbacks suppressed
[  151.992091][ T8665] netlink: 'syz.3.1080': attribute type 1 has an invalid length.
[  152.151942][ T8676] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1083'.
[  152.163079][ T8674] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1083'.
[  152.169234][ T8674] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1083'.
[  152.228765][ T8673] wg2: left promiscuous mode
[  152.232390][ T8673] wg2: left allmulticast mode
[  152.736029][ T8673] wg2: entered promiscuous mode
[  152.738759][ T8673] wg2: entered allmulticast mode
[  153.450983][ T8699] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.453894][ T8699] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.955225][ T8714] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1099'.
[  154.758089][ T8743] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.888055][ T8754] netlink: zone id is out of range
[  154.890205][ T8754] netlink: del zone limit has 8 unknown bytes
[  154.955519][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1116'.
[  154.969815][ T8761] netlink: 'syz.3.1117': attribute type 1 has an invalid length.
[  154.976772][ T8761] netlink: 376 bytes leftover after parsing attributes in process `syz.3.1117'.
[  155.620769][ T8808] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.751606][ T8823] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  155.757973][ T8823] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  156.122327][   T34] audit: type=1107 audit(1758697568.499:2): pid=8837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  157.215537][ T8874] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1157'.
[  157.224056][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1156'.
[  157.346390][ T8888] netlink: 'syz.4.1163': attribute type 1 has an invalid length.
[  157.389362][ T8894] netlink: 'syz.4.1167': attribute type 21 has an invalid length.
[  157.392269][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1167'.
[  157.687147][   T54] Bluetooth: hci1: Malformed Event: 0x2f
[  157.777457][ T8915] delete_channel: no stack
[  157.779948][ T8915] delete_channel: no stack
[  157.931203][ T8927] netlink: 'syz.4.1181': attribute type 49 has an invalid length.
[  158.081021][ T8933] netlink: 'syz.1.1184': attribute type 46 has an invalid length.
[  158.125656][ T8935] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1185'.
[  158.245471][ T8947] netlink: 'syz.4.1191': attribute type 3 has an invalid length.
[  158.248767][ T8947] netlink: 'syz.4.1191': attribute type 4 has an invalid length.
[  158.252271][ T8947] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.1191'.
[  158.353560][ T8961] netlink: 65027 bytes leftover after parsing attributes in process `syz.4.1197'.
[  159.751345][ T8984] xt_HMARK: spi-set and port-set can't be combined
[  160.055302][   T54] Bluetooth: hci1: ACL packet for unknown connection handle 0
[  160.390670][ T9010] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1218'.
[  162.905341][ T9044] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  163.229307][ T9061] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1240'.
[  164.023248][ T9083] netlink: 22 bytes leftover after parsing attributes in process `syz.4.1250'.
[  164.313471][ T9096] netlink: 'syz.1.1253': attribute type 4 has an invalid length.
[  165.062324][ T9103] netlink: 'syz.3.1257': attribute type 3 has an invalid length.
[  165.065329][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1257'.
[  165.069373][ T9103] netlink: 'syz.3.1257': attribute type 3 has an invalid length.
[  165.075982][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1257'.
[  165.080629][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1257'.
[  165.098538][ T9100] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1256'.
[  165.210721][ T9113] netlink: 948 bytes leftover after parsing attributes in process `syz.1.1262'.
[  165.270537][ T9116] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1263'.
[  165.277465][ T9116] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1263'.
[  165.325987][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1268'.
[  165.943146][ T9158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.087156][ T9162] netlink: 'syz.1.1286': attribute type 9 has an invalid length.
[  167.141162][ T9187] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  167.338938][ T9135] Set syz1 is full, maxelem 65536 reached
[  167.358709][ T9203] netlink: 'syz.3.1305': attribute type 7 has an invalid length.
[  167.960518][ T9235] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  168.425011][ T9251] veth1_macvtap: left promiscuous mode
[  168.427005][ T9251] macsec0: entered allmulticast mode
[  168.436996][ T9251] veth1_macvtap: entered promiscuous mode
[  168.439958][ T9251] veth1_macvtap: entered allmulticast mode
[  168.447180][ T9251] macsec0: entered promiscuous mode
[  168.575911][ T9257] __nla_validate_parse: 9 callbacks suppressed
[  168.576025][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1329'.
[  168.689060][ T9263] netlink: 'syz.3.1331': attribute type 1 has an invalid length.
[  168.815482][ T9272] netlink: 'syz.3.1333': attribute type 11 has an invalid length.
[  168.822787][ T9272] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1333'.
[  168.834292][ T9268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  169.140151][ T9283] netlink: 'syz.1.1340': attribute type 2 has an invalid length.
[  169.146278][ T9283] netlink: 'syz.1.1340': attribute type 8 has an invalid length.
[  169.149405][ T9283] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1340'.
[  169.402015][ T9298] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.541698][ T9306] pim6reg1: entered allmulticast mode
[  169.940711][ T9323] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1357'.
[  169.949412][ T9323] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  169.952153][ T9323] openvswitch: netlink: Duplicate key (type 0).
[  170.631907][ T9353] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1370'.
[  170.762397][ T9362] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1374'.
[  170.767029][ T9364] netlink: 'syz.4.1375': attribute type 21 has an invalid length.
