last executing test programs:

1.831834786s ago: executing program 1 (id=7298):
socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5)
write$cgroup_subtree(r2, &(0x7f0000000a00)=ANY=[@ANYBLOB='-cpu'], 0x5)
r3 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f00000001c0), 0x9)

1.705320927s ago: executing program 1 (id=7302):
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x4, 0x53, 0x4, 0x7b, @dev={0xfe, 0x80, '\x00', 0x28}, @mcast2={0xff, 0x5}, 0x8, 0x700, 0x40007d, 0x7f}})

1.705148239s ago: executing program 1 (id=7303):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x56)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
read$alg(r1, &(0x7f0000000cc0)=""/4084, 0x835)
sendmmsg$alg(r1, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000600)="faab78d5e4201d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c02080809000000000000009cd1df31c662ff364cbace61fcb7e067b266f3fed7c325d75bd964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6f0ce625cddf3ac464cae067dc59d", 0x73}, {&(0x7f0000002300)="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", 0x651}], 0x3, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x4000080)

1.149308071s ago: executing program 2 (id=7306):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

1.086317905s ago: executing program 2 (id=7307):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)

1.086008138s ago: executing program 2 (id=7308):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffdfe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

836.20312ms ago: executing program 1 (id=7310):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0)

836.018552ms ago: executing program 1 (id=7311):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0)

191.81682ms ago: executing program 2 (id=7312):
r0 = socket$kcm(0x10, 0x2, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x300000f, 0x141050, r0, 0x274ff000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x28, r2, 0x1, 0xfffffd, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x80)

191.498393ms ago: executing program 1 (id=7313):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r3, 0x0, &(0x7f0000000a80))
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r5, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$inet(r6, &(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r7)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r7)
pipe(&(0x7f0000000000))
r8 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000000080)={0x4, 0xfc}, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x20}}, 0x1c}}, 0x0)
sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0)

187.356556ms ago: executing program 2 (id=7314):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b80000000000020000000f2080000933c0cb56f22002ae340e255da81776e", @ANYRES64=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRESDEC], 0x50)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}})
ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000080)={'veth1_to_bridge\x00', {0x2, 0x4000, @empty=0xfe000000}})
r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c02", @ANYRES16=<r7=>0xffffffffffffffff, @ANYRES16=r5], 0x21c}}, 0x0)
r8 = getpid()
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="891090000000000095", @ANYRESDEC=r7], &(0x7f0000000280)='GPL\x00', 0x359, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x3c}}, 0x0)
write$cgroup_pid(r5, &(0x7f00000006c0)=r8, 0x12)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a22a40016000000b30000007f00001e00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB='\x00'/28], 0x50)
close(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="ffffff8d0100"})
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRESHEX=0x0], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040810)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="030001000600000000000002100000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000064030000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[], 0x74}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x4010, r0, 0x425dd000)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4000}, 0x18)

174.617054ms ago: executing program 0 (id=7315):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5800000000000008002e00feffb0a0"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

110.889137ms ago: executing program 0 (id=7316):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r0, @ANYRES64=r1, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0)

110.716509ms ago: executing program 0 (id=7317):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newsa={0x13c, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@empty, @in=@private=0xa010100, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x80, 0x3b}, {@in=@private=0xa010102, 0x0, 0x32}, @in=@multicast1, {0x3ff, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x80000, 0x81}, {0x3, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80020}, 0x100000, 0x4000, 0xa, 0x0, 0x81, 0x68}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0)

15.906672ms ago: executing program 0 (id=7318):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000002000018200000", @ANYRES32=r0, @ANYBLOB="00000000000000006200f8ff0000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xdd, &(0x7f00000001c0)=""/221, 0x0, 0x20}, 0x94)

15.648596ms ago: executing program 0 (id=7319):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2d75000)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r0, 0x104, 0x7, &(0x7f0000000000)=0x6000, 0xfffa)

3.422645ms ago: executing program 0 (id=7320):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000006c0)=@raw=[@ldst={0x3, 0x2, 0x6, 0x9, 0x5, 0x4, 0x10}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x6}], 0x0}, 0x94)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000)

0s ago: executing program 2 (id=7321):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

kernel console output (not intermixed with test programs):

