last executing test programs:

2m33.194549095s ago: executing program 2 (id=239):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e40)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@empty, 0x0, 0x6159, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6c}, @in6=@remote, {0x0, 0x40, 0x0, 0x0, 0x4000}, {0x8, 0x0, 0x10, 0x100000400000000}, {}, 0x0, 0x3506, 0xa, 0x0, 0xfe, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'rmd320-generic\x00'}, 0x0, 0x60}}]}, 0x184}}, 0x0)

2m33.125732395s ago: executing program 2 (id=241):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x40}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x10)

2m32.984391617s ago: executing program 2 (id=244):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000000}, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

2m32.759122026s ago: executing program 2 (id=251):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x9, 0x0, &(0x7f0000000a40)="30dd0d6c12d6fae2fc", 0x0}, 0x50)

2m32.706851739s ago: executing program 2 (id=252):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x48, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x103462, 0x4, 0xacd, 0x4, 0x7, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, &(0x7f0000000340)={[], [{@subj_type={'subj_type', 0x3d, 'syz1\x00'}}]})

2m32.408126508s ago: executing program 2 (id=255):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4020000000000006111480000000000850000003b000000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21)

2m17.35228323s ago: executing program 32 (id=255):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4020000000000006111480000000000850000003b000000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21)

2m10.371871251s ago: executing program 3 (id=467):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000)=r3, 0x10)

2m10.278889866s ago: executing program 3 (id=469):
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x4000})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8994, &(0x7f0000000080))

2m9.976184224s ago: executing program 3 (id=471):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff0016e0", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe97, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0xbf, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x6517d7ee1316269c, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x40000)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x122)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x2400c800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="18030000000000000000ff1269a90000851000000600000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000066000000000080001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080))
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xffbf)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

2m7.134380136s ago: executing program 3 (id=478):
r0 = socket$kcm(0x2, 0x200000000000003, 0x106)
setsockopt$sock_attach_bpf(r0, 0x0, 0xb, 0x0, 0xbf526d7176abaa21)

2m7.054022046s ago: executing program 3 (id=480):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0x100000001}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000003f000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

2m5.011452717s ago: executing program 3 (id=491):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x14, 0x3a, 0x301, 0x70bd27, 0x25dfdbfc, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80)

1m50.034736176s ago: executing program 33 (id=491):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x14, 0x3a, 0x301, 0x70bd27, 0x25dfdbfc, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80)

1m17.562969057s ago: executing program 0 (id=1033):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DIR={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20048090)

1m16.731803087s ago: executing program 0 (id=1036):
r0 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
setsockopt$sock_attach_bpf(r0, 0x110, 0x3, 0x0, 0x4)

1m16.582411395s ago: executing program 0 (id=1039):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="240000006600816657bb97c9269de9aaec8488040f0000004cb9cca7480ef402000000e3", 0x24}], 0x1, 0x0, 0x0, 0xc9e}, 0x48084)

1m16.582177588s ago: executing program 0 (id=1040):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0)

1m16.5103199s ago: executing program 0 (id=1042):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

1m16.321584028s ago: executing program 0 (id=1045):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0xac, 0x0, 0x0, 0xfffff034}]})
setsockopt$sock_attach_bpf(r0, 0x1, 0x42, &(0x7f0000000040), 0x10)

1m1.073040349s ago: executing program 34 (id=1045):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0xac, 0x0, 0x0, 0xfffff034}]})
setsockopt$sock_attach_bpf(r0, 0x1, 0x42, &(0x7f0000000040), 0x10)

44.879165363s ago: executing program 5 (id=1369):
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000003f000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x2f8}, 0x20000080)
setsockopt$sock_attach_bpf(r2, 0x6, 0x19, &(0x7f0000000200)=r2, 0x21)

44.510154396s ago: executing program 5 (id=1375):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)={0x2c, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

44.426497818s ago: executing program 5 (id=1376):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8c42, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xf}, 0x1000, 0x2, 0xa9eb, 0x8, 0x0, 0x0, 0x806}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000f14010026bd7000ffdbdf250b0045"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20008000)

44.149911787s ago: executing program 5 (id=1381):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000020300)={0x0, 0x0, &(0x7f00000102c0)={&(0x7f0000010280)={0x10020, 0x3f7, 0x200, 0x70bd2c, 0x25dfdbfb, {0xffffffffffffff41, 0xffff, './file0', './file0'}}, 0x10020}, 0x1, 0x0, 0x0, 0x44080}, 0x8044)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0)

44.149472675s ago: executing program 5 (id=1382):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0)

44.087594142s ago: executing program 5 (id=1383):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

29.067777829s ago: executing program 35 (id=1383):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.504753187s ago: executing program 6 (id=1941):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8f, 0xd, 0x0, 0x0, 0x0, 0x2, 0x3013a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0xb}, 0x106522, 0x0, 0x6, 0x2, 0x3fc, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801)
recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x0, 0x0})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000080)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'macsec0\x00'})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x9, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r4, 0x29, 0x18, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0xffffff80, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040000)
r5 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x0, 0x4, 0x0, 0x0)
sendmsg$inet(r5, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x24000000)

679.258979ms ago: executing program 4 (id=1952):
r0 = socket$inet(0x2, 0x803, 0x1)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)='\b', 0x1}], 0x1, &(0x7f00000001c0)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x84)

614.842321ms ago: executing program 4 (id=1954):
r0 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000300080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

526.633009ms ago: executing program 6 (id=1957):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841)
recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/35, 0x23}], 0x1}, 0x2000)

473.258531ms ago: executing program 4 (id=1959):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
sendmsg$inet(r0, &(0x7f0000001680)={&(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000000)="660e9b", 0x3}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000000000008400000002000000050009"], 0x20}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
close(0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)

472.946619ms ago: executing program 6 (id=1960):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073597a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c00014000000000000000002c0001800a0001006c696d69740000001c0002800c00024000000000100000000c0001"], 0x110}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000f20000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000000300010073797a30000000000900030073797a3200000000140000001100"/109], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

392.790557ms ago: executing program 1 (id=1961):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002d00010026bd7000fcdbdf250400000004000e800c00098008"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000000)

334.040053ms ago: executing program 6 (id=1962):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r3, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x4e23, 0x10200, @loopback, 0x7}, 0x1c, 0x0}, 0x2004810)

333.657344ms ago: executing program 1 (id=1963):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x4e}, 0x28)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0xff, 0x0, 0x0, 0xc0000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xf, @perf_config_ext={0x7, 0x1}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x89}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef)

264.230888ms ago: executing program 4 (id=1964):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x2, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x6a613, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x403}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a", 0x5}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff020025", 0x11}], 0x2}, 0x4000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0)

262.970067ms ago: executing program 1 (id=1965):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x1a, 0x0, 0x0)

204.023451ms ago: executing program 6 (id=1966):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001f0001"], 0x40}}, 0x0)

152.270132ms ago: executing program 1 (id=1967):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf040011"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38)

151.636727ms ago: executing program 4 (id=1968):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10558, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000ff08ffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1100, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

151.296438ms ago: executing program 1 (id=1969):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x2, 0x0, &(0x7f0000000180)="aff7", 0x0, 0x3}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48)

74.246751ms ago: executing program 6 (id=1970):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd6300000000002c"], 0xfdef)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x7}, 0x0, 0x10, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0x36)

1.700226ms ago: executing program 1 (id=1971):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06fe857c3d452cc0aa8f1800fc55150081000000ff0f", @ANYRES32], 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001", 0x19}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="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", 0x239}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x4}, {}]}, 0x90)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

