last executing test programs: 2m54.433736137s ago: executing program 1 (id=1266): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x5, 0x6, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xa}, 0x0, 0x0, 0x8, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000120000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x80e0a, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x2) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='dax_writeback_one\x00'}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x8, 0x0, 0xff, 0xa9, 0x0, 0x0, 0x7a5c4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800004, 0x0, @perf_bp={0x0, 0x5}, 0x6, 0xc8, 0x0, 0x5, 0x0, 0x3d4d2b0d, 0x0, 0x0, 0x3, 0x0, 0x2000040000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40002100) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 2m53.896272643s ago: executing program 1 (id=1272): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20}}, 0x24004050) 2m53.667038323s ago: executing program 1 (id=1275): socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) (fail_nth: 2) 2m53.128024766s ago: executing program 1 (id=1280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x9c}, {0x6}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trrr'], 0xa) 2m52.627504583s ago: executing program 1 (id=1285): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20}}, 0x24004050) 2m52.291382616s ago: executing program 1 (id=1288): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000100081044e8125e579c7b904021d080307000000e8fea4a1330015000600142603600e120800110000810401040016000a00104004000000036010faa84dcf5c04614c182062a245a34cf68fa0c1d67f6f94007134cf6ee08000a07ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf0c2d92cc1d944f4863951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = syz_clone(0xc3146000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x1954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x9, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000600)='devices.allow\x00', 0x2, 0x0) fstat(r1, &(0x7f0000000740)) socket$isdn_base(0x22, 0x3, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="080000000100000008000000ab0d000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050034d296dd1e6ac29000"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0xd, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xc}, 0x100c, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, r2, 0xfffffffffffffffe, 0xffffffffffffffff, 0x87df14ebcc1b4359) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0904000000000000000002000002540004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc0800014000000000140001800d00010073796e"], 0xa8}}, 0x0) socket$key(0xf, 0x3, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000700)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r4 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x2, 0x6a, 0x9, 0x0, 0x4, 0x8040, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x10, 0x8, 0x8, 0x6, 0xffffffffffffffff, 0x84, 0xb5b, 0x0, 0xffff}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e3, &(0x7f0000000180)={r5, r6}) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) 2m37.067761813s ago: executing program 32 (id=1288): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000100081044e8125e579c7b904021d080307000000e8fea4a1330015000600142603600e120800110000810401040016000a00104004000000036010faa84dcf5c04614c182062a245a34cf68fa0c1d67f6f94007134cf6ee08000a07ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf0c2d92cc1d944f4863951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = syz_clone(0xc3146000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x1954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x9, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000600)='devices.allow\x00', 0x2, 0x0) fstat(r1, &(0x7f0000000740)) socket$isdn_base(0x22, 0x3, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="080000000100000008000000ab0d000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050034d296dd1e6ac29000"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0xd, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xc}, 0x100c, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, r2, 0xfffffffffffffffe, 0xffffffffffffffff, 0x87df14ebcc1b4359) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0904000000000000000002000002540004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc0800014000000000140001800d00010073796e"], 0xa8}}, 0x0) socket$key(0xf, 0x3, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000700)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r4 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x2, 0x6a, 0x9, 0x0, 0x4, 0x8040, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x10, 0x8, 0x8, 0x6, 0xffffffffffffffff, 0x84, 0xb5b, 0x0, 0xffff}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e3, &(0x7f0000000180)={r5, r6}) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) 7.582601793s ago: executing program 0 (id=2257): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000000000004bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b705000001000000"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0x1a82}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000181100001c5691fe0b695fc245489dece8a0abd7e971a147d264d4d8746926329edc7ef0a3815559169673487c0ba15832a9890891819c071503b30872ab8cea2409b0a07319b81ad52fb11da00def219eb70a5d88252033744b7ab789ec508134d6c6bf11578e4ac438f903d8952a567363905fcdbfaef4dd099c48e82cb255a3db8b62f596c0b6934e21c94239596f8ba09527d43807b4805b0cb723348f3755ae425ccfb550e3a553bd4d7b2388b836de04c1639c90ef", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) 7.139741677s ago: executing program 0 (id=2265): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r0}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="150000001000000008"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) 7.020353993s ago: executing program 0 (id=2267): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) 6.775320633s ago: executing program 0 (id=2270): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x97, 0x9, 0x0, 0x0, 0x0, 0x2000000000000000, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x2008, 0x0, 