ller0>
[  104.858531][T10061] tipc: Disabling bearer <eth:syzkaller0>
[  105.066833][T10085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1855'.
[  105.078279][T10087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1856'.
[  105.085960][T10087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1856'.
[  105.151647][T10095] bond0: (slave vlan2): Opening slave failed
[  105.263362][T10111] netlink: 'syz.2.1868': attribute type 7 has an invalid length.
[  105.295931][T10115] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1870'.
[  105.320628][T10113] netlink: 'syz.0.1869': attribute type 8 has an invalid length.
[  105.340860][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1873'.
[  105.454486][T10139] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  105.475553][T10143] netlink: 'syz.1.1884': attribute type 10 has an invalid length.
[  105.479191][T10143] netlink: 'syz.1.1884': attribute type 10 has an invalid length.
[  105.628759][T10156] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.634684][T10156] syzkaller0: entered promiscuous mode
[  105.636981][T10156] syzkaller0: entered allmulticast mode
[  105.643420][T10156] tipc: Resetting bearer <eth:syzkaller0>
[  105.646336][T10155] tipc: Resetting bearer <eth:syzkaller0>
[  105.648920][T10155] tipc: Disabling bearer <eth:syzkaller0>
[  105.655666][T10162] !: renamed from dummy0 (while UP)
[  105.813500][T10175] lo speed is unknown, defaulting to 1000
[  105.865435][T10175] vxcan1 speed is unknown, defaulting to 1000
[  106.533306][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1901'.
[  106.536599][T10259] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1901'.
[  107.228022][T10294] netlink: 'syz.2.1914': attribute type 10 has an invalid length.
[  107.233428][T10294] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.238714][T10294] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  107.343454][T10294] syz.2.1914 (10294) used greatest stack depth: 18928 bytes left
[  107.406700][T10302] netlink: 'syz.2.1918': attribute type 2 has an invalid length.
[  107.514731][T10308] netlink: 'syz.2.1921': attribute type 1 has an invalid length.
[  107.517689][T10308] netlink: 'syz.2.1921': attribute type 2 has an invalid length.
[  107.568441][T10310] lo speed is unknown, defaulting to 1000
[  107.635283][T10310] vxcan1 speed is unknown, defaulting to 1000
[  107.737778][T10324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.928956][T10339] vlan2: entered promiscuous mode
[  107.935655][T10339] batadv0: entered promiscuous mode
[  107.975886][T10341] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.980548][T10341] syzkaller0: entered promiscuous mode
[  107.982879][T10341] syzkaller0: entered allmulticast mode
[  107.996590][T10341] tipc: Resetting bearer <eth:syzkaller0>
[  108.003434][T10340] tipc: Resetting bearer <eth:syzkaller0>
[  108.007150][T10340] tipc: Disabling bearer <eth:syzkaller0>
[  108.225836][T10363] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) !
[  108.344805][T10369] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.348771][T10369] syzkaller0: entered promiscuous mode
[  108.351311][T10369] syzkaller0: entered allmulticast mode
[  108.365624][T10369] tipc: Resetting bearer <eth:syzkaller0>
[  108.376357][T10368] tipc: Resetting bearer <eth:syzkaller0>
[  108.381560][T10368] tipc: Disabling bearer <eth:syzkaller0>
[  108.411302][T10374] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.414987][T10374] syzkaller0: entered promiscuous mode
[  108.417335][T10374] syzkaller0: entered allmulticast mode
[  108.433157][T10374] tipc: Resetting bearer <eth:syzkaller0>
[  108.442959][T10373] tipc: Resetting bearer <eth:syzkaller0>
[  108.451353][T10373] tipc: Disabling bearer <eth:syzkaller0>
[  108.460155][T10376] netlink: 'syz.0.1952': attribute type 16 has an invalid length.
[  108.475633][T10376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.686362][T10395] netlink: zone id is out of range
[  108.688648][T10395] netlink: zone id is out of range
[  108.692741][T10395] netlink: zone id is out of range
[  108.695053][T10395] netlink: zone id is out of range
[  108.698204][T10395] netlink: zone id is out of range
[  108.703036][T10395] netlink: zone id is out of range
[  108.705171][T10395] netlink: zone id is out of range
[  108.707370][T10395] netlink: zone id is out of range
[  109.548591][T10460] net_ratelimit: 13 callbacks suppressed
[  109.548607][T10460] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  109.628966][T10465] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4.
[  109.877694][T10491] lo speed is unknown, defaulting to 1000
[  109.916585][T10491] vxcan1 speed is unknown, defaulting to 1000
[  110.166963][T10506] __nla_validate_parse: 8 callbacks suppressed
[  110.166978][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2011'.
[  110.205044][T10506] smc: removing ib device syz2
[  110.383828][T10527] validate_nla: 2 callbacks suppressed
[  110.383843][T10527] netlink: 'syz.0.2017': attribute type 1 has an invalid length.
[  110.388709][T10527] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2017'.
[  110.428003][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2018'.
[  110.460514][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2018'.
[  110.478739][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2018'.
[  110.501689][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2018'.
[  110.578058][T10543] netlink: 'syz.0.2023': attribute type 1 has an invalid length.
[  110.593353][T10543] 8021q: adding VLAN 0 to HW filter on device bond1
[  110.603761][T10543] bond1: (slave geneve2): making interface the new active one
[  110.607654][T10543] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  110.641540][T10543] syz.0.2023 (10543) used greatest stack depth: 18216 bytes left
[  110.664156][T10556] openvswitch: netlink: IP tunnel dst address not specified
[  110.803972][T10576] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  110.807203][T10576] IPv6: NLM_F_CREATE should be set when creating new route
[  110.810289][T10576] IPv6: NLM_F_CREATE should be set when creating new route
[  110.830094][T10576] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  110.917034][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2040'.
[  111.104562][T10595] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2044'.
[  111.134439][T10601] netlink: 'syz.0.2048': attribute type 11 has an invalid length.
[  111.269703][T10617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2057'.
[  111.285355][T10626] netlink: 'syz.2.2060': attribute type 4 has an invalid length.
[  111.363733][T10634] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2063'.
[  111.483008][T10652] : renamed from vlan1 (while UP)
[  111.685644][T10678] delete_channel: no stack
[  112.020668][T10706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  112.182200][T10718] netlink: 'syz.0.2098': attribute type 1 has an invalid length.
[  112.492215][T10757] tipc: Can't bind to reserved service type 0
[  112.656644][T10769] lo speed is unknown, defaulting to 1000
[  113.987954][T10841] netlink: 'syz.1.2153': attribute type 1 has an invalid length.
[  114.453523][T10893] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.460476][T10893] syzkaller0: entered promiscuous mode
[  114.462601][T10893] syzkaller0: entered allmulticast mode
[  114.472257][T10893] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  114.479711][T10893] tipc: Resetting bearer <eth:syzkaller0>
[  114.482988][T10892] tipc: Resetting bearer <eth:syzkaller0>
[  114.497385][T10892] tipc: Disabling bearer <eth:syzkaller0>
[  114.497881][T10897] netlink: 'syz.0.2181': attribute type 2 has an invalid length.
[  114.585482][T10907] netlink: 'syz.1.2186': attribute type 5 has an invalid length.
[  114.683119][T10921] netlink: 'syz.0.2191': attribute type 11 has an invalid length.
[  114.694871][T10920] netlink: 'syz.1.2192': attribute type 1 has an invalid length.
[  114.737994][T10927] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.744048][T10927] syzkaller0: entered promiscuous mode
[  114.745920][T10927] syzkaller0: entered allmulticast mode
[  114.754533][T10927] tipc: Resetting bearer <eth:syzkaller0>
[  114.758845][T10926] tipc: Resetting bearer <eth:syzkaller0>
[  114.766012][T10926] tipc: Disabling bearer <eth:syzkaller0>
[  115.046145][T10961] delete_channel: no stack
[  115.123500][ T5904] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.129436][ T5904] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.132629][ T5904] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.135638][ T5904] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.139133][ T5904] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.145808][ T5904] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.152093][ T5904] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.155939][ T5904] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.241519][T10972] __nla_validate_parse: 13 callbacks suppressed
[  115.241536][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2215'.
[  115.289135][T10978] vlan2: entered allmulticast mode
[  115.292152][T10978] dummy0: entered allmulticast mode
[  115.528566][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2228'.
[  115.590122][T11008] syzkaller0: entered promiscuous mode
[  115.592481][T11008] syzkaller0: entered allmulticast mode
[  115.828947][T11033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2245'.
[  115.832937][T11033] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.836573][T11033] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.845557][T11033] bond0: (slave batadv0): Releasing backup interface
[  115.872280][T11047] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2250'.
[  115.970119][T11057] syzkaller1: entered promiscuous mode
[  115.972698][T11057] syzkaller1: entered allmulticast mode
[  117.074823][T11093] lo speed is unknown, defaulting to 1000
[  117.158162][T11105] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  117.162290][T11105] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  117.665626][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'.
[  117.674473][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'.
[  117.733810][T11118] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2280'.
[  117.922747][T11127] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  117.930330][T11127] bond1: (slave geneve2): Releasing active interface
[  117.944774][T11127] netlink: 'syz.0.2284': attribute type 10 has an invalid length.
[  117.948221][T11127] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  117.953195][T11127] wlan1: mtu less than device minimum
[  117.956026][T11127] bond0: (slave wlan1): Error -22 calling dev_set_mtu
[  117.963290][T11127] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  117.967172][T11127] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  118.281245][T11133] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2287'.
[  118.337222][T11134] batadv_slave_0: entered promiscuous mode
[  118.778875][T11143] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2291'.
[  118.959380][T11153] netlink: 'syz.0.2295': attribute type 11 has an invalid length.
[  119.176486][T11186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2311'.
[  119.226318][T11194] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.247054][T11194] syzkaller0: entered promiscuous mode
[  119.249194][T11194] syzkaller0: entered allmulticast mode
[  119.264057][T11194] tipc: Resetting bearer <eth:syzkaller0>
[  119.268275][T11193] tipc: Resetting bearer <eth:syzkaller0>
[  119.306447][T11193] tipc: Disabling bearer <eth:syzkaller0>
[  119.421648][T11203] netlink: 'syz.0.2319': attribute type 12 has an invalid length.
[  119.596084][T11221] lo speed is unknown, defaulting to 1000
[  120.081572][T11240] lo speed is unknown, defaulting to 1000
[  120.222637][ T5713] nci: nci_rx_work: unknown MT 0x1
[  120.433473][T11249] __nla_validate_parse: 4 callbacks suppressed
[  120.433491][T11249] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2336'.
[  120.911363][T11271] netlink: 'syz.2.2346': attribute type 9 has an invalid length.
[  120.965487][T11277] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2348'.
[  121.009917][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2354'.
[  121.014169][T11287] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2353'.
[  121.095209][T11293] netlink: 'syz.0.2357': attribute type 1 has an invalid length.
[  121.136409][T11293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2357'.
[  121.352378][T11308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2362'.
[  121.355662][T11308] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2362'.
[  121.544640][T11317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2366'.
[  121.548275][T11317] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.573722][T11319] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2367'.
[  121.631446][T11325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2370'.
[  122.028963][T11345] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.032592][T11344] tipc: Resetting bearer <eth:syzkaller0>
[  122.064468][T11344] tipc: Disabling bearer <eth:syzkaller0>
[  122.570244][T11374] lo speed is unknown, defaulting to 1000
[  124.011521][T11460] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  125.463964][T11544] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  125.503185][T11544] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  125.556534][T11544] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  125.613196][T11544] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  125.661583][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  125.669312][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  125.681209][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  125.685000][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  125.734014][T11581] lo speed is unknown, defaulting to 1000
[  125.843827][T11600] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  125.851416][T11591] lo speed is unknown, defaulting to 1000
[  126.113867][T11616] __nla_validate_parse: 9 callbacks suppressed
[  126.113877][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2497'.
[  126.121025][T11616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2497'.
[  126.255064][T11628] netlink: 'syz.2.2503': attribute type 5 has an invalid length.
[  126.326902][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2501'.
[  126.428319][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2501'.
[  126.514273][T11635] netlink: 'syz.0.2505': attribute type 39 has an invalid length.
[  126.783749][T11646] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2510'.
[  127.012472][T11656] syzkaller0: entered promiscuous mode
[  127.014638][T11656] syzkaller0: entered allmulticast mode
[  127.147961][T11658] openvswitch: netlink: Unknown key attributes 2
[  127.257947][T11664] lo speed is unknown, defaulting to 1000
[  127.336889][T11668] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  127.561966][T11683] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.137919][T11729] syzkaller1: entered allmulticast mode
[  128.894808][T11750] netlink: 'syz.2.2553': attribute type 4 has an invalid length.
[  128.920845][T11750] netlink: 'syz.2.2553': attribute type 4 has an invalid length.
[  129.132266][T11775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2566'.
[  129.144318][T11775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2566'.
[  129.148159][T11775] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2566'.
[  129.218441][T11788] lo speed is unknown, defaulting to 1000
[  129.275720][ T5887] Bluetooth: hci2: link tx timeout
[  129.278002][ T5887] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  129.282479][ T5235] Bluetooth: hci2: link tx timeout
[  129.284698][ T5235] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  129.300034][ T5235] Bluetooth: hci2: link tx timeout
[  129.302287][ T5235] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  130.273745][T11846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2597'.
[  130.300599][T11846] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  130.303543][ T5904] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  130.306860][ T5904] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  130.312580][ T5904] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  130.316392][ T5904] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  130.550905][T11869] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2607'.
[  130.641867][T11885] netlink: 'syz.1.2616': attribute type 1 has an invalid length.
[  130.644516][T11885] netlink: 'syz.1.2616': attribute type 3 has an invalid length.
[  130.647384][T11885] netlink: 'syz.1.2616': attribute type 1 has an invalid length.
[  130.652997][T11885] NCSI netlink: No device for ifindex 0
[  130.736027][T11901] Bluetooth: MGMT ver 1.23
[  130.741285][T11903] netlink: 'syz.2.2624': attribute type 1 has an invalid length.
[  130.743907][T11903] netlink: 'syz.2.2624': attribute type 1 has an invalid length.
[  130.984180][T11932] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  131.205724][T11950] __nla_validate_parse: 7 callbacks suppressed
[  131.205739][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2646'.
[  131.218663][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2646'.
[  131.261718][T11957] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2649'.
[  131.299559][ T5235] Bluetooth: hci2: command 0x0405 tx timeout
[  131.398726][T11963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2651'.
[  131.517886][T11970] netlink: 'syz.0.2654': attribute type 6 has an invalid length.
[  131.647999][T11976] lo speed is unknown, defaulting to 1000
[  131.831759][T11989] netlink: 'syz.0.2662': attribute type 23 has an invalid length.
[  131.891698][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2663'.
[  131.895393][T11993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2663'.
[  131.948254][T11997] nbd: must specify at least one socket
[  132.424344][T12049] netlink: 'syz.1.2690': attribute type 1 has an invalid length.
[  132.427932][T12049] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2690'.
[  132.431814][T12049] NCSI netlink: No device for ifindex 0
[  132.512739][T12057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2693'.
[  132.516817][T12057] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  132.742470][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.745431][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.945496][T12090] gretap2: entered promiscuous mode