0s ago: executing program 4 (id=1972):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040), 0x3f00}], 0x20}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:50503' (ED25519) to the list of known hosts.
syzkaller login: [   56.245276][ T5778] cgroup: Unknown subsys name 'net'
[   56.384259][ T5778] cgroup: Unknown subsys name 'cpuset'
[   56.389241][ T5778] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.287053][ T5778] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.768712][ T5862] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.920062][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   70.903976][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.908844][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.913002][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.922205][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.926697][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.967676][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.974893][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.982594][ T5874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.986824][ T5874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.994298][ T5874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.999026][ T5879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.003576][ T5879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.010921][ T5879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.014041][ T5879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.063994][ T5880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.278242][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.281371][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.473835][ T5875] chnl_net:caif_netlink_parms(): no params data found
[   71.514094][ T5877] chnl_net:caif_netlink_parms(): no params data found
[   71.546764][ T5871] chnl_net:caif_netlink_parms(): no params data found
[   71.701074][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.704296][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.708539][ T5875] bridge_slave_0: entered allmulticast mode
[   71.712961][ T5875] bridge_slave_0: entered promiscuous mode
[   71.774295][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.777099][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.780089][ T5875] bridge_slave_1: entered allmulticast mode
[   71.785241][ T5875] bridge_slave_1: entered promiscuous mode
[   71.804926][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.807668][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.810675][ T5871] bridge_slave_0: entered allmulticast mode
[   71.814601][ T5871] bridge_slave_0: entered promiscuous mode
[   71.818961][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.822069][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.824474][ T5877] bridge_slave_0: entered allmulticast mode
[   71.827541][ T5877] bridge_slave_0: entered promiscuous mode
[   71.833022][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.836180][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.839382][ T5877] bridge_slave_1: entered allmulticast mode
[   71.843811][ T5877] bridge_slave_1: entered promiscuous mode
[   71.858843][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.862263][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.865275][ T5871] bridge_slave_1: entered allmulticast mode
[   71.869211][ T5871] bridge_slave_1: entered promiscuous mode
[   71.948757][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.955101][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.960841][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.966348][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.971802][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.993337][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.057330][ T5871] team0: Port device team_slave_0 added
[   72.061785][ T5877] team0: Port device team_slave_0 added
[   72.075793][ T5877] team0: Port device team_slave_1 added
[   72.080214][ T5871] team0: Port device team_slave_1 added
[   72.084243][ T5875] team0: Port device team_slave_0 added
[   72.098810][ T5875] team0: Port device team_slave_1 added
[   72.165237][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.168490][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.180769][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.189036][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.192569][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.203350][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.208498][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.212141][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.222256][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.226790][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.229137][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.240200][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.246082][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.248754][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.258693][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.263109][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.265501][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.274668][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.358684][ T5875] hsr_slave_0: entered promiscuous mode
[   72.362235][ T5875] hsr_slave_1: entered promiscuous mode
[   72.368667][ T5877] hsr_slave_0: entered promiscuous mode
[   72.371744][ T5877] hsr_slave_1: entered promiscuous mode
[   72.374285][ T5877] debugfs: 'hsr0' already exists in 'hsr'
[   72.376473][ T5877] Cannot create hsr debugfs directory
[   72.401275][ T5871] hsr_slave_0: entered promiscuous mode
[   72.403680][ T5871] hsr_slave_1: entered promiscuous mode
[   72.405975][ T5871] debugfs: 'hsr0' already exists in 'hsr'
[   72.407760][ T5871] Cannot create hsr debugfs directory
[   72.733019][ T5877] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.744549][ T5877] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.750694][ T5877] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.767748][ T5877] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.837390][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.847533][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.855447][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.873663][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.941677][ T5875] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.949261][ T5875] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.965573][ T5875] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.981135][ T5875] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.032712][ T5879] Bluetooth: hci1: command tx timeout
[   73.032719][   T55] Bluetooth: hci0: command tx timeout
[   73.098124][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.111678][ T5879] Bluetooth: hci2: command tx timeout
[   73.135306][ T5877] 8021q: adding VLAN 0 to HW filter on device team0
[   73.148083][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.159583][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.162781][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.181667][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.184409][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.225406][ T5871] 8021q: adding VLAN 0 to HW filter on device team0
[   73.246140][ T1593] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.249120][ T1593] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.267029][ T1593] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.269809][ T1593] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.315962][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.386703][ T5875] 8021q: adding VLAN 0 to HW filter on device team0
[   73.396953][ T1593] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.400102][ T1593] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.415454][ T1593] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.418432][ T1593] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.586442][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.655693][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.669415][ T5877] veth0_vlan: entered promiscuous mode
[   73.684539][ T5877] veth1_vlan: entered promiscuous mode
[   73.708042][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.759895][ T5871] veth0_vlan: entered promiscuous mode
[   73.765276][ T5877] veth0_macvtap: entered promiscuous mode
[   73.779517][ T5871] veth1_vlan: entered promiscuous mode
[   73.792099][ T5877] veth1_macvtap: entered promiscuous mode
[   73.819396][ T5875] veth0_vlan: entered promiscuous mode
[   73.834347][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.854632][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.863516][ T5875] veth1_vlan: entered promiscuous mode
[   73.876959][ T5871] veth0_macvtap: entered promiscuous mode
[   73.889027][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.899329][ T5871] veth1_macvtap: entered promiscuous mode
[   73.907102][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.917535][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.929777][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.966943][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.000191][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.008238][ T5875] veth0_macvtap: entered promiscuous mode
[   74.018568][ T5875] veth1_macvtap: entered promiscuous mode
[   74.036590][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.040411][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.046086][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.065066][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.098769][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.101135][ T1593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.108619][ T1593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.142361][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.184930][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.185578][ T5901] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.191528][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.204605][ T5901] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.212395][ T5901] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.216678][ T5901] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.300688][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.303875][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.404062][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.412753][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.452309][ T1593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.455883][ T1593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.519496][ T1593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.523937][ T1593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.626991][ T5943] netlink: 10 bytes leftover after parsing attributes in process `syz.0.14'.
[   74.778811][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'.
[   75.111035][ T5879] Bluetooth: hci0: command tx timeout
[   75.120902][ T5879] Bluetooth: hci1: command tx timeout
[   75.190853][ T5879] Bluetooth: hci2: command tx timeout
[   75.253784][ T5970] netlink: 'syz.0.27': attribute type 21 has an invalid length.
[   75.256953][ T5970] netlink: 132 bytes leftover after parsing attributes in process `syz.0.27'.
[   75.494086][ T5982] netlink: 'syz.0.32': attribute type 3 has an invalid length.
[   75.497393][ T5982] netlink: 199752 bytes leftover after parsing attributes in process `syz.0.32'.
[   75.583277][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'.
[   75.608194][ T5986] : entered promiscuous mode
[   75.868409][ T5996] Illegal XDP return value 4294967274 on prog  (id 9) dev N/A, expect packet loss!
[   76.600322][ T6016] netlink: 763 bytes leftover after parsing attributes in process `syz.2.49'.
[   76.736812][ T6022] veth0_vlan: entered allmulticast mode
[   76.801997][    C1] hrtimer: interrupt took 32305 ns
[   76.953654][ T6022] veth0_vlan: left promiscuous mode
[   76.969185][ T6022] veth0_vlan: entered promiscuous mode
[   77.192211][ T5879] Bluetooth: hci1: command tx timeout
[   77.194341][ T5879] Bluetooth: hci0: command tx timeout
[   77.271042][   T55] Bluetooth: hci2: command tx timeout
[   78.099748][ T6073] : renamed from pim6reg1
[   78.513376][ T6078] warning: `syz.2.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   78.875308][ T6085] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.78'.
[   78.914307][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'.
[   78.917867][ T6088] netlink: 32 bytes leftover after parsing attributes in process `syz.0.80'.
[   79.280709][   T55] Bluetooth: hci0: command tx timeout
[   79.283041][   T55] Bluetooth: hci1: command tx timeout
[   79.351526][ T5879] Bluetooth: hci2: command tx timeout
[   79.576871][ T6121] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.95'.
[   80.251169][ T6154] netlink: 'syz.2.112': attribute type 3 has an invalid length.
[   80.254518][ T6154] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.112'.
[   80.813483][ T6169] netlink: 164 bytes leftover after parsing attributes in process `syz.1.119'.
[   80.879912][ T6177] Zero length message leads to an empty skb
[   80.929284][ T6177] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   80.933693][ T6177] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   81.058946][ T6188] =======================================================
[   81.058946][ T6188] WARNING: The mand mount option has been deprecated and
[   81.058946][ T6188]          and is ignored by this kernel. Remove the mand
[   81.058946][ T6188]          option from the mount to silence this warning.
[   81.058946][ T6188] =======================================================
[   81.333799][ T6205] syz.0.135 uses obsolete (PF_INET,SOCK_PACKET)
[   82.287638][ T6242] netlink: 60 bytes leftover after parsing attributes in process `syz.0.153'.
[   82.302625][ T6242] netlink: 60 bytes leftover after parsing attributes in process `syz.0.153'.
[   82.306395][ T6242] netlink: 60 bytes leftover after parsing attributes in process `syz.0.153'.
[   82.783121][ T5879] Bluetooth: hci0: adv larger than maximum supported
[   82.783168][ T5879] Bluetooth: hci0: Unknown advertising packet type: 0x18
[   82.786981][ T5879] Bluetooth: hci0: Malformed LE Event: 0x0d
[   83.676930][ T6279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'.
[   83.837115][ T6289] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.174'.
[   83.995778][ T6297] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   84.019332][ T6297] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   84.100463][ T6306] sctp: [Deprecated]: syz.0.183 (pid 6306) Use of struct sctp_assoc_value in delayed_ack socket option.
[   84.100463][ T6306] Use struct sctp_sack_info instead
[   84.657948][ T6333] netlink: 'syz.0.193': attribute type 25 has an invalid length.