[  170.994939][ T9379] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1379'.
[  170.999358][ T9379] bond_slave_0: entered promiscuous mode
[  171.001858][ T9379] bond_slave_1: entered promiscuous mode
[  171.051981][ T9379] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1379'.
[  171.262258][ T9395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1381'.
[  171.380709][ T9393] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1386'.
[  171.849445][ T9411] netlink: 'syz.4.1392': attribute type 1 has an invalid length.
[  172.040074][ T9429] netlink: 'syz.3.1396': attribute type 10 has an invalid length.
[  172.048126][ T9429] dummy0: entered promiscuous mode
[  172.073768][ T9429] bridge0: port 1(dummy0) entered blocking state
[  172.076543][ T9429] bridge0: port 1(dummy0) entered disabled state
[  172.080161][ T9429] dummy0: entered allmulticast mode
[  172.087284][ T9431] netlink: 'syz.4.1401': attribute type 21 has an invalid length.
[  172.105956][ T9429] bridge0: port 1(dummy0) entered blocking state
[  172.109091][ T9429] bridge0: port 1(dummy0) entered forwarding state
[  172.874484][ T9437] C: renamed from team_slave_0 (while UP)
[  172.878684][ T9437] netlink: 'syz.4.1401': attribute type 4 has an invalid length.
[  172.881590][ T9437] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  173.109994][ T9452] syzkaller0: entered promiscuous mode
[  173.112391][ T9452] syzkaller0: entered allmulticast mode
[  174.185849][ T9459] netlink: 'syz.4.1410': attribute type 39 has an invalid length.
[  176.255939][ T9493] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  176.379656][ T9505] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.431902][ T9511] __nla_validate_parse: 6 callbacks suppressed
[  176.431917][ T9511] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.1432'.
[  176.476211][ T9514] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1433'.
[  176.538479][ T9520] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  176.541766][ T9520] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  176.546782][ T9521] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1437'.
[  176.663027][ T9528] syz.4.1435: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  176.668986][ T9528] CPU: 1 UID: 0 PID: 9528 Comm: syz.4.1435 Not tainted syzkaller #0 PREEMPT(full) 
[  176.668997][ T9528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  176.669002][ T9528] Call Trace:
[  176.669006][ T9528]  <TASK>
[  176.669010][ T9528]  dump_stack_lvl+0x189/0x250
[  176.669031][ T9528]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.669047][ T9528]  ? __pfx__printk+0x10/0x10
[  176.669067][ T9528]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  176.669083][ T9528]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  176.669103][ T9528]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  176.669123][ T9528]  warn_alloc+0x214/0x310
[  176.669147][ T9528]  ? stack_depot_save_flags+0x40/0x860
[  176.669172][ T9528]  ? __pfx_warn_alloc+0x10/0x10
[  176.669197][ T9528]  ? kasan_save_track+0x4f/0x80
[  176.669210][ T9528]  ? xskq_create+0x56/0x170
[  176.669217][ T9528]  ? xsk_init_queue+0xb0/0x110
[  176.669222][ T9528]  ? xsk_setsockopt+0x57b/0x8d0
[  176.669232][ T9528]  ? do_sock_setsockopt+0x17c/0x1b0
[  176.669240][ T9528]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  176.669248][ T9528]  ? do_syscall_64+0xfa/0x3b0
[  176.669255][ T9528]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.669271][ T9528]  __vmalloc_node_range_noprof+0x125/0x12f0
[  176.669313][ T9528]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  176.669331][ T9528]  ? __kasan_kmalloc+0x93/0xb0
[  176.669346][ T9528]  vmalloc_user_noprof+0xad/0xf0
[  176.669358][ T9528]  ? xskq_create+0xbf/0x170
[  176.669367][ T9528]  xskq_create+0xbf/0x170
[  176.669379][ T9528]  xsk_init_queue+0xb0/0x110
[  176.669390][ T9528]  xsk_setsockopt+0x57b/0x8d0
[  176.669405][ T9528]  ? __pfx_xsk_setsockopt+0x10/0x10
[  176.669417][ T9528]  ? __pfx_aa_sk_perm+0x10/0x10
[  176.669434][ T9528]  ? __fget_files+0x2a/0x420
[  176.669440][ T9528]  ? aa_sock_opt_perm+0xff/0x1b0
[  176.669451][ T9528]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  176.669460][ T9528]  ? __pfx_xsk_setsockopt+0x10/0x10
[  176.669473][ T9528]  do_sock_setsockopt+0x17c/0x1b0
[  176.669488][ T9528]  __x64_sys_setsockopt+0x13f/0x1b0
[  176.669504][ T9528]  do_syscall_64+0xfa/0x3b0
[  176.669512][ T9528]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.669520][ T9528]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.669527][ T9528]  ? exc_page_fault+0x9f/0xf0
[  176.669539][ T9528]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.669546][ T9528] RIP: 0033:0x7f40f258ec29