[  132.964252][T12090] netlink: 'syz.1.2709': attribute type 7 has an invalid length.
[  132.968034][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2710'.
[  133.023371][T12090] lo speed is unknown, defaulting to 1000
[  133.353822][T12124] lo speed is unknown, defaulting to 1000
[  133.379367][ T5887] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  133.379971][ T5235] Bluetooth: hci2: command 0x0405 tx timeout
[  133.573876][T12152] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  133.872280][T12179] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2735'.
[  133.909158][T12185] ipvlan1: entered promiscuous mode
[  134.209037][T12218] lo speed is unknown, defaulting to 1000
[  134.364353][T12237] siw: device registration error -23
[  134.567972][T12261] netlink: 'syz.2.2773': attribute type 10 has an invalid length.
[  135.277526][T12290] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0
[  135.328227][T12294] pim6reg: entered allmulticast mode
[  135.334008][T12294] pim6reg: left allmulticast mode
[  135.579219][T12302] netlink: 'syz.0.2792': attribute type 58 has an invalid length.
[  135.945429][T12338] vlan2: entered promiscuous mode
[  135.951061][T12338] gretap0: entered promiscuous mode
[  136.078254][T12356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  136.156837][T12366] lo speed is unknown, defaulting to 1000
[  136.393865][T12395] __nla_validate_parse: 8 callbacks suppressed
[  136.393881][T12395] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2835'.
[  136.451535][T12395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2835'.
[  136.478105][T12401] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2837'.
[  136.505110][T12403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2838'.
[  136.554487][T12407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2840'.
[  136.675224][T12418] netlink: 'syz.2.2844': attribute type 14 has an invalid length.
[  136.700458][T12418] netlink: 'syz.2.2844': attribute type 14 has an invalid length.
[  136.725376][T12409] netlink: 'syz.0.2841': attribute type 4 has an invalid length.
[  136.804125][T12436] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2852'.
[  136.965360][T12456] netlink: 'syz.0.2862': attribute type 1 has an invalid length.
[  136.968728][T12456] netlink: 'syz.0.2862': attribute type 4 has an invalid length.
[  137.019164][T12466] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  137.131532][T12472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2869'.
[  137.240184][T12483] netlink: 'syz.0.2874': attribute type 21 has an invalid length.
[  137.279847][T12483] netlink: 'syz.0.2874': attribute type 6 has an invalid length.
[  137.283149][T12483] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2874'.
[  137.293615][T12483] netlink: 'syz.0.2874': attribute type 21 has an invalid length.
[  137.296959][T12483] netlink: 'syz.0.2874': attribute type 6 has an invalid length.
[  137.302939][T12483] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2874'.
[  137.432417][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2882'.
[  137.568806][T12514] netlink: 'syz.1.2889': attribute type 1 has an invalid length.
[  137.623448][T12521] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  138.171460][T12543] lo speed is unknown, defaulting to 1000
[  138.216445][T12546] netlink: zone id is out of range
[  138.218766][T12546] netlink: zone id is out of range
[  138.244892][T12546] netlink: zone id is out of range
[  138.246965][T12546] netlink: zone id is out of range
[  138.249925][T12546] netlink: zone id is out of range
[  138.252610][T12546] netlink: zone id is out of range
[  138.254842][T12546] netlink: zone id is out of range
[  138.257251][T12546] netlink: zone id is out of range
[  138.306777][T12553] tap0: tun_chr_ioctl cmd 1074025680
[  138.426496][T12564] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.433741][T12564] syzkaller0: entered promiscuous mode
[  138.442102][T12564] syzkaller0: entered allmulticast mode
[  138.466472][T12564] tipc: Resetting bearer <eth:syzkaller0>
[  138.475705][T12563] tipc: Resetting bearer <eth:syzkaller0>
[  138.503728][T12563] tipc: Disabling bearer <eth:syzkaller0>
[  138.642877][T12584] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.663502][T12584] syzkaller0: entered promiscuous mode
[  138.665878][T12584] syzkaller0: entered allmulticast mode
[  138.751720][T12599] tipc: Resetting bearer <eth:syzkaller0>
[  138.759418][T12583] tipc: Resetting bearer <eth:syzkaller0>
[  138.766004][T12583] tipc: Disabling bearer <eth:syzkaller0>
[  138.774513][T12601] bond0: Error: Cannot enslave bond to itself.
[  142.181151][T12644] __nla_validate_parse: 5 callbacks suppressed
[  142.181169][T12644] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2946'.
[  142.211757][T12645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2945'.
[  142.441835][T12674] netlink: 134820 bytes leftover after parsing attributes in process `syz.0.2961'.
[  142.559618][T12682] block nbd0: server does not support multiple connections per device.
[  142.563294][T12682] block nbd0: shutting down sockets
[  142.742052][T12707] tc_dump_action: action bad kind
[  142.946231][T12722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2984'.
[  142.950237][T12722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2984'.
[  142.956424][T12722] ip6tnl2: entered promiscuous mode
[  142.958604][T12722] ip6tnl2: entered allmulticast mode
[  143.138305][T12740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2993'.
[  143.252893][T12748] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2997'.
[  143.267064][T12748] bridge_slave_0: entered allmulticast mode
[  143.295453][T12750] netlink: 201916 bytes leftover after parsing attributes in process `syz.1.2998'.
[  143.668782][T12775] lo speed is unknown, defaulting to 1000
[  143.823441][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3009'.
[  143.832055][T12773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3009'.
[  144.174943][T12815] net_ratelimit: 19 callbacks suppressed
[  144.174954][T12815] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.238485][T12823] vlan0: entered promiscuous mode
[  144.246288][T12823] s: rxe_newlink: already configured on lo
[  144.279389][T12825] vlan2: entered promiscuous mode
[  144.281709][T12825] bridge0: entered promiscuous mode
[  144.335011][T12833] validate_nla: 2 callbacks suppressed
[  144.335025][T12833] netlink: 'syz.1.3038': attribute type 10 has an invalid length.
[  144.342469][T12833] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  144.396647][T12836] netlink: 'syz.2.3039': attribute type 8 has an invalid length.
[  144.615402][T12864] netlink: 'syz.0.3052': attribute type 8 has an invalid length.
[  145.230712][T12899] openvswitch: netlink: IP tunnel dst address not specified
[  145.320213][T12905] netlink: 'syz.0.3067': attribute type 1 has an invalid length.
[  145.333740][T12905] 8021q: adding VLAN 0 to HW filter on device bond3
[  145.370023][T12905] 8021q: adding VLAN 0 to HW filter on device bond3
[  145.373292][T12905] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  145.378975][T12905] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  145.430382][T12905] veth7: entered promiscuous mode
[  145.433780][T12905] bond3: (slave veth7): Enslaving as an active interface with a down link
[  145.446472][T12905] erspan0: entered allmulticast mode
[  145.450106][T12905] bond3: (slave erspan0): making interface the new active one
[  145.452917][T12905] bond3: (slave erspan0): Enslaving as an active interface with an up link
[  145.622574][T12936] netlink: 'syz.1.3082': attribute type 18 has an invalid length.
[  146.160031][T13018] delete_channel: no stack
[  146.193202][T13024] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  146.241930][T13024] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  146.260960][T13031] ieee802154 phy0 wpan0: encryption failed: -22
[  146.291285][T13024] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  146.361644][T13024] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  146.407809][ T5904] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  146.416509][ T5904] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  146.425310][ T5904] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  146.431824][ T5904] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  146.507168][T13043] lo speed is unknown, defaulting to 1000
[  146.825787][T13073] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  146.925600][T13088] netlink: 'syz.0.3154': attribute type 7 has an invalid length.
[  146.928757][T13088] netlink: 'syz.0.3154': attribute type 8 has an invalid length.
[  146.932892][T13088] netlink: 'syz.0.3154': attribute type 4 has an invalid length.
[  147.312079][T13130] __nla_validate_parse: 20 callbacks suppressed
[  147.312089][T13130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3174'.
[  148.238474][T13159] netlink: 324 bytes leftover after parsing attributes in process `syz.1.3186'.
[  148.242201][T13159] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3186'.
[  148.245213][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3186'.
[  148.282225][T13163] netlink: 'syz.1.3188': attribute type 5 has an invalid length.
[  149.328108][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3208'.
[  149.378173][T13214] netlink: 'syz.0.3213': attribute type 21 has an invalid length.
[  149.451411][T13221] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.3215'.
[  149.465002][T13229] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3220'.
[  149.477773][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3219'.
[  149.480956][T13230] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  149.483450][T13230] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.541109][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3228'.
[  149.544177][T13243] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3228'.
[  149.918603][T13269] lo speed is unknown, defaulting to 1000
[  150.368862][T13323] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.374826][T13323] syzkaller0: entered promiscuous mode
[  150.377128][T13323] syzkaller0: entered allmulticast mode
[  150.393973][T13323] tipc: Resetting bearer <eth:syzkaller0>
[  150.401727][T13322] tipc: Resetting bearer <eth:syzkaller0>
[  150.416109][T13322] tipc: Disabling bearer <eth:syzkaller0>
[  150.687601][T13305] Set syz1 is full, maxelem 65536 reached
[  150.916154][T13369] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  150.922813][T13372] netlink: 'syz.1.3285': attribute type 2 has an invalid length.
[  151.003933][T13378] x9: renamed from bridge_slave_0
[  151.205591][T13396] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.221273][T13396] tipc: Resetting bearer <eth:syzkaller0>
[  151.225598][T13395] tipc: Resetting bearer <eth:syzkaller0>
[  151.253447][T13395] tipc: Disabling bearer <eth:syzkaller0>
[  151.392913][T13401] syzkaller0: entered promiscuous mode
[  151.395227][T13401] syzkaller0: entered allmulticast mode
[  151.482540][T13406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.501878][T13406] syzkaller0: entered promiscuous mode
[  151.504181][T13406] syzkaller0: entered allmulticast mode
[  151.556715][T13406] tipc: Resetting bearer <eth:syzkaller0>
[  151.562106][T13405] tipc: Resetting bearer <eth:syzkaller0>
[  151.567626][T13405] tipc: Disabling bearer <eth:syzkaller0>
[  151.622322][T13414] netlink: 'syz.1.3305': attribute type 1 has an invalid length.
[  151.680909][T13423] batadv_slave_1: entered promiscuous mode
[  151.706113][ T5713] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  152.453916][T13422] batadv_slave_1: left promiscuous mode
[  152.496255][T13434] __nla_validate_parse: 11 callbacks suppressed
[  152.496265][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3311'.
[  152.549187][ T8376] IPVS: starting estimator thread 0...
[  152.651354][T13440] IPVS: using max 61 ests per chain, 146400 per kthread
[  152.763893][T13473] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  152.810189][T13482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3333'.
[  152.813290][T13482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3333'.
[  152.857559][T13486] netlink: 'syz.2.3335': attribute type 1 has an invalid length.
[  152.862883][T13486] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3335'.
[  153.225126][T13530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3354'.
[  153.392120][T13545] syzkaller1: entered promiscuous mode
[  153.394243][T13545] syzkaller1: entered allmulticast mode
[  153.581030][T13563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3367'.
[  153.622097][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3370'.
[  153.634508][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3370'.
[  153.778602][T13586] syzkaller1: entered promiscuous mode
[  153.781271][T13586] syzkaller1: entered allmulticast mode
[  153.910971][T13594] netlink: 'syz.1.3380': attribute type 7 has an invalid length.
[  153.972778][T13598] lo speed is unknown, defaulting to 1000
[  154.212176][T13603] bond0: (slave rose0): Enslaving as an active interface with an up link
[  154.217822][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3384'.
[  154.605361][T13612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3388'.
[  155.163296][T13652] netlink: 'syz.1.3406': attribute type 4 has an invalid length.
[  155.627945][T13662] netlink: 'syz.2.3410': attribute type 1 has an invalid length.
[  155.652189][T13662] bond4: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  155.661335][ T5713] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  155.661936][T13662] 8021q: adding VLAN 0 to HW filter on device bond4
[  155.677169][T13662] veth7: entered promiscuous mode
[  155.680742][T13662] bond4: (slave veth7): Enslaving as a backup interface with a down link
[  155.688479][T13662] bridge_slave_0: left allmulticast mode
[  155.690695][T13662] bridge_slave_0: left promiscuous mode
[  155.692743][T13662] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.696000][T13662] bridge_slave_1: left allmulticast mode
[  155.698165][T13662] bridge_slave_1: left promiscuous mode
[  155.700489][T13662] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.704189][T13662] veth0_to_bond: left allmulticast mode
[  155.706117][T13662] veth0_to_bond: left promiscuous mode
[  155.708123][T13662] bridge3: port 2(veth0_to_bond) entered disabled state
[  155.712837][T13662] bond0: (slave bond_slave_0): Releasing backup interface
[  155.716498][T13662] bond0: (slave bond_slave_1): Releasing backup interface
[  155.720893][T13662] team0: Port device team_slave_0 removed
[  155.728320][T13662] team0: Port device team_slave_1 removed
[  155.731515][T13662] veth3: left allmulticast mode
[  155.733398][T13662] veth3: left promiscuous mode
[  155.735503][T13662] bridge3: port 1(veth3) entered disabled state
[  155.740577][T13662] vlan0: left allmulticast mode
[  155.742905][T13662] veth1: left allmulticast mode
[  155.745015][T13662] vlan0: left promiscuous mode
[  155.746748][T13662] veth1: left promiscuous mode
[  155.748929][T13662] bridge3: port 3(vlan0) entered disabled state
[  155.753082][T13662] bond4: (slave ip6gretap3): Removing an active aggregator
[  155.755833][T13662] bond4: (slave ip6gretap3): Releasing backup interface
[  155.758298][T13662] bond4: (slave ip6gretap3): the permanent HWaddr of slave - be:55:55:bc:63:c3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  155.766208][T13662] bond4: (slave veth7): Releasing backup interface
[  156.101938][T13701] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.105794][T13700] tipc: Resetting bearer <eth:syzkaller0>
[  156.125943][T13700] tipc: Disabling bearer <eth:syzkaller0>
[  156.337262][T13716] netlink: 'syz.0.3434': attribute type 10 has an invalid length.
[  156.343858][T13716] team0: Port device 0! added
[  156.348486][T13716] netlink: 'syz.0.3434': attribute type 10 has an invalid length.
[  156.354758][T13716] team0: Port device 0! removed
[  156.357886][T13716] bond0: (slave 0!): Enslaving as an active interface with an up link
[  156.404068][T13720] lo speed is unknown, defaulting to 1000
[  156.895802][T13726] lo speed is unknown, defaulting to 1000
[  157.152253][T13731] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  157.197633][T13734] lo speed is unknown, defaulting to 1000
[  157.644707][   T33] audit: type=1804 audit(1756322494.170:2): pid=13776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3458" name="memory.events" dev="tmpfs" ino=5936 res=1 errno=0
[  157.679480][   T33] audit: type=1800 audit(1756322494.170:3): pid=13776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3458" name="memory.events" dev="tmpfs" ino=5936 res=0 errno=0
[  157.760347][T13784] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.017665][T13802] netlink: 'syz.1.3470': attribute type 96 has an invalid length.
[  158.114071][T13813] __nla_validate_parse: 3 callbacks suppressed
[  158.114082][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3477'.
[  158.148954][T13817] batadv2: entered promiscuous mode
[  158.464226][T13834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  158.472585][ T8380] lo speed is unknown, defaulting to 1000
[  158.475024][ T8380] s: Port: 1 Link ACTIVE
[  158.476877][ T8380] lo speed is unknown, defaulting to 1000
[  159.243279][T13869] netlink: 'syz.2.3500': attribute type 3 has an invalid length.
[  159.246735][T13869] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3500'.
[  159.725293][T13916] pimreg: entered allmulticast mode
[  159.729874][T13916] pimreg: left allmulticast mode
[  159.955182][T13930] netlink: 'syz.0.3526': attribute type 1 has an invalid length.
[  159.958671][T13930] netlink: 'syz.0.3526': attribute type 3 has an invalid length.
[  159.962975][T13930] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3526'.
[  160.050590][T13945] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3529'.
[  160.053897][T13945] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3529'.
[  160.339948][T13965] lo speed is unknown, defaulting to 1000
[  160.372825][T13968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3540'.
[  160.483300][T13985] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3546'.
[  160.712288][T14009] netlink: 'syz.2.3551': attribute type 13 has an invalid length.
[  160.722320][T14009] netlink: 'syz.2.3551': attribute type 17 has an invalid length.
[  160.861486][T14009] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.866241][T14009] 8021q: adding VLAN 0 to HW filter on device team0