[   84.662110][ T6333] netlink: 'syz.0.193': attribute type 28 has an invalid length.
[   84.667601][ T6337] netlink: 'syz.2.194': attribute type 1 has an invalid length.
[   84.832009][ T6348] netlink: 'syz.1.197': attribute type 30 has an invalid length.
[   84.880474][ T6351] netlink: 'syz.0.200': attribute type 2 has an invalid length.
[   84.886090][ T6351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.200'.
[   84.889542][ T5879] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11
[   84.909478][ T6348] netlink: 13 bytes leftover after parsing attributes in process `syz.1.197'.
[   85.039874][ T6353] !: renamed from bond_slave_0 (while UP)
[   85.983409][ T6375] netlink: 56 bytes leftover after parsing attributes in process `syz.1.209'.
[   86.323696][ T6393] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.219'.
[   86.638341][   T24] cfg80211: failed to load regulatory.db
[   88.323672][ T6435] netlink: 'syz.1.237': attribute type 7 has an invalid length.
[   88.764804][ T6461] netlink: 124 bytes leftover after parsing attributes in process `syz.1.250'.
[   88.768558][ T6461] netlink: 44 bytes leftover after parsing attributes in process `syz.1.250'.
[   88.942402][ T6465] sysfs: Unknown parameter 'subj_type'
[   89.988213][ T6480] netlink: 'syz.1.260': attribute type 21 has an invalid length.
[   90.510804][ T6494] netlink: 17 bytes leftover after parsing attributes in process `syz.0.267'.
[   90.514488][ T6494] netlink: zone id is out of range
[   90.516799][ T6494] netlink: zone id is out of range
[   90.519199][ T6494] netlink: zone id is out of range
[   90.525775][ T6494] netlink: zone id is out of range
[   90.530355][ T6494] netlink: zone id is out of range
[   90.535021][ T6494] netlink: zone id is out of range
[   90.543470][ T6494] netlink: zone id is out of range
[   90.548028][ T6494] netlink: zone id is out of range
[   90.554143][ T6494] netlink: zone id is out of range
[   90.559682][ T6494] netlink: zone id is out of range
[   92.564383][ T6528] netlink: 'syz.0.285': attribute type 1 has an invalid length.
[   92.567351][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'.
[   92.876230][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'.
[   92.935715][ T6546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.291'.
[   93.083890][ T6550] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   94.131814][ T5879] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6
[   95.101254][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'.
[   95.107357][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'.
[   97.322785][ T6594] netlink: 40 bytes leftover after parsing attributes in process `syz.0.313'.
[   97.602942][ T6607] pim6reg1: entered promiscuous mode
[   97.605270][ T6607] pim6reg1: entered allmulticast mode
[   97.636491][ T6609] netlink: 'syz.1.320': attribute type 3 has an invalid length.
[   97.640031][ T6609] netlink: 'syz.1.320': attribute type 1 has an invalid length.
[   97.644449][ T6609] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.320'.
[   97.898371][ T6618] netlink: 'syz.0.324': attribute type 3 has an invalid length.
[   97.962956][ T6623] netlink: 32 bytes leftover after parsing attributes in process `syz.0.326'.
[   98.003416][ T6625] netlink: 'syz.0.327': attribute type 21 has an invalid length.
[   98.842699][ T6647] netlink: 'syz.1.337': attribute type 11 has an invalid length.
[   98.850735][ T6647] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.337'.
[   99.002773][ T6646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.058148][ T6650] netlink: 132 bytes leftover after parsing attributes in process `syz.1.338'.
[  101.734822][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'.
[  103.422228][ T6748] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.378'.
[  103.445142][ T6748] netlink: 'syz.1.378': attribute type 4 has an invalid length.
[  103.559739][ T6748] netlink: 'syz.1.378': attribute type 10 has an invalid length.
[  103.640279][ T6748] team0: Port device dummy0 added
[  103.996058][ T6761] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.381'.
[  104.002499][ T6759] syzkaller0: entered promiscuous mode
[  104.004889][ T6759] syzkaller0: entered allmulticast mode
[  104.497764][ T6782] netlink: 'syz.0.390': attribute type 1 has an invalid length.
[  104.505160][ T6782] netlink: 'syz.0.390': attribute type 4 has an invalid length.
[  104.508195][ T6782] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.390'.
[  104.515331][ T6782] netlink: 'syz.0.390': attribute type 1 has an invalid length.
[  104.518454][ T6782] netlink: 'syz.0.390': attribute type 4 has an invalid length.
[  104.524183][ T6782] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.390'.
[  104.679574][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  104.691545][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  104.697471][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  104.703589][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  104.707330][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  104.806127][ T6792] netlink: 'syz.0.393': attribute type 27 has an invalid length.
[  104.809322][ T6792] netlink: 'syz.0.393': attribute type 4 has an invalid length.
[  104.821216][ T6792] netlink: 152 bytes leftover after parsing attributes in process `syz.0.393'.
[  104.834885][ T5901] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.954250][ T5901] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.096439][ T5901] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.161524][ T6785] chnl_net:caif_netlink_parms(): no params data found
[  105.495432][ T5901] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.672298][ T6785] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.679990][ T6824] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.403'.
[  105.684204][ T6785] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.687388][ T6785] bridge_slave_0: entered allmulticast mode
[  105.694584][ T6826] netlink: 'syz.1.404': attribute type 2 has an invalid length.
[  105.701070][ T6785] bridge_slave_0: entered promiscuous mode
[  105.709193][ T6785] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.720758][ T6785] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.723905][ T6785] bridge_slave_1: entered allmulticast mode
[  105.741276][ T6785] bridge_slave_1: entered promiscuous mode
[  105.792740][ T6832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.406'.
[  105.801194][ T6785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.826756][ T6785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.927055][ T6785] team0: Port device team_slave_0 added
[  105.929811][ T5901] bridge_slave_1: left allmulticast mode
[  105.934763][ T5901] bridge_slave_1: left promiscuous mode
[  105.937588][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.945680][ T5901] bridge_slave_0: left allmulticast mode
[  105.948035][ T5901] bridge_slave_0: left promiscuous mode
[  105.950457][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.068980][ T6842] netlink: 20 bytes leftover after parsing attributes in process `syz.0.410'.
[  106.153999][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'.
[  106.433360][ T5901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.442477][ T5901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.448324][ T5901] bond0 (unregistering): Released all slaves
[  106.460290][ T6785] team0: Port device team_slave_1 added
[  106.463135][  T793] infiniband syz2: ib_query_port failed (-19)
[  106.540045][ T6785] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.543145][ T6785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.560703][ T6785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.572810][ T6785] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.579291][ T6785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.591306][ T6785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.749432][ T6785] hsr_slave_0: entered promiscuous mode
[  106.756543][ T6785] hsr_slave_1: entered promiscuous mode
[  106.759560][ T6785] debugfs: 'hsr0' already exists in 'hsr'
[  106.768905][ T6785] Cannot create hsr debugfs directory
[  106.795564][ T5879] Bluetooth: hci1: command tx timeout
[  106.964817][ T5879] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3
[  107.002173][ T6864] netlink: 48 bytes leftover after parsing attributes in process `syz.0.416'.
[  107.158901][ T5901] hsr_slave_0: left promiscuous mode
[  107.163431][ T5901] hsr_slave_1: left promiscuous mode
[  107.166422][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.169313][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.174524][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.177542][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.204641][ T5901] veth1_macvtap: left promiscuous mode
[  107.206665][ T5901] veth0_macvtap: left promiscuous mode
[  107.208441][ T5901] veth1_vlan: left promiscuous mode
[  107.213366][ T5901] veth0_vlan: left promiscuous mode
[  107.629410][ T5901] team0 (unregistering): Port device team_slave_1 removed
[  107.658514][ T5901] team0 (unregistering): Port device team_slave_0 removed
[  108.214479][ T6785] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  108.248520][ T6901] net_ratelimit: 12 callbacks suppressed
[  108.248546][ T6901] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.254427][ T6785] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  108.280173][ T6785] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  108.307853][ T6903] netlink: zone id is out of range
[  108.310123][ T6903] netlink: set zone limit has 8 unknown bytes
[  108.328773][ T6785] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  108.529923][ T6785] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.604354][ T6785] 8021q: adding VLAN 0 to HW filter on device team0
[  108.656532][ T2253] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.659588][ T2253] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.704831][ T2253] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.707991][ T2253] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.758261][ T6920] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  108.776802][ T6920] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  108.871710][ T5879] Bluetooth: hci1: command tx timeout
[  109.101774][ T6785] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.184687][ T6785] veth0_vlan: entered promiscuous mode
[  109.198530][ T6785] veth1_vlan: entered promiscuous mode
[  109.251956][ T6785] veth0_macvtap: entered promiscuous mode
[  109.266108][ T6785] veth1_macvtap: entered promiscuous mode
[  109.305560][ T6785] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.322130][ T6785] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.338246][ T5901] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.346522][ T5901] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.352156][ T5901] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.358403][ T5901] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.435739][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.439066][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.478547][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.482754][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.691314][ T6958] __nla_validate_parse: 2 callbacks suppressed
[  109.691331][ T6958] netlink: 152 bytes leftover after parsing attributes in process `syz.0.446'.
[  109.875763][ T6970] syzkaller0: entered promiscuous mode
[  109.879645][ T6970] syzkaller0: entered allmulticast mode
[  109.888641][ T6970] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[  110.528946][ T5879] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  110.727172][ T6993] syzkaller0: entered promiscuous mode
[  110.741357][ T6993] syzkaller0: entered allmulticast mode
[  110.943390][ T6996] netlink: 277 bytes leftover after parsing attributes in process `syz.0.462'.
[  110.961187][ T5879] Bluetooth: hci1: command tx timeout
[  113.033837][ T5879] Bluetooth: hci1: command tx timeout
[  114.511896][   T33] audit: type=1107 audit(1758386033.164:2): pid=7037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='#?v&ԹI~+#{U=TsamvDP])x}C|
[  114.511896][   T33] CA6cz06YX}Yq̌4Iޓp5BeVSo$<1v.b紛xq,HrNG5[$8L{+=i~{5#r4,;=GfVeuu;){ZK><XmG#zv0{ᑤQTOňFU~ ~z1s^|^eM5R;V?'Ss}_cV4q{ΞO1wXf.(\&vhq7"0B+':񢕎1k8)וv7F>7;ްqSݰ\vqށTFkYҵoZi*0	1->uJ.h`@A)2CEhFTڑC_9C?^LCnM`3@$KqH<Ō03ҢI\1A7$Lo)7_֫hQ, QAl
[  114.511896][   T33] cvm1kOk:tN=,R; wD_b'ɀAM"5qfg]<'ſU	փ]	c!{@6cG|rC(m	T}Z{0.Cӭlt9aԘA$G+4BtU'GVj-	.㢐TkD4V%(ƈ\pEUBd\Ldc}b(hom(m̈awO}
[  114.511896][   T33] ru)aoG7>9NeʇNf4+ePz'*apS(0m9.v!$HDt}1nuR
[  115.857310][ T7055] netlink: 'syz.0.486': attribute type 10 has an invalid length.
[  115.946286][ T7055] lo: entered promiscuous mode
[  115.990968][ T7055] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  117.463266][ T7082] netlink: 60 bytes leftover after parsing attributes in process `syz.0.497'.
[  117.546693][ T7087] netlink: 'syz.0.499': attribute type 1 has an invalid length.
[  117.549430][ T7087] netlink: 'syz.0.499': attribute type 3 has an invalid length.
[  117.558283][ T7087] netlink: 132 bytes leftover after parsing attributes in process `syz.0.499'.
[  118.384685][ T7112] netlink: 'syz.0.509': attribute type 2 has an invalid length.
[  119.761364][ T7122] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  120.574208][ T7153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.527'.
[  120.579333][ T7153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.527'.
[  120.588049][ T7153] netlink: 'syz.0.527': attribute type 4 has an invalid length.
[  120.727042][ T7161] netlink: 152 bytes leftover after parsing attributes in process `syz.1.530'.
[  120.731506][ T7161] netlink: 6 bytes leftover after parsing attributes in process `syz.1.530'.
[  121.854924][ T5879] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5
[  122.876546][ T5879] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15
[  122.880200][ T5879] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x65
[  123.706765][ T7212] netlink: 'syz.1.552': attribute type 10 has an invalid length.
[  123.710458][ T7212] netlink: 55 bytes leftover after parsing attributes in process `syz.1.552'.
[  124.308220][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.553'.
[  124.344482][ T7217] netlink: 'syz.1.554': attribute type 21 has an invalid length.
[  124.348218][ T7217] netlink: 128 bytes leftover after parsing attributes in process `syz.1.554'.
[  124.371408][ T7217] netlink: 'syz.1.554': attribute type 5 has an invalid length.
[  124.377990][ T7217] netlink: 'syz.1.554': attribute type 6 has an invalid length.
[  124.432826][ T7217] netlink: 3 bytes leftover after parsing attributes in process `syz.1.554'.
[  125.199634][ T7253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.568'.
[  125.206684][ T7253] netlink: 'syz.1.568': attribute type 2 has an invalid length.