[  176.669554][ T9528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.669561][ T9528] RSP: 002b:00007f40f33ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  176.669570][ T9528] RAX: ffffffffffffffda RBX: 00007f40f27d6090 RCX: 00007f40f258ec29
[  176.669575][ T9528] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000d
[  176.669579][ T9528] RBP: 00007f40f2611e41 R08: 0000000000000004 R09: 0000000000000000
[  176.669584][ T9528] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  176.669588][ T9528] R13: 00007f40f27d6128 R14: 00007f40f27d6090 R15: 00007ffcf785e658
[  176.669612][ T9528]  </TASK>
[  176.669616][ T9528] Mem-Info:
[  176.799018][ T9528] active_anon:9875 inactive_anon:0 isolated_anon:0
[  176.799018][ T9528]  active_file:15267 inactive_file:38286 isolated_file:0
[  176.799018][ T9528]  unevictable:1768 dirty:255 writeback:0
[  176.799018][ T9528]  slab_reclaimable:10105 slab_unreclaimable:73328
[  176.799018][ T9528]  mapped:18124 shmem:2415 pagetables:1268
[  176.799018][ T9528]  sec_pagetables:0 bounce:0
[  176.799018][ T9528]  kernel_misc_reclaimable:0
[  176.799018][ T9528]  free:252560 free_pcp:23481 free_cma:0
[  176.847558][ T9528] Node 0 active_anon:20700kB inactive_anon:0kB active_file:28668kB inactive_file:148168kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:49488kB dirty:780kB writeback:0kB shmem:4960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5552kB pagetables:3016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  176.861453][ T9528] Node 1 active_anon:19028kB inactive_anon:0kB active_file:32400kB inactive_file:4984kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:22968kB dirty:272kB writeback:0kB shmem:4700kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6680kB pagetables:1944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  176.874275][   T34] audit: type=1107 audit(1758697589.249:3): pid=9533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='#?v&ԹI~+#{U=TsamvDP])x}C|
[  176.874275][   T34] CA6cz06YX}Yq̌4Iޓp5BeVSo$<1v.b紛xq,HrNG5[$8L{+=i~{5#r4,;=GfVeuu;){ZK><XmG#zv0{ᑤQTOňFU~ ~z1s^|^eM5R;V?'Ss}_cV4q{ΞO1wXf.(\&vhq7"0B+':񢕎1k8)וv7F>7;ްqSݰ\vqށTFkYҵoZi*0	1->uJ.h`@A)2CEhFTڑC_9C?^LCnM`3@$KqH<Ō03ҢI\1A7$Lo)7_֫hQ, QAl
[  176.874275][   T34] cvm1kOk:tN=,R; wD_b'ɀAM"5qfg]<'ſU	փ]	c!{@6cG|rC(m	T}Z{0.Cӭlt9aԘA$G+4BtU'GVj-	.㢐TkD4V%(ƈ\pEUBd\Ldc}b(hom(m̈awO}
[  176.874275][   T34] ru)aoG7>9NeʇNf4+ePz'*apS(0m9.v!$HDt}1nuR
[  176.875005][ T9528] Node 0 
[  176.881016][ T9534] netlink: 'syz.3.1441': attribute type 1 has an invalid length.
[  176.919597][ T9528] DMA free:14704kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:504kB local_pcp:256kB free_cma:0kB
[  176.919658][ T9528] lowmem_reserve[]: 0 811 811 811 811
[  176.919696][ T9528] Node 0 DMA32 free:215948kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20700kB inactive_anon:0kB active_file:28668kB inactive_file:148168kB unevictable:3536kB writepending:780kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:29200kB local_pcp:11380kB free_cma:0kB
[  176.919739][ T9528] lowmem_reserve[]: 0 0 0 0 0
[  176.919803][ T9528] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  176.919850][ T9528] lowmem_reserve[]: 0 0 854 854 854
[  176.919883][ T9528] Node 1 Normal free:321396kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19096kB inactive_anon:0kB active_file:32400kB inactive_file:4984kB unevictable:3536kB writepending:272kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:64608kB local_pcp:18944kB free_cma:0kB
[  176.919926][ T9528] lowmem_reserve[]: 0 0 0 0 0
[  176.919957][ T9528] Node 0 DMA: 2*4kB (U) 9*8kB (U) 14*16kB (U) 22*32kB (U) 18*64kB (U) 18*128kB (U) 10*256kB (U) 7*512kB (U) 0*1024kB 2*2048kB (UM) 0*4096kB = 14704kB
[  176.920084][ T9528] Node 0 DMA32: 1843*4kB (UM) 550*8kB (UM) 331*16kB (UME) 525*32kB (UME) 109*64kB (UME) 54*128kB (UME) 27*256kB (UME) 13*512kB (U) 15*1024kB (UME) 12*2048kB (UM) 28*4096kB (U) = 215948kB
[  176.920221][ T9528] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  176.920354][ T9528] Node 1 Normal: 529*4kB (UME) 470*8kB (UME) 117*16kB (UME) 449*32kB (UME) 121*64kB (UM) 26*128kB (U) 4*256kB (UME) 15*512kB (U) 17*1024kB (UME) 4*2048kB (UM) 62*4096kB (M) = 321444kB
[  176.920489][ T9528] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  176.920501][ T9528] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  176.920512][ T9528] 55970 total pagecache pages
[  176.920518][ T9528] 0 pages in swap cache
[  176.920524][ T9528] Free swap  = 124996kB
[  176.920649][ T9528] Total swap = 124996kB
[  176.920659][ T9528] 786301 pages RAM
[  176.920665][ T9528] 0 pages HighMem/MovableOnly
[  176.920672][ T9528] 241346 pages reserved
[  176.920677][ T9528] 0 pages cma reserved
[  178.889291][ T9590] netlink: 'syz.1.1466': attribute type 25 has an invalid length.