[  160.876482][T14009] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  160.901100][T14012] lo speed is unknown, defaulting to 1000
[  161.309723][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  161.646747][T14035] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3562'.
[  161.698884][T14039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  161.786931][T14043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3565'.
[  161.998475][T14045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3566'.
[  162.331522][T14063] 8021q: adding VLAN 0 to HW filter on device bond1
[  162.335007][T14063] bond0: (slave bond1): Enslaving as an active interface with an up link
[  162.480507][T14079] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  162.946714][T14127] netlink: 'syz.1.3603': attribute type 4 has an invalid length.
[  162.953151][T14127] netlink: 'syz.1.3603': attribute type 12 has an invalid length.
[  163.293754][T14159] netlink: 'syz.1.3619': attribute type 1 has an invalid length.
[  163.296950][T14159] __nla_validate_parse: 2 callbacks suppressed
[  163.296963][T14159] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3619'.
[  163.415119][T14173] pimreg: entered allmulticast mode
[  163.423588][T14177] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3628'.
[  163.438254][T14177] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3628'.
[  163.655817][T14212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3645'.
[  163.660652][T14212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3645'.
[  163.663652][T14212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3645'.
[  163.677587][T14217] netlink: 'syz.0.3647': attribute type 8 has an invalid length.
[  163.717095][T14224] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3651'.
[  163.724650][T14226] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  163.773879][T14233] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.126827][T14288] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3682'.
[  164.171535][T14293] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.366115][T14319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3696'.
[  164.369809][T14319] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  164.372989][T14319] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.397171][T14321] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3697'.
[  164.481992][T14334] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  164.633861][T14351] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  164.637238][T14351] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.643917][T14353] only policy match revision 0 supported
[  164.643932][T14353] unable to load match
[  164.807431][T14371] macsec1: entered promiscuous mode
[  164.809772][T14371] bridge0: entered promiscuous mode
[  164.812472][T14371] bridge0: port 1(macsec1) entered blocking state
[  164.815316][T14371] bridge0: port 1(macsec1) entered disabled state
[  164.818344][T14371] macsec1: entered allmulticast mode
[  164.821822][T14371] bridge0: entered allmulticast mode
[  164.825194][T14371] macsec1: left allmulticast mode
[  164.827493][T14371] bridge0: left allmulticast mode
[  164.832926][T14371] bridge0: left promiscuous mode
[  164.873057][T14378] bond0: (slave bond1): Releasing backup interface
[  165.058592][T14400] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  165.187575][T14416] netlink: 'syz.2.3741': attribute type 1 has an invalid length.
[  165.212040][T14416] bond5: (slave geneve0): making interface the new active one
[  165.216186][T14416] bond5: (slave geneve0): Enslaving as an active interface with an up link
[  165.220376][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  165.223965][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  165.227536][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  165.232565][T14416] 8021q: adding VLAN 0 to HW filter on device bond5
[  165.236012][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  165.459360][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  166.055294][T14480] netlink: 'syz.1.3771': attribute type 29 has an invalid length.
[  166.058678][T14480] netlink: 'syz.1.3771': attribute type 29 has an invalid length.
[  166.062422][T14480] netlink: 'syz.1.3771': attribute type 29 has an invalid length.
[  166.065321][T14480] netlink: 'syz.1.3771': attribute type 29 has an invalid length.
[  166.068086][T14480] netlink: 'syz.1.3771': attribute type 29 has an invalid length.
[  166.074709][T14480] netlink: 'syz.1.3771': attribute type 29 has an invalid length.
[  166.077944][T14480] netlink: 'syz.1.3771': attribute type 29 has an invalid length.
[  166.081121][T14480] netlink: 'syz.1.3771': attribute type 29 has an invalid length.
[  166.083910][T14480] netlink: 'syz.1.3771': attribute type 29 has an invalid length.
[  166.086645][T14480] netlink: 'syz.1.3771': attribute type 29 has an invalid length.
[  166.508211][T14487] batadv_slave_0: left promiscuous mode
[  166.520110][T14487] veth7: left promiscuous mode
[  166.526979][ T5902] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  166.530995][ T5902] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  166.533908][ T5902] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  166.536884][ T5902] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  167.525697][T14506] syzkaller1: entered promiscuous mode
[  167.527752][T14506] syzkaller1: entered allmulticast mode
[  167.951698][T14537] bridge0: port 1(erspan0) entered blocking state
[  167.955422][T14537] bridge0: port 1(erspan0) entered disabled state
[  167.958274][T14537] erspan0: entered allmulticast mode
[  167.962268][T14537] erspan0: entered promiscuous mode
[  167.965629][T14537] bridge0: port 1(erspan0) entered blocking state
[  167.968468][T14537] bridge0: port 1(erspan0) entered forwarding state
[  167.978599][T14537] erspan0: left allmulticast mode
[  167.982440][T14537] erspan0: left promiscuous mode
[  167.984724][T14537] bridge0: port 1(erspan0) entered disabled state
[  168.265528][T14559] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.268343][T14559] syzkaller0: entered promiscuous mode
[  168.271599][T14559] syzkaller0: entered allmulticast mode
[  168.277545][T14559] tipc: Resetting bearer <eth:syzkaller0>
[  168.280133][T14558] tipc: Resetting bearer <eth:syzkaller0>
[  168.284201][T14558] tipc: Disabling bearer <eth:syzkaller0>
[  168.556993][T14591] __nla_validate_parse: 6 callbacks suppressed
[  168.557007][T14591] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3824'.
[  168.611880][T14601] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3828'.
[  168.872999][T14624] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.3839'.
[  168.888571][T14624] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  169.269469][T14686] nbd0: detected capacity change from 0 to 549764202496
[  169.272954][   T55] block nbd0: Receive control failed (result -32)
[  169.346113][T14706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3875'.
[  169.407396][T14717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3880'.
[  169.676401][T14761] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3903'.
[  169.710490][T14766] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.713688][T14766] syzkaller0: entered promiscuous mode
[  169.716061][T14766] syzkaller0: entered allmulticast mode
[  169.720518][T14766] tipc: Resetting bearer <eth:syzkaller0>
[  169.723769][T14764] tipc: Resetting bearer <eth:syzkaller0>
[  169.727321][T14764] tipc: Disabling bearer <eth:syzkaller0>
[  169.806104][T14773] netlink: 324 bytes leftover after parsing attributes in process `syz.0.3908'.
[  169.921458][T14786] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3914'.
[  170.001773][T14792] veth1_to_bond: entered allmulticast mode
[  170.004453][T14792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3916'.
[  170.011213][T14792] veth1_to_bond (unregistering): left allmulticast mode
[  170.061721][T14794] netlink: 34 bytes leftover after parsing attributes in process `syz.0.3917'.
[  170.098955][T14695] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  170.102312][T14695] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  170.107621][T14695] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  170.110193][T14695] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  170.114414][T14695] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  170.116839][T14695] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  170.204962][T14812] syzkaller0: entered promiscuous mode
[  170.206928][T14812] syzkaller0: entered allmulticast mode
[  170.212346][T14812] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  170.623195][T14840] bond4: (slave vti0): The slave device specified does not support setting the MAC address
[  170.630628][T14840] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  170.635828][T14840] bond4: (slave vti0): making interface the new active one
[  170.639229][T14840] bond4: (slave vti0): Enslaving as an active interface with an up link
[  170.951611][T14869] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  171.169474][T14896] bond2: entered promiscuous mode
[  171.171198][T14896] bond2: entered allmulticast mode
[  171.173081][T14896] 8021q: adding VLAN 0 to HW filter on device bond2
[  171.232718][T14904] validate_nla: 42 callbacks suppressed
[  171.232734][T14904] netlink: 'syz.0.3968': attribute type 10 has an invalid length.
[  171.281398][T14908] sctp: [Deprecated]: syz.0.3970 (pid 14908) Use of int in max_burst socket option deprecated.
[  171.281398][T14908] Use struct sctp_assoc_value instead
[  171.516919][ T5902] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.521170][ T5902] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.524538][ T5902] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.527432][ T5902] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.944307][T14979] netlink: 'syz.2.4002': attribute type 4 has an invalid length.
[  172.145700][T15005] netlink: 'syz.1.4015': attribute type 10 has an invalid length.
[  172.239721][T15017] netlink: 'syz.1.4021': attribute type 4 has an invalid length.
[  172.584438][T15039] lo speed is unknown, defaulting to 1000
[  172.670924][T15074] bridge7: entered allmulticast mode
[  172.806202][T15089] openvswitch: netlink: Message has 24 unknown bytes.
[  172.809105][T15089] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.422134][T15184] lo speed is unknown, defaulting to 1000
[  173.427399][T15183] syzkaller1: entered promiscuous mode
[  173.432228][T15183] syzkaller1: entered allmulticast mode
[  173.674013][T15214] __nla_validate_parse: 25 callbacks suppressed
[  173.674031][T15214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4112'.
[  173.710629][T15220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4114'.
[  173.942945][T15247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4125'.
[  174.084788][T15257] bridge0: port 1(veth0_to_team) entered blocking state
[  174.088045][T15257] bridge0: port 1(veth0_to_team) entered disabled state
[  174.091464][T15257] veth0_to_team: entered allmulticast mode
[  174.094498][T15257] veth0_to_team: entered promiscuous mode
[  174.100998][T15257] veth0_to_team: left allmulticast mode
[  174.104073][T15257] veth0_to_team: left promiscuous mode
[  174.106610][T15257] bridge0: port 1(veth0_to_team) entered disabled state
[  174.872650][T15285] netlink: 'syz.0.4143': attribute type 11 has an invalid length.
[  174.890190][T15287] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.932422][T15287] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.937510][T15289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4145'.
[  175.006832][T15287] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.067641][T15287] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.116098][ T5902] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.139398][ T5902] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.142860][ T5902] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.145769][ T5902] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.156561][T15305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4152'.
[  175.286204][T15322] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4150'.
[  175.381080][T15340] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4169'.
[  175.567811][T15372] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  175.605575][T15374] lo speed is unknown, defaulting to 1000
[  175.632151][T15383] netlink: 'syz.0.4189': attribute type 1 has an invalid length.
[  175.635371][T15383] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4189'.
[  175.639104][T15383] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4189'.
[  175.879219][T15417] macsec0: entered allmulticast mode
[  175.883485][T15417] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  175.910297][T15419] netlink: 'syz.2.4206': attribute type 15 has an invalid length.
[  175.913603][T15419] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4206'.
[  176.037879][T15432] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.053098][T15432] syzkaller0: entered promiscuous mode
[  176.055633][T15432] syzkaller0: entered allmulticast mode
[  176.063240][T15432] tipc: Resetting bearer <eth:syzkaller0>
[  176.067744][T15430] tipc: Resetting bearer <eth:syzkaller0>
[  176.074911][T15430] tipc: Disabling bearer <eth:syzkaller0>
[  176.376620][T15466] netlink: 'syz.2.4228': attribute type 4 has an invalid length.
[  176.398545][ T5713] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  176.402491][ T5713] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  176.405258][ T5713] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  176.408200][ T5713] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.366468][T15557] lo speed is unknown, defaulting to 1000
[  177.805738][T15592] erspan0: left allmulticast mode
[  177.820351][T15592] macsec0: left allmulticast mode
[  177.822911][T15592] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  177.826010][T15592] macsec1: left promiscuous mode
[  177.828012][T15592] macsec1: left allmulticast mode
[  177.853526][T15592] ip6tnl2: left promiscuous mode
[  177.857550][T15592] ip6tnl2: left allmulticast mode
[  177.879010][T15592] veth7: left promiscuous mode
[  177.895977][ T5713] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  177.903622][ T5713] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  177.909622][ T5713] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  177.920567][ T5713] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  178.137634][T15632] can: request_module (can-proto-5) failed.
[  178.152023][T15637] netlink: zone id is out of range
[  178.153761][T15637] netlink: zone id is out of range
[  178.156154][T15637] netlink: zone id is out of range
[  178.158325][T15637] netlink: zone id is out of range
[  178.161007][T15637] netlink: zone id is out of range
[  178.163342][T15637] netlink: zone id is out of range
[  178.165556][T15637] netlink: zone id is out of range
[  178.167895][T15637] netlink: zone id is out of range
[  178.171249][T15637] netlink: del zone limit has 4 unknown bytes
[  178.235648][T15651] bridge7: entered promiscuous mode
[  178.237406][T15651] macsec3: entered promiscuous mode
[  178.239182][T15651] macsec3: entered allmulticast mode
[  178.241548][T15651] bridge7: entered allmulticast mode
[  178.243965][T15651] bridge7: port 1(macsec3) entered blocking state
[  178.246185][T15651] bridge7: port 1(macsec3) entered disabled state
[  178.256030][T15651] bridge7: left allmulticast mode
[  178.258083][T15651] bridge7: left promiscuous mode
[  178.370023][T15672] netlink: 'syz.1.4320': attribute type 9 has an invalid length.
[  178.373542][T15672] netlink: 'syz.1.4320': attribute type 6 has an invalid length.
[  178.633336][T15698] netlink: 'syz.2.4335': attribute type 10 has an invalid length.
[  178.636347][T15698] veth0_macvtap: left promiscuous mode
[  178.638889][T15698] team0: Device veth0_macvtap failed to register rx_handler
[  178.865547][T15721] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.128376][T15750] netlink: 'syz.0.4360': attribute type 4 has an invalid length.
[  179.162859][T15756] __nla_validate_parse: 12 callbacks suppressed
[  179.162870][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4363'.
[  179.215239][T15756] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  179.506890][T15800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4382'.
[  179.531902][T15804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4384'.
[  179.537864][T15804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4384'.
[  179.616738][T15815] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4389'.
[  181.110392][T15889] netlink: 'syz.0.4426': attribute type 11 has an invalid length.
[  181.113914][T15889] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4426'.
[  181.256923][T15920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4439'.
[  181.526524][T15958] IPVS: length: 163 != 8
[  181.711989][T15977] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4466'.
[  181.821268][T15992] netlink: 'syz.1.4473': attribute type 1 has an invalid length.
[  181.824477][T15992] netlink: 'syz.1.4473': attribute type 1 has an invalid length.
[  181.834055][T15989] bond0: (slave dummy0): Releasing backup interface
[  181.871335][T15995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4474'.
[  181.903709][T15992] netlink: 'syz.1.4473': attribute type 1 has an invalid length.
[  181.915511][T15992] 8021q: adding VLAN 0 to HW filter on device bond3
[  181.925410][T15992] bond3: (slave wlan0): Opening slave failed
[  181.935628][T15992] vlan3: entered allmulticast mode
[  181.937779][T15992] veth1: entered allmulticast mode
[  181.940740][T15992] bond3: (slave vlan3): Opening slave failed
[  181.990120][T16006] batadv_slave_1: entered promiscuous mode
[  182.008769][T16006] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4479'.
[  182.131243][T16005] batadv_slave_1: left promiscuous mode
[  182.275240][T16034] bridge8: entered promiscuous mode
[  182.335165][T16040] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  182.382194][T16046] netlink: 'syz.1.4497': attribute type 5 has an invalid length.
[  182.669183][T16062] netlink: 'syz.0.4505': attribute type 10 has an invalid length.
[  182.673441][T16062] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.677606][T16062] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  182.814618][T16087] netlink: 'syz.0.4517': attribute type 2 has an invalid length.
[  182.818085][T16087] netlink: 'syz.0.4517': attribute type 1 has an invalid length.