[  125.705605][ T7273] netlink: 132 bytes leftover after parsing attributes in process `syz.1.576'.
[  126.222264][ T7298] netlink: 'syz.1.586': attribute type 10 has an invalid length.
[  126.239913][ T7298] geneve0: entered promiscuous mode
[  126.275660][ T7300] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  126.351979][ T7298] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  129.426558][ T7325] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  129.843553][ T7332] netlink: 'syz.0.603': attribute type 3 has an invalid length.
[  129.847126][ T7332] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.603'.
[  129.879374][ T7332] netlink: 14 bytes leftover after parsing attributes in process `syz.0.603'.
[  130.402811][ T7345] netlink: 17 bytes leftover after parsing attributes in process `syz.0.609'.
[  130.405858][ T7345] netlink: zone id is out of range
[  130.407933][ T7345] netlink: zone id is out of range
[  130.410406][ T7345] netlink: zone id is out of range
[  130.415585][ T7345] netlink: zone id is out of range
[  130.417656][ T7345] netlink: zone id is out of range
[  130.419676][ T7345] netlink: zone id is out of range
[  130.422499][ T7345] netlink: zone id is out of range
[  130.424301][ T7345] netlink: zone id is out of range
[  130.426267][ T7345] netlink: zone id is out of range
[  130.785771][ T7361] netlink: 14 bytes leftover after parsing attributes in process `syz.1.617'.
[  130.999666][ T7361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.008150][ T7361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.020780][ T7361] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  131.028881][ T7361] bond0 (unregistering): Released all slaves
[  131.717081][ T7390] net_ratelimit: 76 callbacks suppressed
[  131.717093][ T7390] openvswitch: netlink: IP tunnel dst address not specified
[  131.828648][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  131.834087][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  131.838279][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  131.853850][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  131.856333][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  131.939613][ T7408] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.637'.
[  132.035688][ T5901] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.055516][ T7398] chnl_net:caif_netlink_parms(): no params data found
[  132.116239][ T5901] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.217742][ T5901] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.227330][ T7398] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.229757][ T7398] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.242253][ T7398] bridge_slave_0: entered allmulticast mode
[  132.248708][ T7398] bridge_slave_0: entered promiscuous mode
[  132.394308][ T5901] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.404851][ T7398] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.407259][ T7398] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.409802][ T7398] bridge_slave_1: entered allmulticast mode
[  132.414886][ T7398] bridge_slave_1: entered promiscuous mode
[  132.452457][ T7398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  132.460289][ T7398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  132.494436][ T7398] team0: Port device team_slave_0 added
[  132.499823][ T7398] team0: Port device team_slave_1 added
[  132.588162][ T7398] batman_adv: batadv0: Adding interface: batadv_slave_0
[  132.594962][ T7398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.606160][ T7398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  132.611256][ T5901] bridge_slave_1: left allmulticast mode
[  132.613599][ T5901] bridge_slave_1: left promiscuous mode
[  132.615658][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.620147][ T5901] bridge_slave_0: left allmulticast mode
[  132.623039][ T5901] bridge_slave_0: left promiscuous mode
[  132.625308][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.715594][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.718333][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.880337][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'.
[  132.913505][ T5901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.921755][ T5901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.927048][ T5901] bond0 (unregistering): Released all slaves
[  132.939730][ T7398] batman_adv: batadv0: Adding interface: batadv_slave_1
[  132.947363][ T7398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.959212][ T7398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  133.096611][ T7398] hsr_slave_0: entered promiscuous mode
[  133.111705][ T7398] hsr_slave_1: entered promiscuous mode
[  133.216271][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.643'.
[  133.297120][ T5901] hsr_slave_0: left promiscuous mode
[  133.304187][ T5901] hsr_slave_1: left promiscuous mode
[  133.306621][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.320671][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_0
[  133.323932][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.326556][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.344246][ T5901] veth1_macvtap: left promiscuous mode
[  133.346314][ T5901] veth0_macvtap: left promiscuous mode
[  133.348258][ T5901] veth1_vlan: left promiscuous mode
[  133.350155][ T5901] veth0_vlan: left promiscuous mode
[  133.808578][ T5901] team0 (unregistering): Port device team_slave_1 removed
[  133.847804][ T5901] team0 (unregistering): Port device team_slave_0 removed
[  133.912182][   T55] Bluetooth: hci1: command tx timeout
[  134.086972][ T7461] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.652'.
[  134.540086][ T7464] netlink: 'syz.1.653': attribute type 10 has an invalid length.
[  134.679204][ T7465] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.653'.
[  134.720064][ T7464] team0 (unregistering): Port device team_slave_0 removed
[  134.727731][ T7464] team0 (unregistering): Port device team_slave_1 removed
[  134.739454][ T7464] team0 (unregistering): Port device dummy0 removed
[  134.902901][ T7398] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  134.906647][ T7468] netlink: 'syz.1.654': attribute type 39 has an invalid length.
[  134.966435][ T7398] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  134.983852][ T7398] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  134.995202][ T7398] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  135.058780][ T7482] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.077673][ T7398] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.102730][ T7398] 8021q: adding VLAN 0 to HW filter on device team0
[  135.124100][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.126820][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.138183][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.140974][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.293281][   T33] audit: type=1107 audit(1758386053.974:3): pid=7492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  135.343451][ T7398] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.493443][ T7398] veth0_vlan: entered promiscuous mode
[  135.499738][ T7398] veth1_vlan: entered promiscuous mode
[  135.523631][ T7398] veth0_macvtap: entered promiscuous mode
[  135.535329][ T7398] veth1_macvtap: entered promiscuous mode
[  135.552225][ T7398] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.560730][ T7398] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.572607][ T5884] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.575628][ T5884] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.591165][ T5884] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.593891][ T5884] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.646553][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.655175][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.674146][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.677650][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.725818][ T7516] netlink: 'syz.4.627': attribute type 2 has an invalid length.
[  135.990843][   T55] Bluetooth: hci1: command tx timeout
[  137.426542][ T7565] netlink: 'syz.1.690': attribute type 6 has an invalid length.
[  137.429732][ T7565] netlink: 'syz.1.690': attribute type 1 has an invalid length.
[  137.438532][ T7565] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.690'.
[  138.082135][   T55] Bluetooth: hci1: command tx timeout
[  140.161402][   T55] Bluetooth: hci1: command tx timeout
[  140.623935][ T7575] netlink: 196 bytes leftover after parsing attributes in process `syz.4.692'.
[  141.227653][ T7604] netlink: 76 bytes leftover after parsing attributes in process `syz.4.707'.
[  142.171391][ T7640] openvswitch: netlink: Key type 50 is out of range max 32
[  142.287022][ T7646] team0: Port device team_slave_0 removed
[  142.294239][ T7646] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  142.381524][ T7650] netlink: 'syz.4.726': attribute type 10 has an invalid length.
[  142.385941][ T7650] veth0_vlan: entered allmulticast mode
[  142.506063][ T7650] veth0_vlan: left promiscuous mode
[  142.527029][ T7650] veth0_vlan: entered promiscuous mode
[  142.575308][ T7650] team0: Device veth0_vlan failed to register rx_handler
[  142.846893][ T7650] syz.4.726 (7650) used greatest stack depth: 18360 bytes left
[  143.419250][ T7684] C: renamed from team_slave_0
[  143.424714][ T7684] netlink: 'syz.4.740': attribute type 8 has an invalid length.
[  143.427307][ T7684] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  143.497080][ T7690] syz.4.743: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  143.508002][ T7690] CPU: 0 UID: 0 PID: 7690 Comm: syz.4.743 Not tainted syzkaller #0 PREEMPT(full) 
[  143.508018][ T7690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  143.508024][ T7690] Call Trace:
[  143.508028][ T7690]  <TASK>
[  143.508034][ T7690]  dump_stack_lvl+0x189/0x250
[  143.508061][ T7690]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.508073][ T7690]  ? __pfx__printk+0x10/0x10
[  143.508086][ T7690]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  143.508097][ T7690]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  143.508109][ T7690]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  143.508122][ T7690]  warn_alloc+0x214/0x310
[  143.508133][ T7690]  ? stack_depot_save_flags+0x41b/0x860
[  143.508148][ T7690]  ? __pfx_warn_alloc+0x10/0x10
[  143.508159][ T7690]  ? kasan_save_track+0x4f/0x80
[  143.508170][ T7690]  ? xskq_create+0x56/0x170
[  143.508179][ T7690]  ? xsk_init_queue+0xb0/0x110
[  143.508185][ T7690]  ? xsk_setsockopt+0x57b/0x8d0
[  143.508196][ T7690]  ? do_sock_setsockopt+0x17c/0x1b0
[  143.508205][ T7690]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  143.508214][ T7690]  ? do_syscall_64+0xfa/0x3b0
[  143.508224][ T7690]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.508241][ T7690]  __vmalloc_node_range_noprof+0x125/0x12f0
[  143.508286][ T7690]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  143.508305][ T7690]  ? __kasan_kmalloc+0x93/0xb0
[  143.508320][ T7690]  vmalloc_user_noprof+0xad/0xf0
[  143.508331][ T7690]  ? xskq_create+0xbf/0x170
[  143.508341][ T7690]  xskq_create+0xbf/0x170
[  143.508353][ T7690]  xsk_init_queue+0xb0/0x110
[  143.508365][ T7690]  xsk_setsockopt+0x57b/0x8d0
[  143.508380][ T7690]  ? __pfx_xsk_setsockopt+0x10/0x10
[  143.508393][ T7690]  ? __pfx_aa_sk_perm+0x10/0x10
[  143.508405][ T7690]  ? __fget_files+0x2a/0x420
[  143.508411][ T7690]  ? aa_sock_opt_perm+0xff/0x1b0
[  143.508425][ T7690]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  143.508433][ T7690]  ? __pfx_xsk_setsockopt+0x10/0x10
[  143.508447][ T7690]  do_sock_setsockopt+0x17c/0x1b0
[  143.508462][ T7690]  __x64_sys_setsockopt+0x13f/0x1b0
[  143.508479][ T7690]  do_syscall_64+0xfa/0x3b0
[  143.508487][ T7690]  ? lockdep_hardirqs_on+0x9c/0x150
[  143.508496][ T7690]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.508538][ T7690]  ? exc_page_fault+0x9f/0xf0
[  143.508552][ T7690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.508560][ T7690] RIP: 0033:0x7f0ed378eba9
[  143.508571][ T7690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.508577][ T7690] RSP: 002b:00007f0ed45f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  143.508587][ T7690] RAX: ffffffffffffffda RBX: 00007f0ed39d5fa0 RCX: 00007f0ed378eba9
[  143.508592][ T7690] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  143.508597][ T7690] RBP: 00007f0ed3811e19 R08: 0000000000000004 R09: 0000000000000000
[  143.508601][ T7690] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  143.508606][ T7690] R13: 00007f0ed39d6038 R14: 00007f0ed39d5fa0 R15: 00007ffc8e94c048
[  143.508632][ T7690]  </TASK>
[  143.508637][ T7690] Mem-Info:
[  143.633950][ T7690] active_anon:4769 inactive_anon:0 isolated_anon:0
[  143.633950][ T7690]  active_file:1316 inactive_file:38284 isolated_file:0
[  143.633950][ T7690]  unevictable:1768 dirty:339 writeback:0
[  143.633950][ T7690]  slab_reclaimable:5224 slab_unreclaimable:53046
[  143.633950][ T7690]  mapped:18069 shmem:2449 pagetables:904
[  143.633950][ T7690]  sec_pagetables:0 bounce:0
[  143.633950][ T7690]  kernel_misc_reclaimable:0
[  143.633950][ T7690]  free:300576 free_pcp:23637 free_cma:0
[  143.742035][ T7690] Node 0 active_anon:11200kB inactive_anon:0kB active_file:2328kB inactive_file:129452kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47892kB dirty:532kB writeback:0kB shmem:4824kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5652kB pagetables:1692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  143.766826][ T7690] Node 1 active_anon:7944kB inactive_anon:0kB active_file:2936kB inactive_file:23684kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24400kB dirty:824kB writeback:0kB shmem:4980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5600kB pagetables:2036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  143.817185][ T7690] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  143.848135][ T7690] lowmem_reserve[]: 0 811 811 811 811
[  143.850175][ T7690] Node 0 DMA32 free:302152kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11236kB inactive_anon:0kB active_file:2328kB inactive_file:129452kB unevictable:3536kB writepending:540kB present:1556484kB managed:830888kB mlocked:0kB bounce:0kB free_pcp:44944kB local_pcp:20456kB free_cma:0kB
[  143.887942][ T7690] lowmem_reserve[]: 0 0 0 0 0
[  143.892815][ T7690] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  143.937015][ T7690] lowmem_reserve[]: 0 0 854 854 854
[  143.946403][ T7690] Node 1 Normal free:428180kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7904kB inactive_anon:0kB active_file:2936kB inactive_file:23684kB unevictable:3536kB writepending:824kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:47124kB local_pcp:30540kB free_cma:0kB
[  143.983126][ T7690] lowmem_reserve[]: 0 0 0 0 0