[  178.892367][ T9590] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.1466'.
[  179.047606][ T9596] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1469'.
[  179.202121][ T9605] delete_channel: no stack
[  179.379303][ T9601] delete_channel: no stack
[  179.650797][ T9619] netlink: 'syz.3.1480': attribute type 2 has an invalid length.
[  179.653649][ T9619] netlink: 'syz.3.1480': attribute type 1 has an invalid length.
[  179.656111][ T9619] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1480'.
[  182.599285][ T9643] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1488'.
[  182.607829][ T9643] netlink: 'syz.3.1488': attribute type 1 has an invalid length.
[  182.724778][ T9653] netlink: 'syz.3.1493': attribute type 13 has an invalid length.
[  182.801161][ T9653] gretap0: refused to change device tx_queue_len
[  182.809796][ T9653] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  183.159134][ T9693] sctp: [Deprecated]: syz.1.1510 (pid 9693) Use of int in maxseg socket option.
[  183.159134][ T9693] Use struct sctp_assoc_value instead
[  183.200979][ T9695] netlink: 'syz.3.1513': attribute type 29 has an invalid length.
[  183.221530][ T9695] netlink: 'syz.3.1513': attribute type 10 has an invalid length.
[  183.229632][ T9695] bond_slave_0: left promiscuous mode
[  183.232162][ T9695] bond_slave_1: left promiscuous mode
[  183.256006][ T9695] bond_slave_0: entered promiscuous mode
[  183.258994][ T9695] bond_slave_1: entered promiscuous mode
[  183.270215][ T9695] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.289102][ T9695] team0: Port device bond0 added
[  183.917918][ T9715] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.1521'.
[  183.931926][ T9715] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.1521'.
[  184.195521][ T9724] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1525'.
[  184.324942][ T9724] hsr_slave_0: left promiscuous mode
[  184.351468][ T9724] hsr_slave_1: left promiscuous mode
[  185.834703][ T9775] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1545'.
[  185.838842][ T9775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1545'.
[  185.911246][ T9777] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1546'.
[  186.034657][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  187.124857][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1570'.
[  187.952300][ T9847] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1578'.
[  188.671069][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1592'.
[  190.417133][ T9936] syzkaller0: entered promiscuous mode
[  190.419698][ T9936] syzkaller0: entered allmulticast mode
[  191.097543][ T9944] netlink: 'syz.1.1619': attribute type 2 has an invalid length.
[  191.100991][ T9944] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1619'.
[  191.212208][ T9950] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1621'.
[  191.215972][ T9950] netlink: zone id is out of range
[  191.218113][ T9950] netlink: zone id is out of range
[  191.239942][ T9950] netlink: zone id is out of range
[  191.242146][ T9950] netlink: zone id is out of range
[  191.283196][ T9950] netlink: zone id is out of range
[  191.291542][ T9950] netlink: zone id is out of range
[  191.305898][ T9950] netlink: zone id is out of range
[  191.308167][ T9950] netlink: zone id is out of range
[  191.310344][ T9950] netlink: zone id is out of range
[  191.340200][ T9950] netlink: zone id is out of range
[  192.841210][ T9991] netlink: 'syz.1.1640': attribute type 2 has an invalid length.
[  192.849366][ T9991] netlink: 'syz.1.1640': attribute type 1 has an invalid length.
[  193.181356][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1647'.
[  193.208167][T10010] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.1648'.
[  193.529641][T10029] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1655'.
[  193.686091][T10036] netlink: 'syz.4.1658': attribute type 1 has an invalid length.
[  193.689283][T10036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1658'.
[  193.777102][T10043] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1661'.
[  193.906890][T10045] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1662'.
[  193.918170][T10058] netlink: 'syz.4.1669': attribute type 10 has an invalid length.
[  193.992114][T10058] team0: Port device  added
[  193.996256][T10061] netlink: 'syz.4.1669': attribute type 11 has an invalid length.
[  193.999290][T10061] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1669'.
[  194.006835][T10057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  194.047584][T10068] netlink: 1053 bytes leftover after parsing attributes in process `syz.4.1673'.
[  194.175506][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.178493][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.195277][T10078] netlink: 628 bytes leftover after parsing attributes in process `syz.3.1677'.
[  194.446264][T10082] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1679'.
[  194.914889][T10087] sit0: left allmulticast mode
[  195.171625][T10101] xt_l2tp: missing protocol rule (udp|l2tpip)
[  195.271869][T10098] netlink: 'syz.4.1686': attribute type 1 has an invalid length.
[  197.432188][T10199] netlink: 'syz.1.1727': attribute type 2 has an invalid length.
[  197.440158][T10199] netlink: 'syz.1.1727': attribute type 3 has an invalid length.
[  197.538004][T10207] netlink: 'syz.4.1731': attribute type 11 has an invalid length.
[  197.556083][T10207] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  197.620884][T10206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  197.836006][   T34] audit: type=1107 audit(1758697610.219:4): pid=10220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  198.326656][T10258] __nla_validate_parse: 7 callbacks suppressed
[  198.326671][T10258] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1754'.