[  182.974670][T16111] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  183.160939][T16133] lo speed is unknown, defaulting to 1000
[  183.221776][T16140] syzkaller0: entered promiscuous mode
[  183.229187][T16140] syzkaller0: entered allmulticast mode
[  183.236563][T16140] macsec1: entered promiscuous mode
[  183.484428][T16180] netlink: 'syz.0.4558': attribute type 4 has an invalid length.
[  183.575368][T16188] netlink: 'syz.0.4563': attribute type 2 has an invalid length.
[  184.267979][T16292] __nla_validate_parse: 9 callbacks suppressed
[  184.267990][T16292] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4612'.
[  184.298161][T16296] netlink: 'syz.0.4613': attribute type 9 has an invalid length.
[  184.301561][T16296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4613'.
[  184.307996][T16296] macvlan4: entered promiscuous mode
[  184.310855][T16296] hsr0: entered promiscuous mode
[  184.312970][T16296] macvlan4: entered allmulticast mode
[  184.315112][T16296] hsr0: entered allmulticast mode
[  184.317239][T16296] hsr_slave_0: entered allmulticast mode
[  184.320110][T16296] hsr_slave_1: entered allmulticast mode
[  184.339623][ T5235] Bluetooth: hci0: command tx timeout
[  184.475234][T16320] openvswitch: netlink: Multiple metadata blocks provided
[  184.535934][T16330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4630'.
[  184.538944][T16330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4630'.
[  184.568716][T16336] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4633'.
[  184.732405][T16361] openvswitch: netlink: Message has 1 unknown bytes.
[  184.734838][T16360] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4645'.
[  184.735569][T16361] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.738989][T16360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4645'.
[  184.810432][T16374] gretap2: entered promiscuous mode
[  184.812776][T16374] gretap2: entered allmulticast mode
[  184.832741][T16379] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4654'.
[  184.857048][T16381] bond6: entered promiscuous mode
[  184.858938][T16381] 8021q: adding VLAN 0 to HW filter on device bond6
[  184.866729][T16381] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4656'.
[  184.872224][T16381] batadv0: entered promiscuous mode
[  184.874709][T16381] batadv0: entered allmulticast mode
[  184.877664][T16381] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.881407][T16381] bond6: (slave batadv0): making interface the new active one
[  184.884839][T16381] bond6: (slave batadv0): Enslaving as an active interface with an up link
[  184.901182][T16388] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4658'.
[  184.988936][T16397] ip6erspan0: entered promiscuous mode
[  185.053710][T16408] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[  185.457481][T16458] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.033345][T16521] NCSI netlink: No device for ifindex 246
[  187.304149][T16610] pim6reg1: entered promiscuous mode
[  187.306324][T16610] pim6reg1: entered allmulticast mode
[  187.333868][T16617] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  187.352827][T16615] lo speed is unknown, defaulting to 1000
[  187.982481][T16649] validate_nla: 9 callbacks suppressed
[  187.982497][T16649] netlink: 'syz.0.4779': attribute type 21 has an invalid length.
[  188.197757][T16667] 0: renamed from hsr0
[  188.201075][T16667] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  188.205766][T16667] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  188.215858][T16667] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  188.266698][T16673] openvswitch: netlink: IPv4 tunnel dst address is zero
[  188.316711][T16681] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.319839][T16681] syzkaller0: entered promiscuous mode
[  188.321671][T16681] syzkaller0: entered allmulticast mode
[  188.332034][T16681] tipc: Resetting bearer <eth:syzkaller0>
[  188.335905][T16680] tipc: Resetting bearer <eth:syzkaller0>
[  188.343884][T16680] tipc: Disabling bearer <eth:syzkaller0>
[  188.417880][T16687] netlink: 'syz.1.4796': attribute type 4 has an invalid length.
[  188.983426][T16763] syzkaller1: entered promiscuous mode
[  188.985926][T16763] syzkaller1: entered allmulticast mode
[  188.995800][T16763] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[  189.039203][T16771] netlink: 'syz.2.4834': attribute type 3 has an invalid length.
[  189.047454][T16771] netlink: 'syz.2.4834': attribute type 3 has an invalid length.
[  189.177448][T16795] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  189.291672][T16813] __nla_validate_parse: 24 callbacks suppressed
[  189.291690][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4855'.
[  189.504585][T16848] netlink: 'syz.0.4872': attribute type 11 has an invalid length.
[  189.508006][T16848] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4872'.
[  189.551408][T16851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4873'.
[  189.555405][T16851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4873'.
[  189.681841][T16867] netlink: 'syz.1.4882': attribute type 1 has an invalid length.
[  189.684651][T16867] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4882'.
[  189.687784][T16867] netlink: 'syz.1.4882': attribute type 2 has an invalid length.
[  189.690428][T16867] netlink: 'syz.1.4882': attribute type 1 has an invalid length.
[  189.804765][T16882] macvlan4: left promiscuous mode
[  190.167911][T16939] macsec0: entered allmulticast mode
[  190.299029][T16962] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.303702][T16962] syzkaller0: entered promiscuous mode
[  190.306135][T16962] syzkaller0: entered allmulticast mode
[  190.312601][T16962] tipc: Resetting bearer <eth:syzkaller0>
[  190.315547][T16961] tipc: Resetting bearer <eth:syzkaller0>
[  190.319393][T16961] tipc: Disabling bearer <eth:syzkaller0>
[  190.384326][T16970] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.396198][T16970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4930'.
[  190.935596][T16996] netlink: 'syz.0.4939': attribute type 2 has an invalid length.
[  191.453609][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4974'.
[  191.460535][T17070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4975'.
[  191.555765][T17078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4979'.
[  191.560980][T17078] netlink: 'syz.0.4979': attribute type 7 has an invalid length.
[  191.564922][T17078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4979'.
[  192.118984][T17142] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  192.126309][T17142] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  192.314630][T17146] 8021q: adding VLAN 0 to HW filter on device bond4
[  192.333007][T17146] bond4: (slave geneve4): making interface the new active one
[  192.336576][T17146] bond4: (slave geneve4): Enslaving as an active interface with an up link
[  192.349186][ T5902] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.353697][ T5902] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.357224][ T5902] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.376186][ T5902] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.995060][T17210] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.217962][T17219] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.221693][T17219] syzkaller0: entered promiscuous mode
[  193.224168][T17219] syzkaller0: entered allmulticast mode
[  193.230358][T17219] tipc: Resetting bearer <eth:syzkaller0>
[  193.233003][T17218] tipc: Resetting bearer <eth:syzkaller0>
[  193.236790][T17218] tipc: Disabling bearer <eth:syzkaller0>
[  193.386112][T17223] validate_nla: 6 callbacks suppressed
[  193.386123][T17223] netlink: 'syz.1.5048': attribute type 1 has an invalid length.
[  193.412160][T17223] bond5: (slave bridge9): making interface the new active one
[  193.415993][T17223] bond5: (slave bridge9): Enslaving as an active interface with an up link
[  193.544160][T17237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  193.663112][T17245] xt_HMARK: proto mask must be zero with L3 mode
[  194.034532][T17288] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  194.181802][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.182114][T17301] syzkaller1: entered promiscuous mode
[  194.186713][T17301] syzkaller1: entered allmulticast mode
[  194.448646][T17313] __nla_validate_parse: 7 callbacks suppressed
[  194.448661][T17313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5090'.
[  194.496376][T17317] netlink: 'syz.1.5092': attribute type 1 has an invalid length.
[  194.504216][T17317] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5092'.
[  194.800631][T17344] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5106'.
[  194.908372][T17359] netlink: 'syz.2.5112': attribute type 11 has an invalid length.
[  195.154078][T17392] netlink: 'syz.1.5129': attribute type 1 has an invalid length.
[  195.159857][T17392] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5129'.
[  195.417285][T17409] lo speed is unknown, defaulting to 1000
[  195.628994][T17438] pimreg: entered allmulticast mode
[  195.632258][T17438] pimreg: left allmulticast mode
[  195.826010][T17451] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  196.015232][T17464] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5161'.
[  196.072789][T17473] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5165'.
[  196.242055][T17489] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.256412][T17489] syzkaller0: entered promiscuous mode
[  196.258766][T17489] syzkaller0: entered allmulticast mode
[  196.274241][T17489] tipc: Resetting bearer <eth:syzkaller0>
[  196.282544][T17488] tipc: Resetting bearer <eth:syzkaller0>
[  196.288373][T17488] tipc: Disabling bearer <eth:syzkaller0>
[  196.354005][T17504] netlink: 'syz.2.5179': attribute type 1 has an invalid length.
[  196.356816][T17504] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5179'.
[  196.427123][T17514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5184'.
[  196.548030][T17527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5187'.
[  196.708880][T17543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5195'.
[  196.713032][T17543] netlink: 'syz.0.5195': attribute type 7 has an invalid length.
[  196.717341][T17545] syz_tun: entered promiscuous mode
[  196.749763][T17547] syzkaller1: entered promiscuous mode
[  196.752222][T17547] syzkaller1: entered allmulticast mode
[  196.881083][   T33] audit: type=1107 audit(1756322533.410:4): pid=17558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  197.140155][T17566] netlink: 'syz.1.5206': attribute type 21 has an invalid length.
[  197.143571][T17566] netlink: 'syz.1.5206': attribute type 4 has an invalid length.
[  197.295517][   T12] syzkaller0: tun_net_xmit 76
[  197.298987][   T12] syzkaller0: tun_net_xmit 48
[  197.317391][T17578] syzkaller0: create flow: hash 3596948758 index 1
[  197.322517][T17577] syzkaller0: delete flow: hash 3596948758 index 1
[  197.435306][T17586] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  197.437771][T17586] tipc: Enabled bearer <udp:s>, priority 26
[  197.460328][ T8377] page_pool_release_retry() stalled pool shutdown: id 39, 1 inflight 60 sec
[  197.579381][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  197.719377][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  197.814607][T17610] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.821474][T17609] tipc: Resetting bearer <eth:syzkaller0>
[  197.826751][T17614] openvswitch: netlink: Missing key (keys=40, expected=100)
[  197.859408][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  197.885081][T17609] tipc: Disabling bearer <eth:syzkaller0>
[  197.999408][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  198.051366][T17632] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.139400][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  198.289410][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  198.341641][T17665] netlink: 'syz.1.5255': attribute type 1 has an invalid length.
[  198.399429][T17675] netlink: 'syz.2.5259': attribute type 1 has an invalid length.
[  198.402293][T17675] netlink: 'syz.2.5259': attribute type 2 has an invalid length.
[  198.429425][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  198.849539][ T8380] tipc: Node number set to 2148152578
[  198.852520][T17745] sctp: [Deprecated]: syz.2.5294 (pid 17745) Use of struct sctp_assoc_value in delayed_ack socket option.
[  198.852520][T17745] Use struct sctp_sack_info instead
[  198.948724][T17758] erspan0: entered promiscuous mode
[  199.200627][T17796] netlink: 'syz.2.5315': attribute type 10 has an invalid length.
[  199.344964][T17813] netlink: 'syz.1.5325': attribute type 2 has an invalid length.
[  199.386937][T17817] netlink: 'syz.1.5327': attribute type 1 has an invalid length.
[  199.507629][T17829] __nla_validate_parse: 16 callbacks suppressed
[  199.507641][T17829] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5333'.
[  199.592677][T17839] netlink: 'syz.1.5338': attribute type 4 has an invalid length.
[  199.595247][T17839] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5338'.
[  199.963444][T17865] netlink: 'syz.1.5351': attribute type 27 has an invalid length.
[  200.244034][T17911] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5374'.
[  200.260366][T17914] team0: entered promiscuous mode
[  200.262978][T17914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5375'.
[  200.272036][T17914] team0 (unregistering): left promiscuous mode
[  200.272903][T17917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5376'.
[  200.974922][T17980] netlink: 'syz.2.5405': attribute type 11 has an invalid length.
[  201.072413][T17984] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5407'.
[  201.174830][T17990] lo speed is unknown, defaulting to 1000
[  201.829534][T18034] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.833292][T18034] syzkaller0: entered promiscuous mode
[  201.835613][T18034] syzkaller0: entered allmulticast mode
[  201.845348][T18034] netlink: 21 bytes leftover after parsing attributes in process `syz.0.5430'.
[  201.852413][T18034] tipc: Resetting bearer <eth:syzkaller0>
[  201.858547][T18033] tipc: Resetting bearer <eth:syzkaller0>
[  201.864866][T18033] tipc: Disabling bearer <eth:syzkaller0>
[  202.184682][T18063] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5443'.
[  202.188014][T18063] unsupported nlmsg_type 40
[  202.212946][T18067] netlink: 240 bytes leftover after parsing attributes in process `syz.0.5439'.
[  202.286388][T18072] dvmrp8: entered allmulticast mode
[  202.297553][T18071] dvmrp8: left allmulticast mode
[  202.453801][T18096] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5458'.
[  202.494959][T18108] net_ratelimit: 8 callbacks suppressed
[  202.494976][T18108] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  202.549993][T18112] netlink: 'syz.0.5465': attribute type 4 has an invalid length.
[  202.580276][T18118] rdma_op ffff88810b8e49f0 conn xmit_rdma 0000000000000000
[  202.899461][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  203.547586][T18197] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.551334][T18197] syzkaller0: entered promiscuous mode
[  203.553721][T18197] syzkaller0: entered allmulticast mode
[  203.577522][T18197] tipc: Resetting bearer <eth:syzkaller0>
[  203.584789][T18194] tipc: Resetting bearer <eth:syzkaller0>
[  203.594784][T18194] tipc: Disabling bearer <eth:syzkaller0>
[  203.843388][   T33] audit: type=1804 audit(1756322540.370:5): pid=18233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5522" name="/newroot/1792/cgroup.controllers" dev="tmpfs" ino=9050 res=1 errno=0
[  203.869337][   T33] audit: type=1800 audit(1756322540.370:6): pid=18233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5522" name="cgroup.controllers" dev="tmpfs" ino=9050 res=0 errno=0
[  203.878929][   T33] audit: type=1800 audit(1756322540.380:7): pid=18233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5522" name="cgroup.controllers" dev="tmpfs" ino=9050 res=0 errno=0
[  203.939569][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  203.960335][T18229] netlink: 'syz.0.5520': attribute type 12 has an invalid length.
[  204.162991][T18262] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  204.323054][T18286] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  204.325787][T18286] syzkaller0: entered promiscuous mode
[  204.327905][T18286] syzkaller0: entered allmulticast mode
[  204.341145][T18286] tipc: Resetting bearer <eth:syzkaller0>
[  204.343770][T18285] tipc: Resetting bearer <eth:syzkaller0>
[  204.346947][T18285] tipc: Disabling bearer <eth:syzkaller0>
[  204.550096][T18308] __nla_validate_parse: 13 callbacks suppressed
[  204.550106][T18308] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5558'.
[  204.575313][T18310] netlink: 'syz.0.5559': attribute type 13 has an invalid length.
[  204.596259][T18312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5560'.
[  204.627202][T18312] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5560'.
[  204.630716][T18314] netlink: 'syz.1.5561': attribute type 3 has an invalid length.
[  204.633691][T18314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5561'.
[  204.686965][T18322] netlink: 212364 bytes leftover after parsing attributes in process `syz.0.5563'.
[  204.691460][T18322] openvswitch: netlink: Message has 5 unknown bytes.
[  204.893909][T18351] netlink: 'syz.0.5577': attribute type 21 has an invalid length.
[  204.897344][T18351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5577'.
[  204.989408][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  204.997672][T18359] syzkaller1: entered promiscuous mode
[  205.000515][T18359] syzkaller1: entered allmulticast mode
[  205.004811][T18359] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  205.093602][T18361] syz.0.5582 (18361) used obsolete PPPIOCDETACH ioctl
[  205.515543][T18398] netlink: 'syz.2.5599': attribute type 21 has an invalid length.
[  205.518567][T18398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5599'.
[  205.525156][T18398] netlink: 'syz.2.5599': attribute type 21 has an invalid length.
[  205.528475][T18398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5599'.
[  205.577399][T18406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5603'.
[  205.606389][T18408] tun0: tun_chr_ioctl cmd 1074025672
[  205.608694][T18408] tun0: ignored: set checksum disabled
[  205.643253][T18410] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5605'.
[  205.883358][T18428] bond5: (slave geneve0): Releasing active interface
[  205.887606][T18428] bond6: (slave batadv0): Releasing active interface