[  143.990293][ T7690] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  143.997362][ T7690] Node 0 DMA32: 256*4kB (M) 187*8kB (ME) 147*16kB (UME) 74*32kB (UME) 94*64kB (UME) 83*128kB (UM) 17*256kB (UME) 15*512kB (UME) 12*1024kB (UME) 2*2048kB (UE) 61*4096kB (M) = 302152kB
[  144.005130][ T7690] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  144.015849][ T7690] Node 1 Normal: 609*4kB (UM) 320*8kB (UME) 139*16kB (UME) 860*32kB (UME) 274*64kB (UME) 59*128kB (UME) 15*256kB (UME) 8*512kB (ME) 4*1024kB (UM) 6*2048kB (M) 84*4096kB (M) = 428212kB
[  144.022629][ T7690] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  144.026406][ T7690] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  144.029931][ T7690] 42051 total pagecache pages
[  144.033955][ T7690] 0 pages in swap cache
[  144.035606][ T7690] Free swap  = 124996kB
[  144.037312][ T7690] Total swap = 124996kB
[  144.038863][ T7690] 786301 pages RAM
[  144.040354][ T7690] 0 pages HighMem/MovableOnly
[  144.042930][ T7690] 241347 pages reserved
[  144.044411][ T7690] 0 pages cma reserved
[  144.145213][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.745'.
[  144.217123][ T7705] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  144.284364][ T7710] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.351118][ T7710] netdevsim netdevsim4 : renamed from netdevsim0 (while UP)
[  144.493647][ T7725] netlink: 2 bytes leftover after parsing attributes in process `syz.1.759'.
[  144.717134][ T7739] netlink: 348 bytes leftover after parsing attributes in process `syz.1.765'.
[  144.849020][ T7741] lo speed is unknown, defaulting to 1000
[  144.856258][ T7741] lo speed is unknown, defaulting to 1000
[  144.903296][ T7741] lo speed is unknown, defaulting to 1000
[  144.967355][ T7742] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.765'.
[  145.367575][ T7741] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  145.520119][ T7744] netlink: 'syz.0.766': attribute type 12 has an invalid length.
[  145.530671][ T7744] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.766'.
[  145.539216][ T7741] lo speed is unknown, defaulting to 1000
[  145.545528][ T7741] lo speed is unknown, defaulting to 1000
[  145.549405][ T7741] lo speed is unknown, defaulting to 1000
[  145.782458][   T55] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5
[  145.897435][ T7765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.775'.
[  145.977199][ T7769] netlink: 'syz.0.777': attribute type 16 has an invalid length.
[  145.980246][ T7769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.777'.
[  146.040536][ T7772] IPv6: Can't replace route, no match found
[  147.684718][   T55] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  148.601995][ T7800] netlink: 'syz.1.791': attribute type 7 has an invalid length.
[  148.851894][ T7810] sock: sock_timestamping_bind_phc: sock not bind to device
[  148.902814][ T7812] netlink: 'syz.4.796': attribute type 10 has an invalid length.
[  149.173182][ T7823] netlink: 'syz.1.801': attribute type 10 has an invalid length.
[  150.126653][ T7851] netlink: 'syz.0.811': attribute type 1 has an invalid length.
[  150.273435][ T7861] netlink: 'syz.1.816': attribute type 64 has an invalid length.
[  150.283561][ T5872] lo speed is unknown, defaulting to 1000
[  150.697417][ T7886] netlink: 28 bytes leftover after parsing attributes in process `syz.0.828'.
[  150.717235][ T7886] netlink: 28 bytes leftover after parsing attributes in process `syz.0.828'.
[  151.251702][ T7903] netlink: 'syz.4.835': attribute type 3 has an invalid length.
[  151.257730][ T7903] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.835'.
[  152.596077][ T7947] netlink: 188 bytes leftover after parsing attributes in process `syz.1.854'.
[  153.816733][ T7988] netlink: 'syz.0.872': attribute type 2 has an invalid length.
[  153.938033][ T7993] netlink: 'syz.4.874': attribute type 3 has an invalid length.
[  153.943980][ T7993] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.874'.
[  154.802250][ T8028] syzkaller0: entered promiscuous mode
[  154.804148][ T8028] syzkaller0: entered allmulticast mode
[  155.024148][ T8047] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.896'.
[  155.430130][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.902'.
[  156.326291][ T8051] lo speed is unknown, defaulting to 1000
[  156.703091][ T8078] netlink: 'syz.0.909': attribute type 21 has an invalid length.
[  156.706130][ T8078] netlink: 'syz.0.909': attribute type 20 has an invalid length.
[  156.822205][ T8082] netlink: 'syz.1.911': attribute type 10 has an invalid length.
[  156.919373][ T8090] netlink: 48 bytes leftover after parsing attributes in process `syz.0.915'.
[  157.145669][ T8108] netlink: 17 bytes leftover after parsing attributes in process `syz.4.923'.
[  157.149115][ T8108] netlink: zone id is out of range
[  157.152337][ T8108] netlink: zone id is out of range
[  157.153956][ T8108] netlink: zone id is out of range
[  157.155762][ T8108] netlink: zone id is out of range
[  157.157728][ T8108] netlink: zone id is out of range
[  157.159497][ T8108] netlink: zone id is out of range
[  157.161590][ T8108] netlink: zone id is out of range
[  157.163932][ T8108] netlink: zone id is out of range
[  157.165655][ T8108] netlink: zone id is out of range
[  157.167669][ T8108] netlink: zone id is out of range
[  157.285530][ T8112] netlink: 92 bytes leftover after parsing attributes in process `syz.0.925'.
[  157.289115][ T8112] netlink: 92 bytes leftover after parsing attributes in process `syz.0.925'.
[  157.584902][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.934'.
[  157.663378][ T8137] netlink: 'syz.4.937': attribute type 5 has an invalid length.
[  157.711164][ T8136] netlink: 'syz.0.936': attribute type 3 has an invalid length.
[  157.713992][ T8136] netlink: 152 bytes leftover after parsing attributes in process `syz.0.936'.
[  157.828844][ T8148] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.942'.
[  157.883506][ T8151] netlink: 68 bytes leftover after parsing attributes in process `syz.1.943'.
[  157.890141][ T8151] netlink: 20 bytes leftover after parsing attributes in process `syz.1.943'.
[  157.904400][ T8151] netlink: 20 bytes leftover after parsing attributes in process `syz.1.943'.
[  158.635664][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  158.976688][ T8215] netlink: 'syz.1.973': attribute type 2 has an invalid length.
[  160.246281][ T8238] netlink: 'syz.0.981': attribute type 2 has an invalid length.
[  160.517991][ T8247] netlink: 'syz.0.985': attribute type 10 has an invalid length.
[  160.520402][ T8247] netlink: 'syz.0.985': attribute type 19 has an invalid length.
[  160.895679][ T8268] netlink: 'syz.1.994': attribute type 4 has an invalid length.
[  160.898396][ T8268] netlink: 'syz.1.994': attribute type 2 has an invalid length.
[  161.105500][ T8279] netlink: 'syz.1.999': attribute type 1 has an invalid length.
[  161.110025][ T8279] netlink: 'syz.1.999': attribute type 3 has an invalid length.
[  161.204457][ T8280] syz.1.999: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  161.213486][ T8280] CPU: 1 UID: 0 PID: 8280 Comm: syz.1.999 Not tainted syzkaller #0 PREEMPT(full) 
[  161.213509][ T8280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  161.213519][ T8280] Call Trace:
[  161.213527][ T8280]  <TASK>
[  161.213534][ T8280]  dump_stack_lvl+0x189/0x250
[  161.213563][ T8280]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.213581][ T8280]  ? __pfx__printk+0x10/0x10
[  161.213602][ T8280]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  161.213624][ T8280]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  161.213647][ T8280]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  161.213666][ T8280]  warn_alloc+0x214/0x310
[  161.213681][ T8280]  ? stack_depot_save_flags+0x40/0x860
[  161.213704][ T8280]  ? __pfx_warn_alloc+0x10/0x10
[  161.213719][ T8280]  ? kasan_save_track+0x4f/0x80
[  161.213741][ T8280]  ? xskq_create+0x56/0x170
[  161.213757][ T8280]  ? xsk_init_queue+0xb0/0x110
[  161.213768][ T8280]  ? xsk_setsockopt+0x57b/0x8d0
[  161.213787][ T8280]  ? do_sock_setsockopt+0x17c/0x1b0
[  161.213802][ T8280]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  161.213816][ T8280]  ? do_syscall_64+0xfa/0x3b0
[  161.213830][ T8280]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.213850][ T8280]  __vmalloc_node_range_noprof+0x125/0x12f0
[  161.213924][ T8280]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  161.213952][ T8280]  ? __kasan_kmalloc+0x93/0xb0
[  161.213971][ T8280]  vmalloc_user_noprof+0xad/0xf0
[  161.213991][ T8280]  ? xskq_create+0xbf/0x170
[  161.214006][ T8280]  xskq_create+0xbf/0x170
[  161.214022][ T8280]  xsk_init_queue+0xb0/0x110
[  161.214037][ T8280]  xsk_setsockopt+0x57b/0x8d0
[  161.214067][ T8280]  ? __pfx_xsk_setsockopt+0x10/0x10
[  161.214106][ T8280]  ? __pfx_aa_sk_perm+0x10/0x10
[  161.214124][ T8280]  ? __fget_files+0x2a/0x420
[  161.214136][ T8280]  ? aa_sock_opt_perm+0xff/0x1b0
[  161.214155][ T8280]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  161.214170][ T8280]  ? __pfx_xsk_setsockopt+0x10/0x10
[  161.214193][ T8280]  do_sock_setsockopt+0x17c/0x1b0
[  161.214214][ T8280]  __x64_sys_setsockopt+0x13f/0x1b0
[  161.214237][ T8280]  do_syscall_64+0xfa/0x3b0
[  161.214251][ T8280]  ? lockdep_hardirqs_on+0x9c/0x150
[  161.214265][ T8280]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.214278][ T8280]  ? exc_page_fault+0x9f/0xf0
[  161.214293][ T8280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.214380][ T8280] RIP: 0033:0x7feef7d8eba9
[  161.214395][ T8280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.214407][ T8280] RSP: 002b:00007feef8bce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  161.214422][ T8280] RAX: ffffffffffffffda RBX: 00007feef7fd6090 RCX: 00007feef7d8eba9
[  161.214433][ T8280] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000e
[  161.214441][ T8280] RBP: 00007feef7e11e19 R08: 0000000000000004 R09: 0000000000000000
[  161.214450][ T8280] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  161.214459][ T8280] R13: 00007feef7fd6128 R14: 00007feef7fd6090 R15: 00007ffe6d0958f8
[  161.214483][ T8280]  </TASK>
[  161.214710][ T8280] Mem-Info:
[  161.341136][ T8280] active_anon:10976 inactive_anon:0 isolated_anon:0
[  161.341136][ T8280]  active_file:1316 inactive_file:38290 isolated_file:0
[  161.341136][ T8280]  unevictable:1768 dirty:254 writeback:0
[  161.341136][ T8280]  slab_reclaimable:5257 slab_unreclaimable:53396
[  161.341136][ T8280]  mapped:18090 shmem:2456 pagetables:929
[  161.341136][ T8280]  sec_pagetables:0 bounce:0
[  161.341136][ T8280]  kernel_misc_reclaimable:0
[  161.341136][ T8280]  free:303111 free_pcp:14219 free_cma:0
[  161.360725][ T8280] Node 0 active_anon:27996kB inactive_anon:0kB active_file:2328kB inactive_file:129452kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47940kB dirty:400kB writeback:0kB shmem:4840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5616kB pagetables:1768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  161.373550][ T8280] Node 1 active_anon:15908kB inactive_anon:0kB active_file:2936kB inactive_file:23708kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24420kB dirty:616kB writeback:0kB shmem:4984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5732kB pagetables:1948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  161.386227][ T8280] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  161.398210][ T8280] lowmem_reserve[]: 0 811 811 811 811
[  161.400691][ T8280] Node 0 DMA32 free:294348kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27996kB inactive_anon:0kB active_file:2328kB inactive_file:129452kB unevictable:3536kB writepending:400kB present:1556484kB managed:830888kB mlocked:0kB bounce:0kB free_pcp:37800kB local_pcp:16928kB free_cma:0kB
[  161.412936][ T8280] lowmem_reserve[]: 0 0 0 0 0
[  161.415044][ T8280] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  161.426746][ T8280] lowmem_reserve[]: 0 0 854 854 854
[  161.428849][ T8280] Node 1 Normal free:444244kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15908kB inactive_anon:0kB active_file:2936kB inactive_file:23708kB unevictable:3536kB writepending:616kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:18816kB local_pcp:1112kB free_cma:0kB
[  161.441434][ T8280] lowmem_reserve[]: 0 0 0 0 0
[  161.445050][ T8280] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  161.450241][ T8280] Node 0 DMA32: 727*4kB (UM) 502*8kB (UME) 140*16kB (UME) 25*32kB (UE) 52*64kB (UE) 64*128kB (UME) 17*256kB (UE) 10*512kB (UE) 9*1024kB (UE) 2*2048kB (UE) 61*4096kB (M) = 294124kB
[  161.457995][ T8280] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  161.465445][ T8280] Node 1 Normal: 129*4kB (UM) 296*8kB (UME) 97*16kB (UME) 404*32kB (UME) 309*64kB (UME) 168*128kB (UME) 54*256kB (UME) 22*512kB (UME) 4*1024kB (UM) 6*2048kB (M) 84*4096kB (M) = 444180kB
[  161.482631][ T8280] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  161.492055][ T8280] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  161.495011][ T8280] 42062 total pagecache pages
[  161.496427][ T8280] 0 pages in swap cache
[  161.497663][ T8280] Free swap  = 124996kB
[  161.498944][ T8280] Total swap = 124996kB
[  161.500347][ T8280] 786301 pages RAM
[  161.503892][ T8280] 0 pages HighMem/MovableOnly
[  161.506042][ T8280] 241347 pages reserved
[  161.507414][ T8280] 0 pages cma reserved
[  163.466494][ T8342] tap0: tun_chr_ioctl cmd 21731
[  163.478118][ T8342] tap0: tun_chr_ioctl cmd 2147767521
[  163.538237][ T8344] __nla_validate_parse: 9 callbacks suppressed
[  163.538255][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'.
[  163.788675][   T55] Bluetooth: hci1: adv larger than maximum supported
[  163.788716][   T55] Bluetooth: hci1: Unknown advertising packet type: 0x73
[  165.542842][ T8395] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1050'.
[  166.372288][ T8412] net_ratelimit: 76 callbacks suppressed
[  166.372315][ T8412] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.546800][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1058'.
[  166.608667][ T8414] wg2: entered promiscuous mode
[  166.630035][ T8418] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.1059'.
[  166.631037][ T8414] wg2: entered allmulticast mode
[  167.354491][ T8443] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1071'.
[  167.665124][ T8457] netlink: 'syz.1.1078': attribute type 49 has an invalid length.
[  168.009735][ T8473] netlink: 'syz.4.1085': attribute type 21 has an invalid length.
[  168.030825][ T8473] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.1085'.
[  168.067455][ T8477] netlink: 'syz.1.1087': attribute type 1 has an invalid length.
[  168.071517][ T8477] netlink: 'syz.1.1087': attribute type 1 has an invalid length.
[  168.251152][ T8481] lo speed is unknown, defaulting to 1000
[  169.114058][ T8502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1098'.
[  169.293008][ T8504] syzkaller0: entered promiscuous mode
[  169.295249][ T8504] syzkaller0: entered allmulticast mode