[  198.536936][T10278] netlink: 'syz.4.1764': attribute type 13 has an invalid length.
[  198.889460][T10278] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.892444][T10278] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.091482][T10278] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.156582][T10278] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.288622][T10278] batman_adv: batadv0: Interface deactivated: hsr_slave_1
[  199.665347][T10278] veth1_vlan: left allmulticast mode
[  199.798974][T10278] veth1_macvtap: left allmulticast mode
[  199.908037][ T5897] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.911939][ T5897] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.917679][ T5897] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.921719][ T5897] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  200.117654][T10307] netlink: 'syz.4.1776': attribute type 3 has an invalid length.
[  200.120677][T10307] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1776'.
[  200.124742][T10307] net_ratelimit: 13 callbacks suppressed
[  200.124818][T10307] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  200.254866][T10318] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.532185][ T5851] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10
[  200.870086][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1788'.
[  200.915571][T10340] netlink: 2408 bytes leftover after parsing attributes in process `syz.1.1788'.
[  200.919609][T10340] netlink: 6052 bytes leftover after parsing attributes in process `syz.1.1788'.
[  201.293432][T10351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'.
[  201.297139][T10351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'.
[  201.314417][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1791'.
[  201.385167][T10347] netlink: 'syz.4.1791': attribute type 1 has an invalid length.
[  201.389105][T10347] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1791'.
[  201.416204][T10355] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  201.433377][T10355] netlink: 'syz.3.1795': attribute type 10 has an invalid length.
[  201.452310][T10355] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode
[  201.457120][T10355] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  201.590494][T10363] netlink: 'syz.3.1799': attribute type 2 has an invalid length.
[  201.598317][T10363] netlink: 'syz.3.1799': attribute type 3 has an invalid length.
[  201.602035][T10363] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1799'.
[  202.307996][T10404] openvswitch: netlink: IPv6 tunnel dst address is zero
[  202.407894][T10412] netlink: 'syz.3.1820': attribute type 39 has an invalid length.
[  202.900818][T10438] netlink: 'syz.1.1830': attribute type 9 has an invalid length.
[  203.249236][T10447] netlink: 'syz.4.1834': attribute type 1 has an invalid length.
[  203.515594][T10455] ==================================================================
[  203.519066][T10455] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  203.522493][T10455] Read of size 2 at addr ffff888028da8142 by task syz.4.1838/10455
[  203.526905][T10455] 
[  203.527959][T10455] CPU: 0 UID: 0 PID: 10455 Comm: syz.4.1838 Not tainted syzkaller #0 PREEMPT(full) 
[  203.527976][T10455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  203.527985][T10455] Call Trace:
[  203.527992][T10455]  <TASK>
[  203.527999][T10455]  dump_stack_lvl+0x189/0x250
[  203.528020][T10455]  ? __virt_addr_valid+0x1c8/0x5c0
[  203.528038][T10455]  ? __pfx_dump_stack_lvl+0x10/0x10
[  203.528053][T10455]  ? __virt_addr_valid+0x1c8/0x5c0
[  203.528069][T10455]  ? lock_release+0x4b/0x3e0
[  203.528093][T10455]  ? __virt_addr_valid+0x4a5/0x5c0
[  203.528111][T10455]  print_report+0xca/0x240
[  203.528123][T10455]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  203.528139][T10455]  kasan_report+0x118/0x150
[  203.528160][T10455]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  203.528179][T10455]  __xfrm_state_lookup+0x6ad/0x8d0
[  203.528198][T10455]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  203.528225][T10455]  ? xfrm_state_lookup+0x45/0x1e0
[  203.528242][T10455]  xfrm_state_lookup+0x11e/0x1e0
[  203.528262][T10455]  xfrm_new_ae+0x37d/0x980
[  203.528284][T10455]  ? __pfx_xfrm_new_ae+0x10/0x10
[  203.528303][T10455]  ? apparmor_capable+0x137/0x1b0
[  203.528324][T10455]  ? __nla_parse+0x40/0x60
[  203.528341][T10455]  xfrm_user_rcv_msg+0x7a3/0xab0
[  203.528361][T10455]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  203.528394][T10455]  ? __pfx___mutex_trylock_common+0x10/0x10
[  203.528409][T10455]  ? irqentry_enter+0x3d/0x60
[  203.528424][T10455]  ? rcu_is_watching+0x15/0xb0
[  203.528438][T10455]  ? trace_contention_end+0x39/0x120
[  203.528453][T10455]  ? __mutex_lock+0x335/0x1350
[  203.528469][T10455]  netlink_rcv_skb+0x208/0x470