[  206.029396][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  206.534702][T18466] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  206.540752][T18466] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  206.606861][T18472] netlink: 'syz.0.5632': attribute type 1 has an invalid length.
[  206.830813][    T9] page_pool_release_retry() stalled pool shutdown: id 41, 3329 inflight 60 sec
[  206.841807][T18502] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.846008][T18502] syzkaller0: entered promiscuous mode
[  206.848354][T18502] syzkaller0: entered allmulticast mode
[  206.855577][T18502] tipc: Resetting bearer <eth:syzkaller0>
[  206.863479][T18500] tipc: Resetting bearer <eth:syzkaller0>
[  206.867936][T18500] tipc: Disabling bearer <eth:syzkaller0>
[  207.069427][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  207.136603][T18536] bridge8: entered allmulticast mode
[  208.099408][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  208.663609][T18602] netlink: 'syz.0.5688': attribute type 16 has an invalid length.
[  208.666431][T18602] netlink: 'syz.0.5688': attribute type 17 has an invalid length.
[  208.705925][T18602] IPv6: NLM_F_REPLACE set, but no existing node found!
[  208.825122][T18608] lo speed is unknown, defaulting to 1000
[  209.149416][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  209.629191][T18673] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  209.635637][T18671] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  209.749960][T18684] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.782550][T18688] __nla_validate_parse: 16 callbacks suppressed
[  209.782569][T18688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5726'.
[  209.792310][T18692] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  209.797485][T18688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5726'.
[  209.845846][T18692] netlink: 'syz.2.5728': attribute type 10 has an invalid length.
[  209.851006][T18692] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  209.856639][T18692] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  209.863133][T18692] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  209.867182][T18692] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  209.972001][T18708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5734'.
[  210.046695][T18699] netlink: 424 bytes leftover after parsing attributes in process `syz.1.5730'.
[  210.189362][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  211.156754][T18760] sctp: [Deprecated]: syz.0.5755 (pid 18760) Use of int in max_burst socket option deprecated.
[  211.156754][T18760] Use struct sctp_assoc_value instead
[  211.219375][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  211.227184][T18765] delete_channel: no stack
[  211.305416][T18780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5765'.
[  211.312164][T18780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5765'.
[  211.344861][T18781] v: renamed from ip6_vti0
[  212.142994][T18819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5783'.
[  212.166735][T18821] GUP no longer grows the stack in syz.1.5784 (18821): 200000006000-20000000a000 (200000005000)
[  212.174598][T18821] CPU: 0 UID: 0 PID: 18821 Comm: syz.1.5784 Not tainted syzkaller #0 PREEMPT(full) 
[  212.174620][T18821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  212.174629][T18821] Call Trace:
[  212.174635][T18821]  <TASK>
[  212.174641][T18821]  dump_stack_lvl+0x189/0x250
[  212.174662][T18821]  ? __pfx_css_rstat_updated+0x10/0x10
[  212.174677][T18821]  ? __pfx_dump_stack_lvl+0x10/0x10
[  212.174691][T18821]  ? __pfx__printk+0x10/0x10
[  212.174706][T18821]  ? find_vma+0xe7/0x160
[  212.174721][T18821]  ? __cgroup_account_cputime+0xe5/0x120
[  212.174735][T18821]  __get_user_pages+0x24d0/0x2ce0
[  212.174749][T18821]  ? rcu_is_watching+0x15/0xb0
[  212.174770][T18821]  ? __gup_longterm_locked+0xc68/0x1660
[  212.174788][T18821]  ? __gup_longterm_locked+0xc68/0x1660
[  212.174806][T18821]  __gup_longterm_locked+0xde9/0x1660
[  212.174824][T18821]  ? try_grab_folio_fast+0x1be/0x4f0
[  212.174842][T18821]  ? rcu_is_watching+0x15/0xb0
[  212.174855][T18821]  ? rcu_is_watching+0x15/0xb0
[  212.174869][T18821]  gup_fast_fallback+0x1e6a/0x2010
[  212.174895][T18821]  ? __pfx_gup_fast_fallback+0x10/0x10
[  212.174909][T18821]  ? __mutex_lock+0x335/0x1350
[  212.174927][T18821]  ? lock_release+0x4b/0x3e0
[  212.174946][T18821]  ? futex_unqueue+0x22/0x240
[  212.174958][T18821]  ? futex_unqueue+0x22/0x240
[  212.174971][T18821]  ? is_valid_gup_args+0x11f/0x200
[  212.174986][T18821]  ? get_user_pages_fast+0x4d/0xb0
[  212.175001][T18821]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  212.175024][T18821]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  212.175042][T18821]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  212.175087][T18821]  ? wait_for_space+0x24d/0x2d0
[  212.175108][T18821]  iov_iter_get_pages2+0x5e/0xa0
[  212.175123][T18821]  __se_sys_vmsplice+0x548/0x10d0
[  212.175148][T18821]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  212.175167][T18821]  ? __pfx_futex_wait+0x10/0x10
[  212.175199][T18821]  ? do_pipe2+0xf7/0x170
[  212.175216][T18821]  ? rcu_is_watching+0x15/0xb0
[  212.175229][T18821]  ? rcu_is_watching+0x15/0xb0
[  212.175241][T18821]  do_syscall_64+0xfa/0x3b0
[  212.175260][T18821]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.175272][T18821]  ? exc_page_fault+0x9f/0xf0
[  212.175288][T18821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.175300][T18821] RIP: 0033:0x7fc88558ebe9
[  212.175312][T18821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  212.175324][T18821] RSP: 002b:00007fc88646f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  212.175339][T18821] RAX: ffffffffffffffda RBX: 00007fc8857b5fa0 RCX: 00007fc88558ebe9
[  212.175348][T18821] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[  212.175356][T18821] RBP: 00007fc885611e19 R08: 0000000000000000 R09: 0000000000000000
[  212.175364][T18821] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  212.175372][T18821] R13: 00007fc8857b6038 R14: 00007fc8857b5fa0 R15: 00007ffd0251bce8
[  212.175386][T18821]  </TASK>
[  212.191088][T18823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5785'.
[  212.269368][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  212.282311][T18824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5785'.
[  212.302773][T18823] macvtap1: entered promiscuous mode
[  212.319208][T18823] erspan0: entered promiscuous mode
[  212.322027][T18823] macvtap1: entered allmulticast mode
[  212.332171][T18823] erspan0: entered allmulticast mode
[  212.339050][T18826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5786'.
[  212.457458][T18841] lo speed is unknown, defaulting to 1000
[  212.661754][T18841] netlink: 'syz.0.5793': attribute type 13 has an invalid length.
[  212.664802][T18841] netlink: 'syz.0.5793': attribute type 17 has an invalid length.
[  212.670173][T18841] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  212.683190][T18862] netlink: 'syz.2.5801': attribute type 12 has an invalid length.
[  212.783398][T18876] netlink: 'syz.0.5807': attribute type 1 has an invalid length.
[  212.786640][T18876] netlink: 'syz.0.5807': attribute type 3 has an invalid length.
[  212.816794][T18878] lo speed is unknown, defaulting to 1000
[  212.868936][T18887] geneve3: entered promiscuous mode
[  212.875006][T18887] geneve3: entered allmulticast mode
[  213.299425][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  213.724630][T18950] lo: entered allmulticast mode
[  213.727040][T18950] lo: left allmulticast mode
[  213.744521][T18951] netlink: 'syz.2.5839': attribute type 7 has an invalid length.
[  213.747957][T18951] netlink: 'syz.2.5839': attribute type 8 has an invalid length.
[  213.912408][T18969] netlink: 'syz.0.5848': attribute type 1 has an invalid length.
[  213.917021][T18971] netlink: 'syz.2.5849': attribute type 3 has an invalid length.
[  214.339355][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  214.507293][T19057] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  214.515121][T19059] Unsupported ieee802154 address type: 0
[  214.543215][T19057] syzkaller0: entered promiscuous mode
[  214.545703][T19057] syzkaller0: entered allmulticast mode
[  214.549166][T19057] tipc: Resetting bearer <eth:syzkaller0>
[  214.565821][T19056] tipc: Resetting bearer <eth:syzkaller0>
[  214.610512][T19056] tipc: Disabling bearer <eth:syzkaller0>
[  214.719568][T19069] lo speed is unknown, defaulting to 1000
[  214.921079][T19084] validate_nla: 4 callbacks suppressed
[  214.921096][T19084] netlink: 'syz.1.5897': attribute type 83 has an invalid length.
[  215.223953][T19108] ip6gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue
[  215.379378][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  215.458703][    T9] lo speed is unknown, defaulting to 1000
[  215.461785][ T5713] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  215.464073][    T9] s: Port: 1 Link DOWN
[  215.465162][ T5713] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.471253][ T5713] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  215.474649][ T5713] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.482502][T19117] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  215.489542][    T9] lo speed is unknown, defaulting to 1000
[  215.491768][ T5713] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  215.496097][ T5713] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.500200][ T5713] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  215.509819][ T5713] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.590144][T19124] netlink: 'syz.2.5912': attribute type 1 has an invalid length.
[  215.593001][T19124] __nla_validate_parse: 12 callbacks suppressed
[  215.593010][T19124] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5912'.
[  215.657086][T19137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5918'.
[  215.676531][T19137] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5918'.
[  215.683079][T19137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5918'.
[  215.730524][T19140] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  215.734810][T19141] syzkaller0: entered promiscuous mode
[  215.737167][T19141] syzkaller0: entered allmulticast mode
[  215.746986][T19140] tipc: Resetting bearer <eth:syzkaller0>
[  215.751866][T19139] tipc: Resetting bearer <eth:syzkaller0>
[  215.756868][T19139] tipc: Disabling bearer <eth:syzkaller0>
[  215.913241][T19157] tap0: tun_chr_ioctl cmd 1074025677
[  215.915432][T19157] tap0: linktype set to 0
[  216.061250][T19169] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5930'.
[  216.145504][T19178] netlink: 452 bytes leftover after parsing attributes in process `syz.0.5932'.
[  216.180326][T19184] netlink: 'syz.2.5937': attribute type 32 has an invalid length.
[  216.224476][T19190] netlink: 22 bytes leftover after parsing attributes in process `syz.1.5940'.
[  216.284230][T19200] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.305169][T19204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5947'.
[  216.308178][T19204] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5947'.
[  216.339207][T19212] netlink: 'syz.1.5951': attribute type 11 has an invalid length.
[  216.376085][T19220] syzkaller0: entered promiscuous mode
[  216.378083][T19220] syzkaller0: entered allmulticast mode
[  216.384434][T19220] macsec3: entered promiscuous mode
[  216.419475][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  216.518965][T19237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5962'.
[  216.641266][T19255] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  216.644386][T19255] IPv6: NLM_F_CREATE should be set when creating new route
[  216.673503][T19260] netlink: 'syz.1.5974': attribute type 1 has an invalid length.
[  217.010136][ T5713] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  217.469565][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  218.190751][T19351] syzkaller0: entered promiscuous mode
[  218.192675][T19351] syzkaller0: entered allmulticast mode
[  218.207734][T19351] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.250077][T19351] tipc: Resetting bearer <eth:syzkaller0>
[  218.258735][T19350] tipc: Resetting bearer <eth:syzkaller0>
[  218.263753][T19350] tipc: Disabling bearer <eth:syzkaller0>
[  218.493521][T19394] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.497301][T19394] syzkaller0: entered promiscuous mode
[  218.501000][T19394] syzkaller0: entered allmulticast mode
[  218.507777][T19394] tipc: Resetting bearer <eth:syzkaller0>
[  218.509394][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  218.513076][T19392] tipc: Resetting bearer <eth:syzkaller0>
[  218.516800][T19392] tipc: Disabling bearer <eth:syzkaller0>
[  219.012187][T19447] netlink: 'syz.1.6052': attribute type 1 has an invalid length.
[  219.268948][T19461] netlink: 'syz.1.6058': attribute type 1 has an invalid length.
[  219.534581][T19470] netlink: 'syz.1.6061': attribute type 1 has an invalid length.
[  219.549367][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  219.577441][T19474] bridge_slave_0: entered promiscuous mode
[  219.801234][T19500] netlink: 'syz.0.6075': attribute type 7 has an invalid length.
[  219.930239][T19509] netlink: 'syz.0.6079': attribute type 1 has an invalid length.
[  219.939958][T19509] 8021q: adding VLAN 0 to HW filter on device bond5
[  219.955426][T19509] bond5: (slave gretap1): making interface the new active one
[  219.958599][T19509] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  220.579325][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  220.628536][T19538] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.725069][T19541] syz_tun: left promiscuous mode
[  220.730666][T19541] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.734161][T19541] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  221.085478][T19545] __nla_validate_parse: 8 callbacks suppressed
[  221.085493][T19545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6094'.
[  221.337145][T19586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6112'.
[  221.387470][T19592] lo speed is unknown, defaulting to 1000
[  221.503585][T19607] netlink: 75 bytes leftover after parsing attributes in process `syz.0.6122'.
[  221.619343][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  221.698637][T19624] netlink: 'syz.0.6129': attribute type 1 has an invalid length.
[  221.709357][T19624] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6129'.
[  221.863902][T19634] syzkaller1: entered promiscuous mode
[  221.866359][T19634] syzkaller1: entered allmulticast mode
[  221.960556][T19640] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6137'.
[  221.964576][T19640] gretap0: entered promiscuous mode
[  222.011297][T19644] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6139'.
[  222.033093][T19646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6140'.
[  222.659497][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  223.007141][T19688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6155'.
[  223.107274][T19689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6157'.
[  223.270679][T19725] netlink: 452 bytes leftover after parsing attributes in process `syz.2.6176'.
[  223.671626][T19768] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  223.674808][T19768] syzkaller0: entered promiscuous mode
[  223.677076][T19768] syzkaller0: entered allmulticast mode
[  223.686251][T19768] tipc: Resetting bearer <eth:syzkaller0>
[  223.690324][T19767] tipc: Resetting bearer <eth:syzkaller0>
[  223.696451][T19767] tipc: Disabling bearer <eth:syzkaller0>
[  223.699353][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  223.902937][T19803] netlink: 'syz.1.6210': attribute type 1 has an invalid length.
[  223.926191][T19804] lo speed is unknown, defaulting to 1000
[  224.134841][T19824] netlink: 'syz.1.6220': attribute type 1 has an invalid length.
[  224.321181][T19842] lo speed is unknown, defaulting to 1000
[  224.353377][T19844] bridge_slave_0: left allmulticast mode
[  224.355968][T19844] veth0_to_bond: left allmulticast mode
[  224.360214][T19844] vlan0: left promiscuous mode
[  224.362729][T19844] sit1: left allmulticast mode
[  224.364714][T19844] veth3: left promiscuous mode
[  224.368004][T19844] gretap2: left promiscuous mode
[  224.370290][T19844] vlan2: left promiscuous mode
[  224.372277][T19844] bridge0: left promiscuous mode
[  224.375142][T19844] bond2: left promiscuous mode
[  224.377189][T19844] bond2: left allmulticast mode
[  224.380812][T19844] bridge7: left allmulticast mode
[  224.383242][T19844] bridge8: left promiscuous mode
[  224.385408][T19844] ip6erspan0: left promiscuous mode
[  224.739387][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  224.805272][T19881] erspan0: entered promiscuous mode
[  224.811602][T19881] erspan0: left promiscuous mode
[  225.503320][T19915] syzkaller1: entered promiscuous mode
[  225.505426][T19915] syzkaller1: entered allmulticast mode
[  225.559103][T19917] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  225.565247][T19917] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  225.779364][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  225.861861][T19949] netlink: 'syz.2.6276': attribute type 9 has an invalid length.
[  225.966851][T19934] syzkaller1: entered allmulticast mode
[  226.116560][T19980] netlink: 'syz.1.6290': attribute type 2 has an invalid length.
[  226.122632][T19980] k*]: entered promiscuous mode
[  226.135634][T19980] erspan0: left promiscuous mode
[  226.152821][T19980] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  226.158048][   T24] lo speed is unknown, defaulting to 1000
[  226.161277][   T24] s: Port: 1 Link ACTIVE
[  226.164275][   T24] lo speed is unknown, defaulting to 1000
[  226.175602][T19980] veth0_to_team: entered promiscuous mode
[  226.177583][T19980] veth0_to_team: entered allmulticast mode
[  226.408418][T20009] bridge_slave_0: left promiscuous mode
[  226.416131][T20010] netlink: 'syz.1.6304': attribute type 13 has an invalid length.
[  226.418871][T20010] netlink: 'syz.1.6304': attribute type 17 has an invalid length.
[  226.422640][T20009] gretap2: left promiscuous mode
[  226.424715][T20009] gretap2: left allmulticast mode
[  226.429495][T20009] bond6: left promiscuous mode
[  226.434096][T20009] batadv0: left promiscuous mode
[  226.436358][T20009] batadv0: left allmulticast mode
[  226.441720][T20009] bridge8: left allmulticast mode
[  226.449170][T20009] erspan0: left allmulticast mode
[  226.452068][T20009] macvtap1: left promiscuous mode