[  169.692017][ T8511] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.1102'.
[  169.827401][ T8517] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1104'.
[  169.856944][ T8517] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1104'.
[  169.870711][ T8517] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1104'.
[  170.032845][ T8525] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1108'.
[  171.300633][ T8548] delete_channel: no stack
[  171.302276][ T8548] delete_channel: no stack
[  171.424260][   T55] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10
[  172.395752][ T8562] netlink: 'syz.1.1124': attribute type 1 has an invalid length.
[  173.071924][ T8579] netlink: 'syz.4.1132': attribute type 10 has an invalid length.
[  173.074713][ T8579] netlink: 3531 bytes leftover after parsing attributes in process `syz.4.1132'.
[  173.438508][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'.
[  173.454162][ T8589] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  173.457602][ T8589] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.663046][ T8597] netlink: 'syz.4.1141': attribute type 1 has an invalid length.
[  173.817815][ T8603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  173.866219][ T8603] netlink: 'syz.1.1144': attribute type 11 has an invalid length.
[  173.869698][ T8603] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1144'.
[  174.488808][ T8628] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1153'.
[  174.580785][ T8632] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1154'.
[  174.593768][ T8632] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1154'.
[  174.602979][ T8632] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1154'.
[  175.236086][ T8622] delete_channel: no stack
[  175.395199][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1162'.
[  175.421002][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1162'.
[  175.491216][ T8653] netlink: 'syz.1.1164': attribute type 7 has an invalid length.
[  175.583191][ T8651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1163'.
[  175.632567][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1166'.
[  175.741986][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1167'.
[  176.347765][ T8680] syzkaller0: entered promiscuous mode
[  176.350355][ T8680] syzkaller0: entered allmulticast mode
[  178.114009][ T8685] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1174'.
[  178.235636][ T8695] netlink: 'syz.4.1178': attribute type 10 has an invalid length.
[  178.247669][ T8695] batman_adv: batadv0: Adding interface: 
[  178.249912][ T8695] batman_adv: batadv0: The MTU of interface  is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.261245][ T8695] batman_adv: batadv0: Not using interface  (retrying later): interface not active
[  178.485053][ T8698] -1: renamed from syzkaller0
[  179.689474][ T8712] __nla_validate_parse: 4 callbacks suppressed
[  179.689490][ T8712] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1184'.
[  179.826667][ T8716] netlink: 'syz.1.1185': attribute type 29 has an invalid length.
[  180.733295][ T5879] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  180.780736][ T5879] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  180.792595][ T5879] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  180.798769][ T5879] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  180.802088][ T8721] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  180.807731][ T5879] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  180.943739][ T8723] lo speed is unknown, defaulting to 1000
[  180.945948][ T8732] netlink: 'syz.1.1191': attribute type 21 has an invalid length.
[  180.950072][ T8732] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1191'.
[  180.967972][ T8732] netlink: 'syz.1.1191': attribute type 6 has an invalid length.
[  180.972310][ T8732] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1191'.
[  181.421780][ T8723] chnl_net:caif_netlink_parms(): no params data found
[  181.577915][ T8723] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.582549][ T8723] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.585795][ T8723] bridge_slave_0: entered allmulticast mode
[  181.590016][ T8723] bridge_slave_0: entered promiscuous mode
[  181.603848][ T8723] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.607369][ T8723] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.626620][ T8723] bridge_slave_1: entered allmulticast mode
[  181.630451][ T8723] bridge_slave_1: entered promiscuous mode
[  181.900046][ T8723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.903524][ T8748] lo speed is unknown, defaulting to 1000
[  181.907518][ T8723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  182.067707][ T8723] team0: Port device team_slave_0 added
[  182.101422][ T8723] team0: Port device team_slave_1 added
[  182.450148][ T8723] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.460620][ T8723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.473815][ T8723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.481425][ T8723] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.484256][ T8723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.495157][ T8723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.615732][ T8723] hsr_slave_0: entered promiscuous mode
[  182.620054][ T8723] hsr_slave_1: entered promiscuous mode
[  182.642261][ T8723] debugfs: 'hsr0' already exists in 'hsr'
[  182.644789][ T8723] Cannot create hsr debugfs directory
[  182.881369][   T55] Bluetooth: hci3: command tx timeout
[  183.439294][ T8723] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  183.455170][ T8723] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  183.472193][ T8723] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  183.495188][ T8723] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  183.696356][ T8723] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.723901][ T8723] 8021q: adding VLAN 0 to HW filter on device team0
[  183.734161][ T1593] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.737254][ T1593] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.751721][ T1593] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.754805][ T1593] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.787181][ T8784] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  184.107764][ T8723] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.488605][ T8723] veth0_vlan: entered promiscuous mode
[  184.500104][ T8723] veth1_vlan: entered promiscuous mode
[  184.547238][ T8723] veth0_macvtap: entered promiscuous mode
[  184.576371][ T8723] veth1_macvtap: entered promiscuous mode
[  184.598543][ T8723] batman_adv: batadv0: Interface activated: batadv_slave_0
[  184.609434][ T8723] batman_adv: batadv0: Interface activated: batadv_slave_1
[  184.626229][ T5901] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.636316][ T5901] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.646795][ T5901] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.731144][ T5901] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.818161][ T1593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.827388][ T1593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.862822][ T1593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.865397][ T1593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.950879][   T55] Bluetooth: hci3: command tx timeout
[  184.982970][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1220'.
[  185.023381][ T8835] pim6reg: tun_chr_ioctl cmd 1074025677
[  185.025974][ T8835] pim6reg: linktype set to 805
[  185.906204][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1247'.
[  186.415321][ T8898] netlink: 'syz.4.1251': attribute type 40 has an invalid length.
[  187.031328][   T55] Bluetooth: hci3: command tx timeout
[  188.250631][ T8898] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.110996][   T55] Bluetooth: hci3: command tx timeout
[  189.995164][ T8935] syzkaller0: entered promiscuous mode
[  189.997417][ T8935] syzkaller0: entered allmulticast mode
[  190.208201][ T8967] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1275'.
[  191.241660][ T8994] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1287'.
[  191.819355][ T9023] netlink: 209832 bytes leftover after parsing attributes in process `syz.4.1300'.
[  191.947997][ T9033] netlink: 208192 bytes leftover after parsing attributes in process `syz.5.1305'.
[  191.952918][ T9033] netlink: 'syz.5.1305': attribute type 1 has an invalid length.
[  192.147760][ T9047] lo speed is unknown, defaulting to 1000
[  192.212843][ T9049] netlink: 127868 bytes leftover after parsing attributes in process `syz.5.1312'.
[  193.301757][ T9063] lo speed is unknown, defaulting to 1000
[  193.544291][ T9080] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1321'.
[  193.627348][ T9085] netlink: 'syz.1.1325': attribute type 2 has an invalid length.
[  193.632843][ T9085] netlink: 'syz.1.1325': attribute type 1 has an invalid length.
[  193.636068][ T9085] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1325'.
[  194.134164][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1329'.
[  194.158823][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.162666][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.918971][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1340'.
[  194.984219][ T9132] netlink: 'syz.5.1342': attribute type 1 has an invalid length.
[  196.012852][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1351'.
[  196.241404][ T5879] Bluetooth: hci2: command 0x0406 tx timeout
[  196.438175][ T9176] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1361'.
[  196.848178][ T9204] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1371'.
[  196.854398][ T9206] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1374'.
[  197.162342][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1376'.
[  198.319831][ T9252] IPv6: Can't replace route, no match found
[  198.469783][ T9258] netlink: 'syz.4.1398': attribute type 11 has an invalid length.
[  198.475963][ T9258] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1398'.
[  199.184700][ T9273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1404'.
[  199.187568][ T9273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1404'.
[  199.193583][ T9274] netlink: 'syz.1.1405': attribute type 10 has an invalid length.
[  199.237413][ T9274] batman_adv: batadv0: Adding interface: netdevsim0
[  199.240374][ T9274] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.256842][ T9274] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  199.435637][ T9276] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1406'.
[  199.977544][ T9279] netlink: 'syz.4.1407': attribute type 2 has an invalid length.
[  199.981656][ T9279] netlink: 119 bytes leftover after parsing attributes in process `syz.4.1407'.
[  201.725459][ T9336] netlink: 'syz.4.1435': attribute type 21 has an invalid length.
[  201.879226][ T9344] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1438'.
[  201.885226][ T9344] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1438'.
[  201.888567][ T9344] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1438'.
[  202.047456][ T9354] netlink: 'syz.1.1444': attribute type 10 has an invalid length.
[  202.060657][ T9354] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1444'.
[  202.644341][ T9362] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  202.647983][ T9362] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  202.696182][ T9365] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1448'.
[  202.744770][ T9365] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1448'.
[  202.759684][ T9365] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  205.839176][ T9409] netlink: ct family unspecified
[  205.843886][ T9409] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.874890][ T9413] netlink: 'syz.1.1471': attribute type 16 has an invalid length.
[  205.883915][ T9413] netlink: 'syz.1.1471': attribute type 3 has an invalid length.
[  205.886840][ T9413] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1471'.
[  206.399716][ T9434] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1481'.
[  206.439370][ T9435] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1482'.
[  206.474753][ T9437] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1483'.
[  206.716814][ T9445] netlink: 'syz.4.1487': attribute type 5 has an invalid length.
[  206.842806][ T9451] netlink: 'syz.1.1490': attribute type 7 has an invalid length.
[  206.991408][ T9456] __nla_validate_parse: 1 callbacks suppressed
[  206.991419][ T9456] netlink: 64691 bytes leftover after parsing attributes in process `syz.1.1492'.
[  207.372761][ T9460] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  207.506768][ T9454] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  208.198536][ T9479] netlink: 'syz.4.1502': attribute type 6 has an invalid length.
[  208.207878][ T9479] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1502'.
[  208.611696][ T9487] netlink: 'syz.4.1506': attribute type 1 has an invalid length.
[  208.847301][ T9503] IPv6: NLM_F_CREATE should be specified when creating new route
[  208.916370][ T9507] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  209.161854][ T9521] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1523'.
[  209.260436][ T9524] netlink: 'syz.1.1525': attribute type 4 has an invalid length.
[  209.327936][ T9529] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1527'.
[  209.336711][ T9529] D`: renamed from hsr_slave_1 (while UP)
[  209.904339][ T5901] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.166440][ T5901] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.193201][ T9541] syzkaller1: tun_chr_ioctl cmd 1074812118
[  210.208343][ T9539] netlink: 'syz.4.1530': attribute type 3 has an invalid length.
[  210.222200][ T9539] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1530'.
[  210.273191][ T5901] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.362274][ T5901] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.578911][ T5901] bridge_slave_1: left allmulticast mode
[  210.588649][ T5901] bridge_slave_1: left promiscuous mode
[  210.600301][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.403687][ T5901] bridge_slave_0: left promiscuous mode
[  211.411041][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.038598][ T5901] bond0 (unregistering): (slave 1!): Releasing backup interface
[  212.051526][ T5901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  212.065775][ T5901] bond0 (unregistering): Released all slaves
[  212.075634][ T9559] netlink: 'syz.4.1538': attribute type 9 has an invalid length.
[  212.506146][ T9586] nftables ruleset with unbound chain
[  212.727345][ T5901] hsr_slave_0: left promiscuous mode
[  212.746284][ T5901] hsr_slave_1: left promiscuous mode