[  203.528484][T10455]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  203.528502][T10455]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  203.528552][T10455]  ? netlink_deliver_tap+0x2e/0x1b0
[  203.528566][T10455]  ? netlink_deliver_tap+0x2e/0x1b0
[  203.528581][T10455]  xfrm_netlink_rcv+0x79/0x90
[  203.528600][T10455]  netlink_unicast+0x82f/0x9e0
[  203.528625][T10455]  ? __pfx_netlink_unicast+0x10/0x10
[  203.528646][T10455]  ? netlink_sendmsg+0x642/0xb30
[  203.528658][T10455]  ? skb_put+0x11b/0x210
[  203.528676][T10455]  netlink_sendmsg+0x805/0xb30
[  203.528696][T10455]  ? __pfx_netlink_sendmsg+0x10/0x10
[  203.528712][T10455]  ? aa_sock_msg_perm+0xf1/0x1d0
[  203.528727][T10455]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  203.528741][T10455]  ? __pfx_netlink_sendmsg+0x10/0x10
[  203.528754][T10455]  __sock_sendmsg+0x21c/0x270
[  203.528776][T10455]  ____sys_sendmsg+0x505/0x830
[  203.528794][T10455]  ? __pfx_____sys_sendmsg+0x10/0x10
[  203.528814][T10455]  ? import_iovec+0x74/0xa0
[  203.528832][T10455]  ___sys_sendmsg+0x21f/0x2a0
[  203.528849][T10455]  ? __pfx____sys_sendmsg+0x10/0x10
[  203.528874][T10455]  ? __fget_files+0x2a/0x420
[  203.528892][T10455]  ? __fget_files+0x2a/0x420
[  203.528902][T10455]  ? __fget_files+0x3a0/0x420
[  203.528918][T10455]  __x64_sys_sendmsg+0x19b/0x260
[  203.528935][T10455]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  203.528957][T10455]  ? rcu_is_watching+0x15/0xb0
[  203.528969][T10455]  ? trace_sys_enter+0x25/0x100
[  203.528990][T10455]  do_syscall_64+0xfa/0x3b0
[  203.529005][T10455]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.529018][T10455]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  203.529033][T10455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.529046][T10455] RIP: 0033:0x7f40f258ec29
[  203.529059][T10455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  203.529070][T10455] RSP: 002b:00007f40f340b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  203.529086][T10455] RAX: ffffffffffffffda RBX: 00007f40f27d5fa0 RCX: 00007f40f258ec29
[  203.529095][T10455] RDX: 0000000000000090 RSI: 0000200000000300 RDI: 000000000000000d
[  203.529103][T10455] RBP: 00007f40f2611e41 R08: 0000000000000000 R09: 0000000000000000
[  203.529111][T10455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  203.529118][T10455] R13: 00007f40f27d6038 R14: 00007f40f27d5fa0 R15: 00007ffcf785e658
[  203.529136][T10455]  </TASK>
[  203.529141][T10455] 
[  203.694284][T10455] Allocated by task 8339:
[  203.696150][T10455]  kasan_save_track+0x3e/0x80
[  203.698177][T10455]  __kasan_slab_alloc+0x6c/0x80
[  203.700308][T10455]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  203.702649][T10455]  xfrm_state_alloc+0x24/0x2f0
[  203.704682][T10455]  __find_acq_core+0x8a7/0x1c00
[  203.706651][T10455]  xfrm_find_acq+0x78/0xa0
[  203.708536][T10455]  xfrm_alloc_userspi+0x6b3/0xc90
[  203.710564][T10455]  xfrm_user_rcv_msg+0x7a3/0xab0
[  203.712633][T10455]  netlink_rcv_skb+0x208/0x470
[  203.714656][T10455]  xfrm_netlink_rcv+0x79/0x90
[  203.716661][T10455]  netlink_unicast+0x82f/0x9e0
[  203.718685][T10455]  netlink_sendmsg+0x805/0xb30
[  203.720747][T10455]  __sock_sendmsg+0x21c/0x270
[  203.722784][T10455]  ____sys_sendmsg+0x505/0x830
[  203.724888][T10455]  ___sys_sendmsg+0x21f/0x2a0
[  203.726904][T10455]  __x64_sys_sendmsg+0x19b/0x260
[  203.729154][T10455]  do_syscall_64+0xfa/0x3b0
[  203.731121][T10455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.733728][T10455] 
[  203.734734][T10455] Freed by task 9:
[  203.736370][T10455]  kasan_save_track+0x3e/0x80
[  203.738425][T10455]  kasan_save_free_info+0x46/0x50
[  203.740651][T10455]  __kasan_slab_free+0x5b/0x80
[  203.742738][T10455]  kmem_cache_free+0x18f/0x400
[  203.744841][T10455]  xfrm_state_gc_task+0x52d/0x6b0
[  203.746941][T10455]  process_scheduled_works+0xae1/0x17b0
[  203.749311][T10455]  worker_thread+0x8a0/0xda0
[  203.751334][T10455]  kthread+0x711/0x8a0
[  203.753111][T10455]  ret_from_fork+0x439/0x7d0
[  203.755153][T10455]  ret_from_fork_asm+0x1a/0x30
[  203.757230][T10455] 
[  203.758284][T10455] The buggy address belongs to the object at ffff888028da8000
[  203.758284][T10455]  which belongs to the cache xfrm_state of size 928
[  203.764121][T10455] The buggy address is located 322 bytes inside of
[  203.764121][T10455]  freed 928-byte region [ffff888028da8000, ffff888028da83a0)
[  203.769691][T10455] 
[  203.770710][T10455] The buggy address belongs to the physical page:
[  203.773465][T10455] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28da8
[  203.777171][T10455] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  203.780748][T10455] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  203.783993][T10455] page_type: f5(slab)