[  226.453805][T20009] macvtap1: left allmulticast mode
[  226.498103][T20010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  226.514141][T20012] lo speed is unknown, defaulting to 1000
[  226.728706][T20015] netlink: 'syz.0.6305': attribute type 12 has an invalid length.
[  226.782938][T20021] __nla_validate_parse: 12 callbacks suppressed
[  226.782953][T20021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6307'.
[  226.829644][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  227.071581][T20043] syzkaller0: entered promiscuous mode
[  227.073587][T20043] syzkaller0: entered allmulticast mode
[  227.579439][T20090] block nbd1: server does not support multiple connections per device.
[  227.583216][T20090] block nbd1: shutting down sockets
[  227.750549][T20105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6346'.
[  227.861984][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  227.892038][T20123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6356'.
[  227.896272][T20123] netlink: 'syz.2.6356': attribute type 11 has an invalid length.
[  227.937520][T20131] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6360'.
[  228.028526][T20143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6366'.
[  228.033217][T20143] openvswitch: netlink: Unknown nsh attribute 0
[  228.035373][T20143] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.219489][T20178] netlink: 'syz.2.6382': attribute type 39 has an invalid length.
[  228.414382][T20205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6394'.
[  228.436943][T20209] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6397'.
[  228.453237][T20212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6399'.
[  228.899416][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  229.162764][T20287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6429'.
[  229.249481][T20291] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  229.253235][T20291] syzkaller0: entered promiscuous mode
[  229.255760][T20291] syzkaller0: entered allmulticast mode
[  229.266484][T20291] tipc: Resetting bearer <eth:syzkaller0>
[  229.271208][T20290] tipc: Resetting bearer <eth:syzkaller0>
[  229.275460][T20290] tipc: Disabling bearer <eth:syzkaller0>
[  229.373705][T20299] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  229.505798][T20313] !: renamed from dummy0
[  229.528582][T20313] lo speed is unknown, defaulting to 1000
[  229.558465][T20316] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  229.604516][T20322] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  229.624900][T20322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6445'.
[  229.674344][T20325] netlink: 'syz.0.6447': attribute type 4 has an invalid length.
[  229.949382][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  230.028064][T20361] netlink: 'syz.1.6463': attribute type 1 has an invalid length.
[  230.989328][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  231.159677][T20425] netlink: 'syz.0.6492': attribute type 22 has an invalid length.
[  231.688053][T20467] netlink: 'syz.1.6512': attribute type 29 has an invalid length.
[  231.707457][T20470] netlink: 'syz.1.6514': attribute type 13 has an invalid length.
[  231.712999][T20470] netlink: 'syz.1.6514': attribute type 17 has an invalid length.
[  231.722839][T20470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  231.782302][T20483] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.898770][T20506] lo speed is unknown, defaulting to 1000
[  231.904797][T20506] lo speed is unknown, defaulting to 1000
[  231.911994][T20506] lo speed is unknown, defaulting to 1000
[  231.917139][T20506] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  231.927315][T20506] lo speed is unknown, defaulting to 1000
[  231.930622][T20506] lo speed is unknown, defaulting to 1000
[  231.933689][T20506] lo speed is unknown, defaulting to 1000
[  231.942445][T20506] __nla_validate_parse: 7 callbacks suppressed
[  231.942461][T20506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6531'.
[  232.019409][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  232.033848][T20516] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  232.073157][T20524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6540'.
[  232.265917][T20557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6557'.
[  232.335755][T20569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6562'.
[  232.344623][T20562] lo speed is unknown, defaulting to 1000
[  232.420358][T20562] lo speed is unknown, defaulting to 1000
[  232.426624][T20576] netlink: 826 bytes leftover after parsing attributes in process `syz.1.6565'.
[  232.436209][T20578] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  232.549809][T20588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6570'.
[  232.564558][T20588] openvswitch: netlink: Flow actions attr not present in new flow.
[  232.794043][T20617] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6582'.
[  232.799167][T20617] ip6erspan0: entered allmulticast mode
[  232.818660][T20621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6583'.
[  232.983463][T20632] sctp: [Deprecated]: syz.0.6589 (pid 20632) Use of int in maxseg socket option.
[  232.983463][T20632] Use struct sctp_assoc_value instead
[  233.036789][T20636] netlink: 'syz.0.6591': attribute type 1 has an invalid length.
[  233.041270][T20636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6591'.
[  233.045056][T20636] netlink: 'syz.0.6591': attribute type 1 has an invalid length.
[  233.059428][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  233.066178][T20638] netlink: 'syz.0.6592': attribute type 1 has an invalid length.
[  233.078024][T20638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6592'.
[  233.211890][T20662] ip6gre1: entered allmulticast mode
[  233.220855][T20664] tipc: Failed to remove unknown binding: 66,1,1/0:473040920/473040922
[  233.224372][T20664] tipc: Failed to remove unknown binding: 66,1,1/0:473040920/473040922
[  233.227382][T20664] tipc: Failed to remove unknown binding: 66,1,1/0:473040920/473040922
[  233.334615][T20682] netlink: 'syz.0.6612': attribute type 1 has an invalid length.
[  233.342284][T20682] 8021q: adding VLAN 0 to HW filter on device bond6
[  233.361889][T20682] bond6: (slave bridge12): making interface the new active one
[  233.365819][T20682] bond6: (slave bridge12): Enslaving as an active interface with an up link
[  233.381476][T20682] bond6: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  233.592746][T20720] netlink: 'syz.2.6629': attribute type 10 has an invalid length.
[  233.733409][T20726] netlink: 'syz.2.6631': attribute type 4 has an invalid length.
[  233.875101][T20740] dvmrp0: entered allmulticast mode
[  234.109318][    C0] net_ratelimit: 1 callbacks suppressed
[  234.109329][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  234.582159][T20810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  235.149454][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  235.181459][   T33] audit: type=1800 audit(1756322571.700:8): pid=20877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6698" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=11060 res=0 errno=0
[  235.357213][T20895] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.363079][T20895] syzkaller0: entered promiscuous mode
[  235.365586][T20895] syzkaller0: entered allmulticast mode
[  235.381506][T20895] tipc: Resetting bearer <eth:syzkaller0>
[  235.385745][T20894] tipc: Resetting bearer <eth:syzkaller0>
[  235.392842][T20894] tipc: Disabling bearer <eth:syzkaller0>
[  235.617885][T20936] sch_tbf: burst 4398 is lower than device lo mtu (65499) !
[  235.622450][T20933] lo speed is unknown, defaulting to 1000
[  235.660764][T20933] lo speed is unknown, defaulting to 1000
[  235.756395][T20944] sctp: [Deprecated]: syz.2.6729 (pid 20944) Use of int in max_burst socket option.
[  235.756395][T20944] Use struct sctp_assoc_value instead
[  235.966174][T20971] lo speed is unknown, defaulting to 1000
[  236.016468][T20971] lo speed is unknown, defaulting to 1000
[  236.189461][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  236.685335][T21046] validate_nla: 9 callbacks suppressed
[  236.685350][T21046] netlink: 'syz.1.6776': attribute type 1 has an invalid length.
[  236.954734][T21057] __nla_validate_parse: 22 callbacks suppressed
[  236.954745][T21057] netlink: 11 bytes leftover after parsing attributes in process `syz.2.6780'.
[  237.219418][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  237.511047][T21086] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  237.515109][T21086] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  237.603090][T21092] netlink: 'syz.1.6797': attribute type 1 has an invalid length.
[  237.686208][T21102] netlink: 'syz.0.6801': attribute type 1 has an invalid length.
[  237.690949][T21102] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6801'.
[  237.697702][T21102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6801'.
[  237.724492][T21102] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6801'.
[  237.838323][T21116] lo speed is unknown, defaulting to 1000
[  237.882190][T21116] lo speed is unknown, defaulting to 1000
[  237.933721][T21116] netlink: 'syz.1.6808': attribute type 1 has an invalid length.
[  237.936654][T21116] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6808'.
[  237.940195][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6808'.
[  238.087576][T21141] sctp: [Deprecated]: syz.2.6816 (pid 21141) Use of int in max_burst socket option deprecated.
[  238.087576][T21141] Use struct sctp_assoc_value instead
[  238.259415][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  238.262787][T21163] netlink: 'syz.2.6827': attribute type 3 has an invalid length.
[  238.266025][T21163] netlink: 'syz.2.6827': attribute type 1 has an invalid length.
[  238.279594][T21163] netlink: 192 bytes leftover after parsing attributes in process `syz.2.6827'.
[  238.283026][T21163] NCSI netlink: No device for ifindex 0
[  238.309790][T21168] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6829'.
[  238.469526][T21195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6844'.
[  238.516830][T21206] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  238.526318][T21206] syzkaller0: entered promiscuous mode
[  238.526838][T21210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6850'.
[  238.528701][T21206] syzkaller0: entered allmulticast mode
[  238.542523][T21206] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) !
[  238.556079][T21206] tipc: Resetting bearer <eth:syzkaller0>
[  238.560132][T21205] tipc: Resetting bearer <eth:syzkaller0>
[  238.565403][T21214] netlink: 'syz.2.6852': attribute type 21 has an invalid length.
[  238.568696][T21205] tipc: Disabling bearer <eth:syzkaller0>
[  238.762314][T21250] netlink: 'syz.1.6868': attribute type 1 has an invalid length.
[  238.896856][T21275] netlink: 'syz.1.6880': attribute type 10 has an invalid length.
[  238.999219][T21289] syzkaller1: entered promiscuous mode
[  239.001506][T21289] syzkaller1: entered allmulticast mode
[  239.108838][T21307] lo speed is unknown, defaulting to 1000
[  239.167133][T21307] lo speed is unknown, defaulting to 1000
[  239.197742][T21320] netlink: 'syz.0.6899': attribute type 10 has an invalid length.
[  239.207833][T21320] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  239.299538][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  240.044643][T21392] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  240.048569][T21392] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  240.339414][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  240.907493][T21462] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  241.379426][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  241.937127][T21539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  242.402625][T21615] validate_nla: 1 callbacks suppressed
[  242.402640][T21615] netlink: 'syz.2.7029': attribute type 7 has an invalid length.
[  242.408346][T21615] __nla_validate_parse: 20 callbacks suppressed
[  242.408360][T21615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7029'.
[  242.419441][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  242.506605][T21634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7039'.
[  242.514154][T21634] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7039'.
[  242.528109][T21634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7039'.
[  242.674090][T21657] netlink: 'syz.2.7050': attribute type 3 has an invalid length.
[  242.978218][ T5896] cgroup: fork rejected by pids controller in /syz1
[  243.124753][T21714] netlink: 'syz.0.7078': attribute type 10 has an invalid length.
[  243.164783][ T5887] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  243.167419][ T5887] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  243.171047][ T5887] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  243.174430][ T5887] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  243.177761][ T5887] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  243.185102][T21734] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.7087'.
[  243.206159][T21727] lo speed is unknown, defaulting to 1000
[  243.216078][T21738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7089'.
[  243.260212][T21744] netlink: 'syz.0.7091': attribute type 10 has an invalid length.
[  243.276880][T21727] lo speed is unknown, defaulting to 1000
[  243.364405][T21727] chnl_net:caif_netlink_parms(): no params data found
[  243.415885][T21727] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.418445][T21727] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.421350][T21727] bridge_slave_0: entered allmulticast mode
[  243.424280][T21727] bridge_slave_0: entered promiscuous mode
[  243.427719][T21767] tipc: Enabled bearer <udp:syz2>, priority 26
[  243.431616][T21727] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.434129][T21727] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.437054][T21727] bridge_slave_1: entered allmulticast mode
[  243.440143][T21727] bridge_slave_1: entered promiscuous mode
[  243.455521][T21767] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  243.459497][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  243.459907][T21767] tipc: Enabled bearer <udp:syz0>, priority 26
[  243.466745][T21727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  243.472793][T21727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  243.504970][T21727] team0: Port device team_slave_0 added
[  243.509412][T21727] team0: Port device team_slave_1 added
[  243.527001][T21727] batman_adv: batadv0: Adding interface: batadv_slave_0
[  243.530070][T21727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.541549][T21727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.546998][T21727] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.550134][T21727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.560811][T21727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  243.589349][T21727] hsr_slave_0: entered promiscuous mode
[  243.592379][T21727] hsr_slave_1: entered promiscuous mode
[  243.595412][T21727] debugfs: 'hsr0' already exists in 'hsr'
[  243.597440][T21727] Cannot create hsr debugfs directory
[  243.650792][T21781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7106'.
[  243.686543][T21785] sctp: [Deprecated]: syz.0.7108 (pid 21785) Use of int in max_burst socket option deprecated.
[  243.686543][T21785] Use struct sctp_assoc_value instead
[  243.705156][T21785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7108'.
[  243.759220][T21789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7110'.
[  243.763197][T21789] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7110'.
[  243.785536][T21791] netlink: 'syz.0.7111': attribute type 9 has an invalid length.
[  243.861502][T21727] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  243.866126][T21727] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  243.871028][T21727] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  243.876826][T21727] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  243.897397][T21727] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.900129][T21727] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.903168][T21727] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.906040][T21727] bridge0: port 1(bridge_slave_0) entered forwarding state
[  243.935952][T21727] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.942937][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.946192][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.955441][T21727] 8021q: adding VLAN 0 to HW filter on device team0
[  243.967020][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.970105][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  243.977352][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.979876][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.997870][T21727] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  244.003134][T21727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  244.073208][T21727] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.094480][T21727] veth0_vlan: entered promiscuous mode
[  244.103486][T21727] veth1_vlan: entered promiscuous mode
[  244.129969][T21727] veth0_macvtap: entered promiscuous mode
[  244.133448][T21727] veth1_macvtap: entered promiscuous mode
[  244.140955][T21727] batman_adv: batadv0: Interface activated: batadv_slave_0
[  244.155417][T21727] batman_adv: batadv0: Interface activated: batadv_slave_1
[  244.163275][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.173832][ T5902] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.177047][ T5902] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.191410][ T5902] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.214200][  T837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.217134][  T837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.233448][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.239474][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.370541][T21840] lo speed is unknown, defaulting to 1000
[  244.468373][T21840] lo speed is unknown, defaulting to 1000
[  244.499571][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  244.539697][   T24] tipc: Node number set to 3609407244
[  244.593271][T21868] bond3: (slave erspan0): Releasing active interface
[  244.600988][T21868] bond0: (slave 0!): Releasing backup interface
[  244.606110][T21868] bond0: (slave 0!): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  244.615590][T21868] bond0: (slave batadv0): Releasing backup interface