[  212.753944][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.764703][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.795625][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.799511][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.805721][ T5879] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  212.810413][ T5879] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  212.815226][ T5879] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  212.820108][ T5879] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  212.824991][ T5879] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  213.657487][ T5901] veth1_macvtap: left promiscuous mode
[  213.662901][ T5901] veth0_macvtap: left promiscuous mode
[  213.665435][ T5901] veth1_vlan: left promiscuous mode
[  213.667697][ T5901] veth0_vlan: left promiscuous mode
[  213.841387][ T9602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1556'.
[  214.077663][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1559'.
[  214.252460][ T5901] team0 (unregistering): Port device team_slave_1 removed
[  214.317425][ T5901] team0 (unregistering): Port device team_slave_0 removed
[  214.393930][ T9613] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1561'.
[  214.870794][ T5879] Bluetooth: hci0: command tx timeout
[  215.088835][ T9595] lo speed is unknown, defaulting to 1000
[  215.352979][ T9595] chnl_net:caif_netlink_parms(): no params data found
[  215.416849][ T9595] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.419111][ T9595] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.422568][ T9595] bridge_slave_0: entered allmulticast mode
[  215.425894][ T9595] bridge_slave_0: entered promiscuous mode
[  215.429645][ T9595] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.432436][ T9595] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.434782][ T9595] bridge_slave_1: entered allmulticast mode
[  215.442101][ T9595] bridge_slave_1: entered promiscuous mode
[  215.512521][ T9595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.524721][ T9595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.551516][ T9595] team0: Port device team_slave_0 added
[  215.556110][ T9595] team0: Port device team_slave_1 added
[  215.597075][ T9595] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.599715][ T9595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.627639][ T9595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.648202][ T9595] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.650475][ T9595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.660291][ T9595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.707330][ T9595] hsr_slave_0: entered promiscuous mode
[  215.710159][ T9595] hsr_slave_1: entered promiscuous mode
[  215.712783][ T9595] debugfs: 'hsr0' already exists in 'hsr'
[  215.714748][ T9595] Cannot create hsr debugfs directory
[  215.913493][ T9641] netlink: 'syz.4.1569': attribute type 1 has an invalid length.
[  215.919362][ T9641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1569'.
[  216.018550][ T9595] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  216.043041][ T9595] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  216.072815][ T9595] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  216.083801][ T9595] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  216.277509][ T9595] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.302016][ T9595] 8021q: adding VLAN 0 to HW filter on device team0
[  216.313686][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.316409][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  216.342912][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.345787][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.695178][ T9595] 8021q: adding VLAN 0 to HW filter on device batadv0
[  216.905661][ T9595] veth0_vlan: entered promiscuous mode
[  216.917984][ T9595] veth1_vlan: entered promiscuous mode
[  216.950780][ T5879] Bluetooth: hci0: command tx timeout
[  216.964517][ T9595] veth0_macvtap: entered promiscuous mode
[  216.970395][ T9595] veth1_macvtap: entered promiscuous mode
[  216.999860][ T9595] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.009181][ T9595] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.029089][ T5901] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.044828][ T5901] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.048416][ T5901] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.056732][ T5901] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.178967][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.181929][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.230089][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.234248][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.494818][ T9722] netlink: 4200 bytes leftover after parsing attributes in process `syz.4.1595'.
[  217.601226][ T9730] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.1596'.
[  217.611605][ T9730] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.1596'.
[  217.616138][ T9725] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.1596'.
[  217.987796][ T9745] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1604'.
[  218.113518][ T9755] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1609'.
[  218.189555][ T9758] netlink: 'syz.1.1610': attribute type 10 has an invalid length.
[  218.203008][ T9758] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  218.225892][ T9758] netlink: 'syz.1.1610': attribute type 11 has an invalid length.
[  218.229928][ T9756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  218.396231][ T9773] netlink: 'syz.6.1618': attribute type 2 has an invalid length.
[  218.399480][ T9773] netlink: 'syz.6.1618': attribute type 1 has an invalid length.
[  218.404544][ T9773] nbd: couldn't find a device at index 16
[  218.503187][ T9777] IPv6: NLM_F_CREATE should be specified when creating new route
[  218.642646][ T9783] bpf: Bad value for 'uid'
[  218.815883][ T9789] netlink: 'syz.4.1625': attribute type 29 has an invalid length.
[  218.821032][ T9789] netlink: 'syz.4.1625': attribute type 29 has an invalid length.
[  218.863557][ T5879] Bluetooth: hci0: Malformed Event: 0x2f
[  219.014792][ T9799] netlink: 'syz.1.1629': attribute type 28 has an invalid length.
[  219.018055][ T9799] netlink: 'syz.1.1629': attribute type 4 has an invalid length.
[  219.031280][ T5879] Bluetooth: hci0: command tx timeout
[  219.046376][ T9799] __nla_validate_parse: 2 callbacks suppressed
[  219.046390][ T9799] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1629'.
[  219.599237][ T9839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1649'.
[  219.812537][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1654'.
[  219.819057][ T9848] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1652'.
[  219.823532][ T9848] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1652'.
[  219.878791][ T9848] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  219.881394][ T9848] IPv6: NLM_F_CREATE should be set when creating new route
[  219.884092][ T9848] IPv6: NLM_F_CREATE should be set when creating new route
[  220.097187][ T9863] netlink: 'syz.4.1660': attribute type 21 has an invalid length.
[  220.220316][ T5879] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9
[  221.123633][ T5879] Bluetooth: hci0: command tx timeout
[  221.763213][ T9907] netdevsim netdevsim6: Firmware load for '/../file0' refused, path contains '..' component
[  221.776390][ T9905] netlink: 'syz.4.1674': attribute type 10 has an invalid length.
[  221.873649][ T9905] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  221.950445][ T9909] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1676'.
[  221.971694][ T9909] netlink: 'syz.1.1676': attribute type 4 has an invalid length.
[  221.974669][ T9909] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1676'.
[  222.041188][ T9909] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  222.148425][ T9920] C: renamed from team_slave_0 (while UP)
[  222.164693][ T9920] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1681'.
[  222.337106][ T9934] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1687'.
[  222.388873][ T9938] netlink: 2418 bytes leftover after parsing attributes in process `syz.6.1689'.
[  223.449565][ T9975] rdma_rxe: rxe_newlink: failed to add erspan0
[  223.747052][ T9986] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.750345][ T9986] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.754267][ T9986] bridge0: entered allmulticast mode
[  224.007156][ T9993] netlink: 'syz.1.1711': attribute type 11 has an invalid length.
[  224.057256][ T9993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  224.186086][ T9986] bridge_slave_1: left allmulticast mode
[  224.588823][ T9986] bridge_slave_1: left promiscuous mode
[  224.594728][ T9986] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.601624][ T9986] bridge_slave_0: left allmulticast mode
[  224.603816][ T9986] bridge_slave_0: left promiscuous mode
[  224.606224][ T9986] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.810956][ T5879] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[  224.892220][T10004] __nla_validate_parse: 5 callbacks suppressed
[  224.892236][T10004] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.1715'.
[  224.911020][ T9999] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.1715'.
[  224.927335][ T9999] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.1715'.
[  225.056788][T10010] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1719'.
[  225.222103][T10022] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1725'.
[  225.427245][T10041] validate_nla: 5 callbacks suppressed
[  225.427266][T10041] netlink: 'syz.4.1733': attribute type 1 has an invalid length.
[  225.432484][T10041] netlink: 'syz.4.1733': attribute type 1 has an invalid length.
[  225.639385][T10054] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1739'.
[  225.829337][T10062] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1743'.
[  225.943897][T10063] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.466844][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1745'.
[  226.565825][T10071] macvtap0: refused to change device tx_queue_len
[  226.631555][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1746'.
[  226.726392][T10077] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  226.873667][T10087] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1754'.
[  226.880688][ T5879] Bluetooth: hci2: command 0x0406 tx timeout
[  227.410844][T10115] netlink: 'syz.6.1766': attribute type 2 has an invalid length.
[  227.417296][T10115] netlink: 'syz.6.1766': attribute type 2 has an invalid length.
[  227.875501][T10126] netlink: 'syz.4.1771': attribute type 2 has an invalid length.
[  228.834875][T10147] netlink: 'syz.6.1779': attribute type 1 has an invalid length.
[  231.874186][T10256] netlink: 'syz.1.1829': attribute type 39 has an invalid length.
[  232.085341][T10264] netlink: 'syz.4.1833': attribute type 10 has an invalid length.
[  232.155190][T10264] geneve0: entered promiscuous mode
[  232.557984][T10264] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  232.649535][T10285] netlink: 'syz.6.1841': attribute type 10 has an invalid length.
[  232.801089][T10293] netlink: 'syz.1.1845': attribute type 10 has an invalid length.
[  233.883188][T10318] __nla_validate_parse: 5 callbacks suppressed
[  233.883202][T10318] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1855'.
[  235.684273][T10357] netlink: 'syz.4.1872': attribute type 10 has an invalid length.
[  235.687647][T10357] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1872'.
[  235.963476][T10373] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1878'.
[  236.206340][T10381] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1882'.
[  236.209322][T10381] netlink: 6320 bytes leftover after parsing attributes in process `syz.4.1882'.
[  236.334010][T10391] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1886'.
[  236.346493][T10391] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1886'.
[  236.367527][T10391] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1886'.
[  236.387017][T10394] netlink: 'syz.6.1889': attribute type 46 has an invalid length.
[  236.393383][T10395] netlink: 'syz.1.1888': attribute type 1 has an invalid length.
[  236.396478][T10395] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1888'.
[  237.131049][T10416] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  237.328827][T10421] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.482684][T10427] netlink: 1057 bytes leftover after parsing attributes in process `syz.6.1901'.
[  237.488742][T10426] netlink: 'syz.1.1902': attribute type 3 has an invalid length.
[  238.215105][T10461] netlink: 'syz.4.1918': attribute type 13 has an invalid length.
[  238.218792][T10461] netlink: 'syz.4.1918': attribute type 17 has an invalid length.
[  238.277172][T10469] netlink: 'syz.6.1922': attribute type 4 has an invalid length.
[  238.310189][T10461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  238.909841][T10486] netlink: 'syz.4.1927': attribute type 4 has an invalid length.
[  238.913488][T10486] __nla_validate_parse: 9 callbacks suppressed
[  238.913501][T10486] netlink: 14333 bytes leftover after parsing attributes in process `syz.4.1927'.
[  239.710538][T10496] IPv6: Can't replace route, no match found
[  239.865103][T10507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1938'.
[  240.645371][T10525] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1946'.
[  240.797920][T10535] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1951'.
[  241.099989][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1960'.
[  241.103945][T10553] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  241.107347][T10553] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.128177][T10555] netlink: 'syz.1.1961': attribute type 9 has an invalid length.
[  241.524231][T10576] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1971'.
[  241.584040][T10580] ==================================================================
[  241.587236][T10580] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  241.590244][T10580] Read of size 4 at addr ffff88810f9e1bc4 by task syz.1.1973/10580
[  241.594188][T10580] 
[  241.595547][T10580] CPU: 1 UID: 0 PID: 10580 Comm: syz.1.1973 Not tainted syzkaller #0 PREEMPT(full) 
[  241.595590][T10580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  241.595601][T10580] Call Trace:
[  241.595609][T10580]  <TASK>
[  241.595617][T10580]  dump_stack_lvl+0x189/0x250
[  241.595639][T10580]  ? __kasan_check_byte+0x12/0x40
[  241.595660][T10580]  ? __pfx_dump_stack_lvl+0x10/0x10
[  241.595676][T10580]  ? lock_release+0x4b/0x3e0
[  241.595698][T10580]  ? __virt_addr_valid+0x4a5/0x5c0
[  241.595725][T10580]  print_report+0xca/0x240
[  241.595738][T10580]  ? xfrm_alloc_spi+0x570/0xf30
[  241.595759][T10580]  kasan_report+0x118/0x150
[  241.595780][T10580]  ? xfrm_alloc_spi+0x570/0xf30
[  241.595800][T10580]  xfrm_alloc_spi+0x570/0xf30
[  241.595818][T10580]  ? xfrm_alloc_spi+0x2a0/0xf30