[  203.785732][T10455] raw: 00fff00000000040 ffff88801bb01c80 dead000000000122 0000000000000000
[  203.789389][T10455] raw: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  203.793060][T10455] head: 00fff00000000040 ffff88801bb01c80 dead000000000122 0000000000000000
[  203.796777][T10455] head: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  203.800394][T10455] head: 00fff00000000002 ffffea0000a36a01 00000000ffffffff 00000000ffffffff
[  203.804030][T10455] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  203.807643][T10455] page dumped because: kasan: bad access detected
[  203.810388][T10455] page_owner tracks the page as allocated
[  203.812830][T10455] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6163, tgid 6162 (syz.1.108), ts 73019038553, free_ts 65581059692
[  203.820710][T10455]  post_alloc_hook+0x240/0x2a0
[  203.822817][T10455]  get_page_from_freelist+0x21e4/0x22c0
[  203.825136][T10455]  __alloc_frozen_pages_noprof+0x181/0x370
[  203.827674][T10455]  alloc_pages_mpol+0x232/0x4a0
[  203.829778][T10455]  allocate_slab+0x8a/0x370
[  203.831756][T10455]  ___slab_alloc+0xbeb/0x1420
[  203.833789][T10455]  kmem_cache_alloc_noprof+0x283/0x3c0
[  203.836143][T10455]  xfrm_state_alloc+0x24/0x2f0
[  203.838196][T10455]  __find_acq_core+0x8a7/0x1c00
[  203.840244][T10455]  xfrm_find_acq+0x78/0xa0
[  203.842174][T10455]  xfrm_alloc_userspi+0x6b3/0xc90
[  203.844316][T10455]  xfrm_user_rcv_msg+0x7a3/0xab0
[  203.846336][T10455]  netlink_rcv_skb+0x208/0x470
[  203.848369][T10455]  xfrm_netlink_rcv+0x79/0x90
[  203.850411][T10455]  netlink_unicast+0x82f/0x9e0
[  203.852481][T10455]  netlink_sendmsg+0x805/0xb30
[  203.854533][T10455] page last free pid 5915 tgid 5914 stack trace:
[  203.857174][T10455]  __free_frozen_pages+0xbc4/0xd30
[  203.859380][T10455]  stack_depot_save_flags+0x436/0x860
[  203.861729][T10455]  kasan_save_track+0x4f/0x80
[  203.863749][T10455]  __kasan_kmalloc+0x93/0xb0
[  203.865742][T10455]  __kmalloc_node_noprof+0x276/0x4e0
[  203.868005][T10455]  alloc_slab_obj_exts+0x39/0xa0
[  203.870140][T10455]  __memcg_slab_post_alloc_hook+0x31e/0x7f0
[  203.872651][T10455]  __kmalloc_noprof+0x341/0x4f0
[  203.874721][T10455]  __register_sysctl_table+0x72/0x1340
[  203.877014][T10455]  neigh_sysctl_register+0x9a2/0xa80
[  203.879249][T10455]  devinet_sysctl_register+0xad/0x200
[  203.881529][T10455]  inetdev_init+0x2b4/0x500
[  203.883464][T10455]  inetdev_event+0x301/0x15b0
[  203.885461][T10455]  notifier_call_chain+0x1b6/0x3e0
[  203.887667][T10455]  register_netdevice+0x1608/0x1ae0
[  203.889880][T10455]  tun_set_iff+0x844/0xef0
[  203.891813][T10455] 
[  203.892862][T10455] Memory state around the buggy address:
[  203.895223][T10455]  ffff888028da8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  203.898482][T10455]  ffff888028da8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  203.901802][T10455] >ffff888028da8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  203.905131][T10455]                                            ^
[  203.907750][T10455]  ffff888028da8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  203.911072][T10455]  ffff888028da8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  203.914361][T10455] ==================================================================
[  203.929402][   T26] wlan1: Trigger new scan to find an IBSS to join
[  203.942894][T10455] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  203.945901][T10455] CPU: 1 UID: 0 PID: 10455 Comm: syz.4.1838 Not tainted syzkaller #0 PREEMPT(full) 
[  203.949760][T10455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  203.953856][T10455] Call Trace:
[  203.955344][T10455]  <TASK>
[  203.956669][T10455]  dump_stack_lvl+0x99/0x250
[  203.958686][T10455]  ? __asan_memcpy+0x40/0x70
[  203.960678][T10455]  ? __pfx_dump_stack_lvl+0x10/0x10
[  203.962961][T10455]  ? __pfx__printk+0x10/0x10
[  203.965020][T10455]  vpanic+0x281/0x750
[  203.966776][T10455]  ? __pfx_vpanic+0x10/0x10
[  203.968755][T10455]  ? preempt_schedule+0xae/0xc0
[  203.970796][T10455]  ? __pfx_preempt_schedule+0x10/0x10
[  203.973061][T10455]  panic+0xb9/0xc0
[  203.974657][T10455]  ? __pfx_panic+0x10/0x10
[  203.976607][T10455]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  203.979135][T10455]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  203.981355][T10455]  check_panic_on_warn+0x89/0xb0
[  203.983482][T10455]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  203.985791][T10455]  end_report+0x78/0x160
[  203.987654][T10455]  kasan_report+0x129/0x150
[  203.989625][T10455]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  203.991936][T10455]  __xfrm_state_lookup+0x6ad/0x8d0
[  203.994114][T10455]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  203.996467][T10455]  ? xfrm_state_lookup+0x45/0x1e0
[  203.998656][T10455]  xfrm_state_lookup+0x11e/0x1e0