[  244.625427][T21868] bond2: (slave geneve3): Releasing backup interface
[  244.630640][T21868] bond3: (slave veth7): Releasing active interface
[  244.636315][T21868] bond4: (slave vti0): Releasing backup interface
[  244.646744][T21868] bond5: (slave gretap1): Releasing active interface
[  244.657347][T21868] bond6: (slave bridge12): Releasing active interface
[  244.689635][T21886] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  244.707517][T21886] openvswitch: netlink: Message has 1 unknown bytes.
[  245.052733][T21933] tipc: Started in network mode
[  245.054899][T21933] tipc: Node identity ac14140f, cluster identity 4711
[  245.057868][T21933] tipc: New replicast peer: 255.255.255.255
[  245.062987][T21933] tipc: Enabled bearer <udp:syz2>, priority 26
[  245.220555][ T5235] Bluetooth: hci1: command tx timeout
[  245.292119][T21973] lo speed is unknown, defaulting to 1000
[  245.342263][T21973] lo speed is unknown, defaulting to 1000
[  245.366970][T21989] macsec4: entered promiscuous mode
[  245.369213][T21989] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  245.373023][T21989] macsec4: entered allmulticast mode
[  245.375257][T21989] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  245.411346][T21991] lo speed is unknown, defaulting to 1000
[  245.468763][T21991] lo speed is unknown, defaulting to 1000
[  245.539586][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  246.189655][ T5900] tipc: Node number set to 2886997007
[  246.446318][T22013] geneve4: entered promiscuous mode
[  246.451765][ T5904] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.455057][ T5904] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.458467][ T5904] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.463419][ T5904] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.589466][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  247.238266][T22078] netlink: 'syz.1.7231': attribute type 1 has an invalid length.
[  247.299675][ T5235] Bluetooth: hci1: command tx timeout
[  247.444184][T22108] __nla_validate_parse: 15 callbacks suppressed
[  247.444195][T22108] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7245'.
[  247.500774][T22118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7249'.
[  247.619408][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  247.968636][T22185] pim6reg1: entered promiscuous mode
[  247.971492][T22185] pim6reg1: entered allmulticast mode
[  248.502204][T22190] netlink: 508 bytes leftover after parsing attributes in process `syz.0.7278'.
[  248.516151][T22196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7281'.
[  248.553158][T22203] netlink: 'syz.0.7285': attribute type 3 has an invalid length.
[  248.586215][T22208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7287'.
[  248.589941][T22208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7287'.
[  248.593308][T22208] netlink: 'syz.1.7287': attribute type 18 has an invalid length.
[  248.626650][T22210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7288'.
[  248.631354][T22210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7288'.
[  248.635257][T22210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7288'.
[  248.640769][T22210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7288'.
[  248.669452][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  248.673962][T22217] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  249.379715][ T5887] Bluetooth: hci1: command tx timeout
[  249.405186][T22247] batadv_slave_1: entered promiscuous mode
[  249.408624][T22246] batadv_slave_1: left promiscuous mode
[  249.699526][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  250.351952][T22261] tipc: Enabled bearer <eth:gre0>, priority 10
[  250.425244][T22268] bridge_slave_1: left allmulticast mode
[  250.430476][T22268] bridge_slave_1: left promiscuous mode
[  250.432953][T22268] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.447232][T22268] bridge_slave_0: left allmulticast mode
[  250.450214][T22268] bridge_slave_0: left promiscuous mode
[  250.452662][T22268] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.602016][T22281] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  250.604739][T22283] ==================================================================
[  250.605226][T22281] syzkaller0: entered promiscuous mode
[  250.607460][T22283] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  250.607479][T22283] Read of size 4 at addr ffff88803fff6944 by task syz.0.7320/22283
[  250.607487][T22283] 
[  250.607493][T22283] CPU: 0 UID: 0 PID: 22283 Comm: syz.0.7320 Not tainted syzkaller #0 PREEMPT(full) 
[  250.607508][T22283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  250.607513][T22283] Call Trace:
[  250.607517][T22283]  <TASK>
[  250.607522][T22283]  dump_stack_lvl+0x189/0x250
[  250.607533][T22283]  ? __pfx_dump_stack_lvl+0x10/0x10
[  250.607542][T22283]  ? lock_release+0x4b/0x3e0
[  250.607555][T22283]  ? __virt_addr_valid+0x4a5/0x5c0
[  250.607567][T22283]  print_report+0xca/0x240
[  250.607574][T22283]  ? xfrm_alloc_spi+0x570/0xf30
[  250.607582][T22283]  kasan_report+0x118/0x150
[  250.607592][T22283]  ? lock_acquire+0x5f/0x360
[  250.607602][T22283]  ? xfrm_alloc_spi+0x570/0xf30
[  250.607611][T22283]  xfrm_alloc_spi+0x570/0xf30
[  250.607618][T22283]  ? xfrm_alloc_spi+0x2a0/0xf30
[  250.607626][T22283]  ? __local_bh_enable_ip+0x63/0x1c0
[  250.607635][T22283]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  250.607642][T22283]  ? xfrm_find_acq+0x87/0xa0
[  250.607650][T22283]  pfkey_getspi+0x7a8/0xee0
[  250.607659][T22283]  pfkey_sendmsg+0xbfe/0x1090
[  250.607665][T22283]  ? trace_sched_exit_tp+0x36/0x110
[  250.607676][T22283]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  250.607686][T22283]  ? rcu_is_watching+0x15/0xb0
[  250.607693][T22283]  ? futex_unqueue+0x22/0x240
[  250.607700][T22283]  ? aa_sock_msg_perm+0xf1/0x1d0
[  250.607707][T22283]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  250.607716][T22283]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  250.607722][T22283]  __sock_sendmsg+0x21c/0x270
[  250.607732][T22283]  ____sys_sendmsg+0x505/0x830
[  250.607740][T22283]  ? __pfx_____sys_sendmsg+0x10/0x10
[  250.607748][T22283]  ? import_iovec+0x74/0xa0
[  250.607756][T22283]  ___sys_sendmsg+0x21f/0x2a0
[  250.607763][T22283]  ? __pfx____sys_sendmsg+0x10/0x10
[  250.607772][T22283]  ? futex_wait+0x285/0x360
[  250.607785][T22283]  ? __fget_files+0x2a/0x420
[  250.607817][T22283]  ? __fget_files+0x3a0/0x420
[  250.607830][T22283]  __x64_sys_sendmsg+0x19b/0x260
[  250.607838][T22283]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  250.607846][T22283]  ? rcu_is_watching+0x15/0xb0
[  250.607854][T22283]  ? rcu_is_watching+0x15/0xb0
[  250.607860][T22283]  do_syscall_64+0xfa/0x3b0
[  250.607871][T22283]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.607879][T22283]  ? exc_page_fault+0x9f/0xf0
[  250.607889][T22283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.607897][T22283] RIP: 0033:0x7f6529b8ebe9
[  250.607905][T22283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.607912][T22283] RSP: 002b:00007f652aa92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  250.607920][T22283] RAX: ffffffffffffffda RBX: 00007f6529db5fa0 RCX: 00007f6529b8ebe9
[  250.607926][T22283] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003
[  250.607931][T22283] RBP: 00007f6529c11e19 R08: 0000000000000000 R09: 0000000000000000
[  250.607935][T22283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  250.607940][T22283] R13: 00007f6529db6038 R14: 00007f6529db5fa0 R15: 00007ffc45fee918
[  250.607948][T22283]  </TASK>
[  250.607951][T22283] 
[  250.610034][T22281] syzkaller0: entered allmulticast mode
[  250.612542][T22283] Allocated by task 22200:
[  250.612551][T22283]  kasan_save_track+0x3e/0x80
[  250.733830][T22283]  __kasan_slab_alloc+0x6c/0x80
[  250.735716][T22283]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  250.737757][T22283]  xfrm_state_alloc+0x24/0x2f0
[  250.739525][T22283]  xfrm_add_sa+0x17d1/0x4070
[  250.741220][T22283]  xfrm_user_rcv_msg+0x7a3/0xab0
[  250.743220][T22283]  netlink_rcv_skb+0x208/0x470
[  250.745152][T22283]  xfrm_netlink_rcv+0x79/0x90
[  250.747080][T22283]  netlink_unicast+0x82f/0x9e0
[  250.749199][T22283]  netlink_sendmsg+0x805/0xb30
[  250.751277][T22283]  __sock_sendmsg+0x21c/0x270
[  250.753313][T22283]  ____sys_sendmsg+0x505/0x830
[  250.755348][T22283]  ___sys_sendmsg+0x21f/0x2a0
[  250.757320][T22283]  __x64_sys_sendmsg+0x19b/0x260
[  250.759415][T22283]  do_syscall_64+0xfa/0x3b0
[  250.761316][T22283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.763727][T22283] 
[  250.764740][T22283] Freed by task 5930:
[  250.766412][T22283]  kasan_save_track+0x3e/0x80
[  250.768434][T22283]  kasan_save_free_info+0x46/0x50
[  250.770611][T22283]  __kasan_slab_free+0x5b/0x80
[  250.772648][T22283]  kmem_cache_free+0x18f/0x400
[  250.774684][T22283]  xfrm_state_gc_task+0x52d/0x6b0
[  250.776821][T22283]  process_scheduled_works+0xae1/0x17b0
[  250.779095][T22283]  worker_thread+0x8a0/0xda0
[  250.780985][T22283]  kthread+0x711/0x8a0
[  250.782651][T22283]  ret_from_fork+0x3fc/0x770
[  250.784591][T22283]  ret_from_fork_asm+0x1a/0x30
[  250.786615][T22283] 
[  250.787615][T22283] The buggy address belongs to the object at ffff88803fff6880
[  250.787615][T22283]  which belongs to the cache xfrm_state of size 928
[  250.793061][T22283] The buggy address is located 196 bytes inside of
[  250.793061][T22283]  freed 928-byte region [ffff88803fff6880, ffff88803fff6c20)
[  250.798515][T22283] 
[  250.799578][T22283] The buggy address belongs to the physical page:
[  250.802346][T22283] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3fff4
[  250.806034][T22283] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  250.809592][T22283] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  250.812835][T22283] page_type: f5(slab)
[  250.814577][T22283] raw: 00fff00000000040 ffff888104d4fb40 dead000000000122 0000000000000000
[  250.818168][T22283] raw: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  250.821745][T22283] head: 00fff00000000040 ffff888104d4fb40 dead000000000122 0000000000000000
[  250.825436][T22283] head: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  250.829073][T22283] head: 00fff00000000002 ffffea0000fffd01 00000000ffffffff 00000000ffffffff
[  250.832588][T22283] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  250.836144][T22283] page dumped because: kasan: bad access detected
[  250.838820][T22283] page_owner tracks the page as allocated
[  250.841230][T22283] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 10168, tgid 10161 (syz.0.1892), ts 106026304556, free_ts 105786292034
[  250.849373][T22283]  post_alloc_hook+0x240/0x2a0
[  250.851450][T22283]  get_page_from_freelist+0x21e4/0x22c0
[  250.853823][T22283]  __alloc_frozen_pages_noprof+0x181/0x370
[  250.856158][T22283]  alloc_pages_mpol+0x232/0x4a0
[  250.857910][T22283]  allocate_slab+0x8a/0x370
[  250.859406][T22283]  ___slab_alloc+0xbeb/0x1410
[  250.861183][T22283]  kmem_cache_alloc_noprof+0x283/0x3c0
[  250.862983][T22283]  xfrm_state_alloc+0x24/0x2f0
[  250.864539][T22283]  xfrm_state_find+0x37d4/0x5400
[  250.866151][T22283]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  250.868134][T22283]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  250.869850][T22283]  xfrm_lookup_route+0x3c/0x1c0
[  250.871456][T22283]  udp_sendmsg+0x142e/0x2170
[  250.873008][T22283]  __sock_sendmsg+0x19c/0x270
[  250.874605][T22283]  ____sys_sendmsg+0x52d/0x830
[  250.876218][T22283]  ___sys_sendmsg+0x21f/0x2a0
[  250.877822][T22283] page last free pid 10177 tgid 10177 stack trace:
[  250.880213][T22283]  __free_frozen_pages+0xbc4/0xd30
[  250.882329][T22283]  __put_partials+0x156/0x1a0
[  250.884365][T22283]  put_cpu_partial+0x17c/0x250
[  250.886338][T22283]  __slab_free+0x2d5/0x3c0
[  250.888252][T22283]  qlist_free_all+0x97/0x140
[  250.890220][T22283]  kasan_quarantine_reduce+0x148/0x160
[  250.892464][T22283]  __kasan_slab_alloc+0x22/0x80
[  250.894557][T22283]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  250.896845][T22283]  getname_flags+0xb8/0x540
[  250.898779][T22283]  do_sys_openat2+0xbc/0x1c0
[  250.900774][T22283]  __x64_sys_openat+0x138/0x170
[  250.902848][T22283]  do_syscall_64+0xfa/0x3b0
[  250.904704][T22283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.907128][T22283] 
[  250.908141][T22283] Memory state around the buggy address:
[  250.910299][T22283]  ffff88803fff6800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  250.913683][T22283]  ffff88803fff6880: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  250.917028][T22283] >ffff88803fff6900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  250.920362][T22283]                                            ^
[  250.922922][T22283]  ffff88803fff6980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  250.926311][T22283]  ffff88803fff6a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  250.929693][T22283] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  250.933305][T22283] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  250.936472][T22283] CPU: 0 UID: 0 PID: 22283 Comm: syz.0.7320 Not tainted syzkaller #0 PREEMPT(full) 
[  250.940445][T22283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  250.944824][T22283] Call Trace:
[  250.946391][T22283]  <TASK>
[  250.947711][T22283]  dump_stack_lvl+0x99/0x250
[  250.949735][T22283]  ? __asan_memcpy+0x40/0x70
[  250.951750][T22283]  ? __pfx_dump_stack_lvl+0x10/0x10
[  250.954008][T22283]  ? __pfx__printk+0x10/0x10
[  250.956041][T22283]  vpanic+0x281/0x750
[  250.957760][T22283]  ? __pfx_vpanic+0x10/0x10
[  250.959709][T22283]  ? rcu_is_watching+0x15/0xb0
[  250.961751][T22283]  panic+0xb9/0xc0
[  250.963371][T22283]  ? __pfx_panic+0x10/0x10
[  250.965302][T22283]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  250.967856][T22283]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  250.970356][T22283]  ? xfrm_alloc_spi+0x570/0xf30
[  250.972379][T22283]  check_panic_on_warn+0x89/0xb0
[  250.974434][T22283]  ? xfrm_alloc_spi+0x570/0xf30
[  250.976543][T22283]  end_report+0x78/0x160
[  250.978393][T22283]  kasan_report+0x129/0x150
[  250.980330][T22283]  ? lock_acquire+0x5f/0x360
[  250.982348][T22283]  ? xfrm_alloc_spi+0x570/0xf30
[  250.984412][T22283]  xfrm_alloc_spi+0x570/0xf30
[  250.986415][T22283]  ? xfrm_alloc_spi+0x2a0/0xf30
[  250.988506][T22283]  ? __local_bh_enable_ip+0x63/0x1c0
[  250.990782][T22283]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  250.992975][T22283]  ? xfrm_find_acq+0x87/0xa0
[  250.994967][T22283]  pfkey_getspi+0x7a8/0xee0
[  250.996902][T22283]  pfkey_sendmsg+0xbfe/0x1090
[  250.998847][T22283]  ? trace_sched_exit_tp+0x36/0x110
[  251.000975][T22283]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  251.003090][T22283]  ? rcu_is_watching+0x15/0xb0
[  251.005160][T22283]  ? futex_unqueue+0x22/0x240
[  251.007194][T22283]  ? aa_sock_msg_perm+0xf1/0x1d0
[  251.009247][T22283]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  251.011450][T22283]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  251.013527][T22283]  __sock_sendmsg+0x21c/0x270
[  251.015458][T22283]  ____sys_sendmsg+0x505/0x830
[  251.017507][T22283]  ? __pfx_____sys_sendmsg+0x10/0x10
[  251.019733][T22283]  ? import_iovec+0x74/0xa0
[  251.021616][T22283]  ___sys_sendmsg+0x21f/0x2a0
[  251.023554][T22283]  ? __pfx____sys_sendmsg+0x10/0x10
[  251.025755][T22283]  ? futex_wait+0x285/0x360
[  251.027728][T22283]  ? __fget_files+0x2a/0x420
[  251.029689][T22283]  ? __fget_files+0x3a0/0x420
[  251.031680][T22283]  __x64_sys_sendmsg+0x19b/0x260
[  251.033728][T22283]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  251.036079][T22283]  ? rcu_is_watching+0x15/0xb0
[  251.038151][T22283]  ? rcu_is_watching+0x15/0xb0
[  251.040230][T22283]  do_syscall_64+0xfa/0x3b0
[  251.042200][T22283]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.044792][T22283]  ? exc_page_fault+0x9f/0xf0
[  251.046878][T22283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.049412][T22283] RIP: 0033:0x7f6529b8ebe9
[  251.051368][T22283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  251.059423][T22283] RSP: 002b:00007f652aa92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  251.062985][T22283] RAX: ffffffffffffffda RBX: 00007f6529db5fa0 RCX: 00007f6529b8ebe9
[  251.066266][T22283] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003
[  251.069660][T22283] RBP: 00007f6529c11e19 R08: 0000000000000000 R09: 0000000000000000
[  251.073052][T22283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  251.076433][T22283] R13: 00007f6529db6038 R14: 00007f6529db5fa0 R15: 00007ffc45fee918
[  251.079838][T22283]  </TASK>
[  251.081905][T22283] Kernel Offset: disabled
[  251.083724][T22283] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:23:07  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81a02385 RBX=ffffffff81a02344 RCX=0000000000080000 RDX=ffffc90007d39000
RSI=000000000003e1fc RDI=000000000003e1fd RBP=ffffc9000497f370 RSP=ffffc9000497f260
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1c25c19
R12=dffffc0000000000 R13=1ffff9200092fe50 R14=0000000000000000 R15=000000000000001b
RIP=ffffffff81a02373 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f652aa926c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000011072c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6529d87498 00007f6529d87470 XMM03=00007f6529d874a8 00007f6529d874a0
XMM04=00007f652a8ed100 00007f6529d87460 XMM05=00007f6529d87478 00007f6529d874c0
XMM06=00007f6529d874b8 00007f6529d874b0 XMM07=00007f6529d874a8 00007f6529d874a0
XMM08=0000000000000000 00007f6529c12ee7 XMM09=0000000000000000 00007f6529c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000079 RBX=0000000000000079 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000331fc RDI=00000000000331fd RBP=00000000000003f8 RSP=ffffc900072f7350
R8 =ffff888020010237 R9 =1ffff11004002046 R10=dffffc0000000000 R11=ffffffff854f1e80
R12=dffffc0000000000 R13=ffffffff99afa909 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1efc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe432df66c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002280 CR3=000000003cec6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000003072 656c6c616b7a7973
XMM02=3072656c6c616b7a ffffffff8133c57e XMM03=0000000000001700 1c00000041010000
XMM04=00007fe4358ed100 00007fe434d87460 XMM05=00007fe434d87478 00007fe434d874c0
XMM06=00007fe434d874b8 00007fe434d874b0 XMM07=00007fe434d874a8 00007fe434d874a0
XMM08=0000000000000000 00007fe434c12ee7 XMM09=0000000000000000 00007fe434c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