[  241.595841][T10580]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  241.595856][T10580]  ? xfrm_find_acq+0x87/0xa0
[  241.595874][T10580]  xfrm_alloc_userspi+0x70b/0xc90
[  241.595899][T10580]  ? apparmor_capable+0x137/0x1b0
[  241.595916][T10580]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  241.595937][T10580]  ? __nla_parse+0x40/0x60
[  241.595952][T10580]  xfrm_user_rcv_msg+0x7a3/0xab0
[  241.595973][T10580]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  241.596002][T10580]  ? __pfx___mutex_trylock_common+0x10/0x10
[  241.596018][T10580]  ? rcu_is_watching+0x15/0xb0
[  241.596033][T10580]  ? trace_contention_end+0x39/0x120
[  241.596048][T10580]  ? __mutex_lock+0x335/0x1350
[  241.596065][T10580]  netlink_rcv_skb+0x208/0x470
[  241.596082][T10580]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  241.596104][T10580]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  241.596126][T10580]  ? netlink_deliver_tap+0x2e/0x1b0
[  241.596141][T10580]  ? netlink_deliver_tap+0x2e/0x1b0
[  241.596156][T10580]  xfrm_netlink_rcv+0x79/0x90
[  241.596175][T10580]  netlink_unicast+0x82f/0x9e0
[  241.596190][T10580]  ? __pfx_netlink_unicast+0x10/0x10
[  241.596203][T10580]  ? netlink_sendmsg+0x642/0xb30
[  241.596216][T10580]  ? skb_put+0x11b/0x210
[  241.596232][T10580]  netlink_sendmsg+0x805/0xb30
[  241.596250][T10580]  ? __pfx_netlink_sendmsg+0x10/0x10
[  241.596266][T10580]  ? aa_sock_msg_perm+0xf1/0x1d0
[  241.596280][T10580]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  241.596295][T10580]  ? __pfx_netlink_sendmsg+0x10/0x10
[  241.596310][T10580]  __sock_sendmsg+0x21c/0x270
[  241.596331][T10580]  ____sys_sendmsg+0x505/0x830
[  241.596350][T10580]  ? __pfx_____sys_sendmsg+0x10/0x10
[  241.596368][T10580]  ? import_iovec+0x74/0xa0
[  241.596387][T10580]  ___sys_sendmsg+0x21f/0x2a0
[  241.596405][T10580]  ? __pfx____sys_sendmsg+0x10/0x10
[  241.596432][T10580]  ? __fget_files+0x2a/0x420
[  241.596445][T10580]  ? __fget_files+0x3a0/0x420
[  241.596460][T10580]  __x64_sys_sendmsg+0x19b/0x260
[  241.596478][T10580]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  241.596497][T10580]  ? do_syscall_64+0xbe/0x3b0
[  241.596517][T10580]  do_syscall_64+0xfa/0x3b0
[  241.596533][T10580]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.596549][T10580]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.596562][T10580]  ? exc_page_fault+0x9f/0xf0
[  241.596604][T10580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.596621][T10580] RIP: 0033:0x7feef7d8eba9
[  241.596635][T10580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  241.596649][T10580] RSP: 002b:00007feef8bef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  241.596667][T10580] RAX: ffffffffffffffda RBX: 00007feef7fd5fa0 RCX: 00007feef7d8eba9
[  241.596677][T10580] RDX: 0000000000048000 RSI: 0000200000014800 RDI: 0000000000000003
[  241.596685][T10580] RBP: 00007feef7e11e19 R08: 0000000000000000 R09: 0000000000000000
[  241.596693][T10580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  241.596702][T10580] R13: 00007feef7fd6038 R14: 00007feef7fd5fa0 R15: 00007ffe6d0958f8
[  241.596723][T10580]  </TASK>
[  241.596730][T10580] 
[  241.745888][T10580] Allocated by task 8416:
[  241.747611][T10580]  kasan_save_track+0x3e/0x80
[  241.749362][T10580]  __kasan_slab_alloc+0x6c/0x80
[  241.751239][T10580]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  241.753378][T10580]  xfrm_state_alloc+0x24/0x2f0
[  241.755206][T10580]  __find_acq_core+0x8a7/0x1c00
[  241.757190][T10580]  xfrm_find_acq+0x78/0xa0
[  241.759050][T10580]  xfrm_alloc_userspi+0x6b3/0xc90
[  241.761079][T10580]  xfrm_user_rcv_msg+0x7a3/0xab0
[  241.762970][T10580]  netlink_rcv_skb+0x208/0x470
[  241.764798][T10580]  xfrm_netlink_rcv+0x79/0x90
[  241.766578][T10580]  netlink_unicast+0x82f/0x9e0
[  241.768510][T10580]  netlink_sendmsg+0x805/0xb30
[  241.770484][T10580]  __sock_sendmsg+0x21c/0x270
[  241.772381][T10580]  ____sys_sendmsg+0x505/0x830
[  241.774339][T10580]  ___sys_sendmsg+0x21f/0x2a0
[  241.776292][T10580]  __x64_sys_sendmsg+0x19b/0x260
[  241.778288][T10580]  do_syscall_64+0xfa/0x3b0
[  241.780076][T10580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.782780][T10580] 
[  241.783762][T10580] Freed by task 5872:
[  241.785441][T10580]  kasan_save_track+0x3e/0x80
[  241.787418][T10580]  kasan_save_free_info+0x46/0x50
[  241.789488][T10580]  __kasan_slab_free+0x5b/0x80
[  241.791427][T10580]  kmem_cache_free+0x18f/0x400
[  241.793391][T10580]  xfrm_state_gc_task+0x52d/0x6b0
[  241.795459][T10580]  process_scheduled_works+0xae1/0x17b0
[  241.797748][T10580]  worker_thread+0x8a0/0xda0
[  241.799632][T10580]  kthread+0x711/0x8a0
[  241.801253][T10580]  ret_from_fork+0x439/0x7d0
[  241.803065][T10580]  ret_from_fork_asm+0x1a/0x30
[  241.804959][T10580] 
[  241.805882][T10580] The buggy address belongs to the object at ffff88810f9e1b00
[  241.805882][T10580]  which belongs to the cache xfrm_state of size 928
[  241.811454][T10580] The buggy address is located 196 bytes inside of
[  241.811454][T10580]  freed 928-byte region [ffff88810f9e1b00, ffff88810f9e1ea0)
[  241.817847][T10580] 
[  241.818880][T10580] The buggy address belongs to the physical page:
[  241.821456][T10580] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810f9e2880 pfn:0x10f9e0
[  241.825563][T10580] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  241.828975][T10580] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  241.832103][T10580] page_type: f5(slab)
[  241.833926][T10580] raw: 057ff00000000040 ffff88801af2eb40 dead000000000122 0000000000000000
[  241.837446][T10580] raw: ffff88810f9e2880 00000000800e0005 00000000f5000000 0000000000000000
[  241.840728][T10580] head: 057ff00000000040 ffff88801af2eb40 dead000000000122 0000000000000000
[  241.844011][T10580] head: ffff88810f9e2880 00000000800e0005 00000000f5000000 0000000000000000
[  241.847443][T10580] head: 057ff00000000002 ffffea00043e7801 00000000ffffffff 00000000ffffffff
[  241.851003][T10580] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  241.854536][T10580] page dumped because: kasan: bad access detected
[  241.857040][T10580] page_owner tracks the page as allocated
[  241.859272][T10580] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6316, tgid 6315 (syz.1.188), ts 84306418980, free_ts 82598413654
[  241.866328][T10580]  post_alloc_hook+0x240/0x2a0
[  241.868331][T10580]  get_page_from_freelist+0x21e4/0x22c0
[  241.870570][T10580]  __alloc_frozen_pages_noprof+0x181/0x370
[  241.872855][T10580]  alloc_pages_mpol+0x232/0x4a0
[  241.874739][T10580]  allocate_slab+0x8a/0x370
[  241.876681][T10580]  ___slab_alloc+0xbeb/0x1420
[  241.878520][T10580]  kmem_cache_alloc_noprof+0x283/0x3c0
[  241.880828][T10580]  xfrm_state_alloc+0x24/0x2f0
[  241.882756][T10580]  pfkey_add+0x6e4/0x2e00
[  241.884431][T10580]  pfkey_sendmsg+0xbfe/0x1090
[  241.886226][T10580]  __sock_sendmsg+0x21c/0x270
[  241.888137][T10580]  ____sys_sendmsg+0x505/0x830
[  241.890026][T10580]  ___sys_sendmsg+0x21f/0x2a0
[  241.891954][T10580]  __x64_sys_sendmsg+0x19b/0x260
[  241.893914][T10580]  do_syscall_64+0xfa/0x3b0
[  241.895670][T10580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.897959][T10580] page last free pid 6250 tgid 6249 stack trace:
[  241.900517][T10580]  __free_frozen_pages+0xbc4/0xd30
[  241.902570][T10580]  __slab_free+0x303/0x3c0
[  241.904289][T10580]  qlist_free_all+0x97/0x140
[  241.906012][T10580]  kasan_quarantine_reduce+0x148/0x160
[  241.908084][T10580]  __kasan_slab_alloc+0x22/0x80
[  241.909975][T10580]  __kmalloc_cache_noprof+0x1be/0x3d0
[  241.912825][T10580]  sctp_transport_new+0x7e/0x640
[  241.914774][T10580]  sctp_assoc_add_peer+0x260/0x13b0
[  241.916829][T10580]  sctp_connect_new_asoc+0x30a/0x690
[  241.918922][T10580]  sctp_sendmsg+0x155c/0x2810
[  241.920727][T10580]  __sock_sendmsg+0x19c/0x270
[  241.922559][T10580]  ____sys_sendmsg+0x505/0x830
[  241.924324][T10580]  ___sys_sendmsg+0x21f/0x2a0
[  241.926066][T10580]  __x64_sys_sendmsg+0x19b/0x260
[  241.928769][T10580]  do_syscall_64+0xfa/0x3b0
[  241.930479][T10580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.932386][T10580] 
[  241.933193][T10580] Memory state around the buggy address:
[  241.935174][T10580]  ffff88810f9e1a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  241.937990][T10580]  ffff88810f9e1b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  241.940835][T10580] >ffff88810f9e1b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  241.943607][T10580]                                            ^
[  241.945598][T10580]  ffff88810f9e1c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  241.948808][T10580]  ffff88810f9e1c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  241.951399][T10580] ==================================================================
[  241.954454][T10580] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  241.957060][T10580] CPU: 1 UID: 0 PID: 10580 Comm: syz.1.1973 Not tainted syzkaller #0 PREEMPT(full) 
[  241.960351][T10580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  241.963757][T10580] Call Trace:
[  241.964888][T10580]  <TASK>
[  241.966009][T10580]  dump_stack_lvl+0x99/0x250
[  241.968044][T10580]  ? __asan_memcpy+0x40/0x70
[  241.969925][T10580]  ? __pfx_dump_stack_lvl+0x10/0x10
[  241.971933][T10580]  ? __pfx__printk+0x10/0x10
[  241.973764][T10580]  vpanic+0x281/0x750
[  241.975338][T10580]  ? __pfx_vpanic+0x10/0x10
[  241.977101][T10580]  ? irqentry_exit+0x74/0x90
[  241.979102][T10580]  panic+0xb9/0xc0
[  241.981259][T10580]  ? __pfx_panic+0x10/0x10
[  241.983000][T10580]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  241.985416][T10580]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  241.987942][T10580]  ? xfrm_alloc_spi+0x570/0xf30
[  241.990005][T10580]  check_panic_on_warn+0x89/0xb0
[  241.992106][T10580]  ? xfrm_alloc_spi+0x570/0xf30
[  241.994027][T10580]  end_report+0x78/0x160
[  241.995779][T10580]  kasan_report+0x129/0x150
[  241.997550][T10580]  ? xfrm_alloc_spi+0x570/0xf30
[  242.000025][T10580]  xfrm_alloc_spi+0x570/0xf30
[  242.003254][T10580]  ? xfrm_alloc_spi+0x2a0/0xf30
[  242.005326][T10580]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  242.007496][T10580]  ? xfrm_find_acq+0x87/0xa0
[  242.009441][T10580]  xfrm_alloc_userspi+0x70b/0xc90
[  242.011641][T10580]  ? apparmor_capable+0x137/0x1b0
[  242.013788][T10580]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  242.016097][T10580]  ? __nla_parse+0x40/0x60
[  242.017977][T10580]  xfrm_user_rcv_msg+0x7a3/0xab0
[  242.020203][T10580]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  242.022639][T10580]  ? __pfx___mutex_trylock_common+0x10/0x10
[  242.025259][T10580]  ? rcu_is_watching+0x15/0xb0
[  242.027411][T10580]  ? trace_contention_end+0x39/0x120
[  242.029675][T10580]  ? __mutex_lock+0x335/0x1350
[  242.031675][T10580]  netlink_rcv_skb+0x208/0x470
[  242.033650][T10580]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  242.035964][T10580]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  242.038108][T10580]  ? netlink_deliver_tap+0x2e/0x1b0
[  242.040391][T10580]  ? netlink_deliver_tap+0x2e/0x1b0
[  242.042555][T10580]  xfrm_netlink_rcv+0x79/0x90
[  242.044759][T10580]  netlink_unicast+0x82f/0x9e0
[  242.046768][T10580]  ? __pfx_netlink_unicast+0x10/0x10
[  242.049099][T10580]  ? netlink_sendmsg+0x642/0xb30
[  242.051082][T10580]  ? skb_put+0x11b/0x210
[  242.053621][T10580]  netlink_sendmsg+0x805/0xb30
[  242.055698][T10580]  ? __pfx_netlink_sendmsg+0x10/0x10
[  242.057943][T10580]  ? aa_sock_msg_perm+0xf1/0x1d0
[  242.060031][T10580]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  242.062367][T10580]  ? __pfx_netlink_sendmsg+0x10/0x10
[  242.064798][T10580]  __sock_sendmsg+0x21c/0x270
[  242.066952][T10580]  ____sys_sendmsg+0x505/0x830
[  242.068964][T10580]  ? __pfx_____sys_sendmsg+0x10/0x10
[  242.071131][T10580]  ? import_iovec+0x74/0xa0
[  242.072932][T10580]  ___sys_sendmsg+0x21f/0x2a0
[  242.074911][T10580]  ? __pfx____sys_sendmsg+0x10/0x10
[  242.077031][T10580]  ? __fget_files+0x2a/0x420
[  242.078920][T10580]  ? __fget_files+0x3a0/0x420
[  242.080830][T10580]  __x64_sys_sendmsg+0x19b/0x260
[  242.082839][T10580]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  242.085226][T10580]  ? do_syscall_64+0xbe/0x3b0
[  242.087379][T10580]  do_syscall_64+0xfa/0x3b0
[  242.089386][T10580]  ? lockdep_hardirqs_on+0x9c/0x150
[  242.091626][T10580]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.094042][T10580]  ? exc_page_fault+0x9f/0xf0
[  242.095982][T10580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.098337][T10580] RIP: 0033:0x7feef7d8eba9
[  242.100134][T10580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  242.108226][T10580] RSP: 002b:00007feef8bef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  242.111596][T10580] RAX: ffffffffffffffda RBX: 00007feef7fd5fa0 RCX: 00007feef7d8eba9
[  242.114781][T10580] RDX: 0000000000048000 RSI: 0000200000014800 RDI: 0000000000000003
[  242.118581][T10580] RBP: 00007feef7e11e19 R08: 0000000000000000 R09: 0000000000000000
[  242.121877][T10580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  242.125238][T10580] R13: 00007feef7fd6038 R14: 00007feef7fd5fa0 R15: 00007ffe6d0958f8
[  242.128369][T10580]  </TASK>
[  242.130324][T10580] Kernel Offset: disabled
[  242.132234][T10580] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:36:00  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff8fb978a4 RCX=dffffc0000000000 RDX=ffffffff8fb978a4
RSI=ffffffff903676a0 RDI=ffffffff8be33e20 RBP=ffffffff8fb978a4 RSP=ffffc90002e0f358
R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90002e0f478 R11=ffffffff81ac4d00
R12=ffffffff819d7de8 R13=ffffffff8fb978a4 R14=ffffc90002e0f428 R15=ffffffff8fb978a4
RIP=ffffffff8172e3fe RFL=00000807 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555606bd500 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000500 CR3=000000011a3ea000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=0000000000000000 00007f0ed3812ee7 XMM09=0000000000000000 00007f0ed3812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000054 RBX=0000000000000054 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001575 RDI=0000000000001576 RBP=00000000000003f8 RSP=ffffc90002f4e9f0
R8 =ffff8881077b8237 R9 =1ffff11020ef7046 R10=dffffc0000000000 R11=ffffffff854fa300
R12=dffffc0000000000 R13=ffffffff99b028d0 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854fa37c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007feef8bef6c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007feef8beefc8 CR3=000000011912c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007feef7fa7498 00007feef7fa7470 XMM03=00007feef7fa74a8 00007feef7fa74a0
XMM04=00007feef8b0d100 00007feef7fa7460 XMM05=00007feef7fa7478 00007feef7fa74c0
XMM06=00007feef7fa74b8 00007feef7fa74b0 XMM07=00007feef7fa74a8 00007feef7fa74a0
XMM08=0000000000000000 00007feef7e12ee7 XMM09=0000000000000000 00007feef7e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