[  204.000718][T10455]  xfrm_new_ae+0x37d/0x980
[  204.002555][T10455]  ? __pfx_xfrm_new_ae+0x10/0x10
[  204.004685][T10455]  ? apparmor_capable+0x137/0x1b0
[  204.006818][T10455]  ? __nla_parse+0x40/0x60
[  204.008704][T10455]  xfrm_user_rcv_msg+0x7a3/0xab0
[  204.010779][T10455]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  204.013211][T10455]  ? __pfx___mutex_trylock_common+0x10/0x10
[  204.015642][T10455]  ? irqentry_enter+0x3d/0x60
[  204.017443][T10455]  ? rcu_is_watching+0x15/0xb0
[  204.019386][T10455]  ? trace_contention_end+0x39/0x120
[  204.021426][T10455]  ? __mutex_lock+0x335/0x1350
[  204.023203][T10455]  netlink_rcv_skb+0x208/0x470
[  204.025132][T10455]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  204.027044][T10455]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  204.029081][T10455]  ? netlink_deliver_tap+0x2e/0x1b0
[  204.030880][T10455]  ? netlink_deliver_tap+0x2e/0x1b0
[  204.032735][T10455]  xfrm_netlink_rcv+0x79/0x90
[  204.034436][T10455]  netlink_unicast+0x82f/0x9e0
[  204.036375][T10455]  ? __pfx_netlink_unicast+0x10/0x10
[  204.038357][T10455]  ? netlink_sendmsg+0x642/0xb30
[  204.039978][T10455]  ? skb_put+0x11b/0x210
[  204.041441][T10455]  netlink_sendmsg+0x805/0xb30
[  204.043340][T10455]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.045112][T10455]  ? aa_sock_msg_perm+0xf1/0x1d0
[  204.046882][T10455]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  204.048593][T10455]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.050348][T10455]  __sock_sendmsg+0x21c/0x270
[  204.052052][T10455]  ____sys_sendmsg+0x505/0x830
[  204.053752][T10455]  ? __pfx_____sys_sendmsg+0x10/0x10
[  204.055573][T10455]  ? import_iovec+0x74/0xa0
[  204.057138][T10455]  ___sys_sendmsg+0x21f/0x2a0
[  204.058717][T10455]  ? __pfx____sys_sendmsg+0x10/0x10
[  204.060629][T10455]  ? __fget_files+0x2a/0x420
[  204.062401][T10455]  ? __fget_files+0x2a/0x420
[  204.064180][T10455]  ? __fget_files+0x3a0/0x420
[  204.065925][T10455]  __x64_sys_sendmsg+0x19b/0x260
[  204.067586][T10455]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  204.069346][T10455]  ? rcu_is_watching+0x15/0xb0
[  204.070905][T10455]  ? trace_sys_enter+0x25/0x100
[  204.072502][T10455]  do_syscall_64+0xfa/0x3b0
[  204.074071][T10455]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.076049][T10455]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  204.078045][T10455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.079989][T10455] RIP: 0033:0x7f40f258ec29
[  204.081563][T10455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  204.088532][T10455] RSP: 002b:00007f40f340b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  204.091678][T10455] RAX: ffffffffffffffda RBX: 00007f40f27d5fa0 RCX: 00007f40f258ec29
[  204.094815][T10455] RDX: 0000000000000090 RSI: 0000200000000300 RDI: 000000000000000d
[  204.097437][T10455] RBP: 00007f40f2611e41 R08: 0000000000000000 R09: 0000000000000000
[  204.100331][T10455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  204.103105][T10455] R13: 00007f40f27d6038 R14: 00007f40f27d5fa0 R15: 00007ffcf785e658
[  204.106402][T10455]  </TASK>
[  204.108558][T10455] Kernel Offset: disabled
[  204.110340][T10455] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:06:56  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001245 RDI=0000000000001246 RBP=00000000000003f8 RSP=ffffc90006a169f0
R8 =ffff8881064c8237 R9 =1ffff11020c99046 R10=dffffc0000000000 R11=ffffffff854f91c0
R12=dffffc0000000000 R13=ffffffff99b008eb R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f923c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f40f340b6c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000003e9f4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=ffffffffffffffff ffffffffffffffff XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007f40f27a7478 00007f40f27a74c0
XMM06=00007f40f27a74b8 00007f40f27a74b0 XMM07=00007f40f27a74a8 00007f40f27a74a0
XMM08=0000000000000000 00007f40f2612f0f XMM09=0000000000000000 00007f40f2612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000006ad06 RBX=ffff888136623900 RCX=0000000000000838 RDX=0000000000000000
RSI=000000000006ad06 RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc900001e0e50
R8 =0000000000000000 R9 =ffffffff81ae150e R10=0000000000000003 R11=ffffffff81704490
R12=000000000fffea30 R13=dffffc0000000000 R14=000000000006ad06 R15=0000000000000020
RIP=ffffffff81717179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558128c500 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=00000000412d2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f40f2612e7b
XMM06=0000000000000000 00007f40f2612e75 XMM07=0000000000000000 00007f40f2612e89
XMM08=0000000000000000 00007f40f2612f0f XMM09=0000000000000000 00007f40f2612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