0x80000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.17616834s ago: executing program 4 (id=2301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x204, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1d8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x28, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0xfffffe94, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'bond0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x58, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x2a4}}, 0x0) 2.046145795s ago: executing program 2 (id=2303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0x74}}, 0x0) 1.961231834s ago: executing program 5 (id=2304): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x4000, r0}, 0x18) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random="9cc9de10e578"}) 1.912320842s ago: executing program 4 (id=2305): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1.838985159s ago: executing program 2 (id=2307): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.649298543s ago: executing program 5 (id=2309): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) recvmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x9a) 1.434750233s ago: executing program 2 (id=2311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00034000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x0) 1.162818252s ago: executing program 2 (id=2312): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x4, 0xa, 0xbaa3bc3a656066c7, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x44050) 1.118535822s ago: executing program 3 (id=2313): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x4e, 0x0, &(0x7f0000000100)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be30043d50ea5a6b868", 0x0, 0x1a3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.080815528s ago: executing program 5 (id=2314): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010fffbdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 1.049352742s ago: executing program 4 (id=2315): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) 950.820689ms ago: executing program 2 (id=2316): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000f8000000000002000418851000000200000020000000000000009500007b0000000095"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 949.811535ms ago: executing program 4 (id=2317): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000f8000000000002000418851000000200000020000000000000009500007b0000000095"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x91, &(0x7f0000000100)=""/145, 0x0, 0x0, '\x00', 0x0, 0x1f00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 844.232593ms ago: executing program 5 (id=2318): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) 721.635261ms ago: executing program 3 (id=2319): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000096d132478102268d00", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0xfffffffd}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40050) 721.43067ms ago: executing program 4 (id=2320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000140007800800114000000000050015000e000000050005000a000000050001400700000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) 720.315047ms ago: executing program 2 (id=2321): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000010040), 0x101c01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000010080)={'ip_vti0\x00', 0x1102}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x400}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r7) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r4) socketpair(0xa, 0x6, 0x5, &(0x7f0000010000)) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TUNATTACHFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f0000004cc0)={0x1, 0xb2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa2721, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 719.856125ms ago: executing program 3 (id=2322): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="7a0a00ff0000000071108700000000009500000000000000f56f80cd7de3d829d9816faaf8934bcd7bb603dfb47caa415cc1bd1c75779b3fda59c7c933ec32fd2778aae84cded80a58765446dce7366deaae1764839e0f1675444c5d6a40cc4c6d238869aa79c8bbdc9174b4a6fccc3ccd1caad3b9e61ce98c0684a17e1bb2e692a31d75cf4731902f2d56"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 597.346933ms ago: executing program 3 (id=2323): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 596.795847ms ago: executing program 5 (id=2324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002000)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) 596.316586ms ago: executing program 4 (id=2325): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r1}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 428.287021ms ago: executing program 0 (id=2326): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdf}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) 378.980665ms ago: executing program 5 (id=2327): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x16d, 0x0, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0x0, 0x90, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f00000002c0)=[0x0], 0x0, 0xe6, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x43, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x514, 0x266}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) 366.407139ms ago: executing program 3 (id=2328): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, 0x140f, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008000) 25.699772ms ago: executing program 0 (id=2329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000ff03000008000000400000004a000000bb79e52fbb037b4431ec799f39299061563b249ba7a95320b1a53fc18d76e6cf0a22ac610297a87d2de18f58ee2c44308f64716da63f5c88f034ed8f7208fb7ac78e7abeea2b1ffa02e3d40235d81b10570a8165e6c115c87cbead4c5e156ad0256eb6f4c17a3c578e2a", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r0, &(0x7f0000000340), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 0s ago: executing program 3 (id=2330): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080)) kernel console output (not intermixed with test programs): yscall_64+0xfa/0x3b0 [ 248.538287][ T8670] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.538314][ T8670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.538335][ T8670] ? clear_bhb_loop+0x60/0xb0 [ 248.538360][ T8670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.538381][ T8670] RIP: 0033:0x7f3ab6b8ebe9 [ 248.538400][ T8670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.538418][ T8670] RSP: 002b:00007f3ab7973038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.538439][ T8670] RAX: ffffffffffffffda RBX: 00007f3ab6dc5fa0 RCX: 00007f3ab6b8ebe9 [ 248.538454][ T8670] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 248.538467][ T8670] RBP: 00007f3ab7973090 R08: 0000000000000000 R09: 0000000000000000 [ 248.538479][ T8670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.538491][ T8670] R13: 00007f3ab6dc6038 R14: 00007f3ab6dc5fa0 R15: 00007fff8701bc58 [ 248.538525][ T8670] [ 248.538717][ T8670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.803'. [ 248.891763][ T13] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 249.029968][ T8681] netlink: 'syz.1.806': attribute type 2 has an invalid length. [ 249.364367][ T8686] netlink: 32 bytes leftover after parsing attributes in process `syz.0.809'. [ 249.375864][ T8687] FAULT_INJECTION: forcing a failure. [ 249.375864][ T8687] name failslab, interval 1, probability 0, space 0, times 0 [ 249.394251][ T8687] CPU: 0 UID: 0 PID: 8687 Comm: syz.2.808 Not tainted syzkaller #0 PREEMPT(full) [ 249.394281][ T8687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 249.394295][ T8687] Call Trace: [ 249.394303][ T8687] [ 249.394312][ T8687] dump_stack_lvl+0x189/0x250 [ 249.394344][ T8687] ? __pfx____ratelimit+0x10/0x10 [ 249.394373][ T8687] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.394400][ T8687] ? __pfx__printk+0x10/0x10 [ 249.394439][ T8687] ? __pfx___might_resched+0x10/0x10 [ 249.394468][ T8687] should_fail_ex+0x414/0x560 [ 249.394504][ T8687] should_failslab+0xa8/0x100 [ 249.394539][ T8687] __kmalloc_noprof+0xcb/0x4f0 [ 249.394567][ T8687] ? ovs_nla_copy_actions+0x68/0x3d0 [ 249.394596][ T8687] ovs_nla_copy_actions+0x68/0x3d0 [ 249.394629][ T8687] get_flow_actions+0xe2/0x190 [ 249.394664][ T8687] ? __pfx_get_flow_actions+0x10/0x10 [ 249.394766][ T8687] ? perf_trace_lock+0xec/0x3b0 [ 249.394795][ T8687] ? __asan_memset+0x22/0x50 [ 249.394827][ T8687] ovs_nla_init_match_and_action+0x1da/0x2f0 [ 249.394869][ T8687] ? __pfx_ovs_nla_init_match_and_action+0x10/0x10 [ 249.394982][ T8687] ? stack_trace_save+0x9c/0xe0 [ 249.395010][ T8687] ? ovs_nla_get_ufid+0x129/0x200 [ 249.395033][ T8687] ovs_flow_cmd_set+0x234/0x810 [ 249.395073][ T8687] ? __pfx_ovs_flow_cmd_set+0x10/0x10 [ 249.395192][ T8687] ? __nla_parse+0x40/0x60 [ 249.395231][ T8687] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 249.395268][ T8687] genl_family_rcv_msg_doit+0x215/0x300 [ 249.395303][ T8687] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 249.395347][ T8687] ? bpf_lsm_capable+0x9/0x20 [ 249.395375][ T8687] ? security_capable+0x7e/0x2e0 [ 249.395420][ T8687] genl_rcv_msg+0x60e/0x790 [ 249.395454][ T8687] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.395477][ T8687] ? __pfx_ovs_flow_cmd_set+0x10/0x10 [ 249.395510][ T8687] ? __asan_memcpy+0x40/0x70 [ 249.395533][ T8687] ? __pfx_ref_tracker_free+0x10/0x10 [ 249.395574][ T8687] netlink_rcv_skb+0x205/0x470 [ 249.395601][ T8687] ? __lock_acquire+0xab9/0xd20 [ 249.395632][ T8687] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.395659][ T8687] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 249.395716][ T8687] ? down_read+0x1ad/0x2e0 [ 249.395740][ T8687] genl_rcv+0x28/0x40 [ 249.395761][ T8687] netlink_unicast+0x82c/0x9e0 [ 249.395801][ T8687] ? __pfx_netlink_unicast+0x10/0x10 [ 249.395832][ T8687] ? netlink_sendmsg+0x642/0xb30 [ 249.395861][ T8687] ? skb_put+0x11b/0x210 [ 249.395886][ T8687] netlink_sendmsg+0x805/0xb30 [ 249.395931][ T8687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.395968][ T8687] ? aa_sock_msg_perm+0xf1/0x1d0 [ 249.395991][ T8687] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 249.396014][ T8687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.396048][ T8687] __sock_sendmsg+0x21c/0x270 [ 249.396080][ T8687] ____sys_sendmsg+0x505/0x830 [ 249.396110][ T8687] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.396146][ T8687] ? import_iovec+0x74/0xa0 [ 249.396176][ T8687] ___sys_sendmsg+0x21f/0x2a0 [ 249.396212][ T8687] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.396265][ T8687] ? __fget_files+0x2a/0x420 [ 249.396304][ T8687] ? __fget_files+0x2a/0x420 [ 249.396322][ T8687] ? __fget_files+0x3a0/0x420 [ 249.396356][ T8687] __x64_sys_sendmsg+0x19b/0x260 [ 249.396383][ T8687] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 249.396420][ T8687] ? __pfx_ksys_write+0x10/0x10 [ 249.396445][ T8687] ? rcu_is_watching+0x15/0xb0 [ 249.396474][ T8687] ? do_syscall_64+0xbe/0x3b0 [ 249.396511][ T8687] do_syscall_64+0xfa/0x3b0 [ 249.396538][ T8687] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.396566][ T8687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.396587][ T8687] ? clear_bhb_loop+0x60/0xb0 [ 249.396614][ T8687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.396634][ T8687] RIP: 0033:0x7fb6da18ebe9 [ 249.396654][ T8687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.396672][ T8687] RSP: 002b:00007fb6daf20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.396693][ T8687] RAX: ffffffffffffffda RBX: 00007fb6da3c5fa0 RCX: 00007fb6da18ebe9 [ 249.396708][ T8687] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 249.396721][ T8687] RBP: 00007fb6daf20090 R08: 0000000000000000 R09: 0000000000000000 [ 249.396734][ T8687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.396746][ T8687] R13: 00007fb6da3c6038 R14: 00007fb6da3c5fa0 R15: 00007ffc0ad16318 [ 249.396786][ T8687] [ 249.800059][ T1153] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 249.902013][ T1153] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 249.980633][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.811'. [ 250.317581][ T8697] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 250.375633][ T8697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.813'. [ 250.504663][ T8703] netlink: 'syz.2.816': attribute type 20 has an invalid length. [ 250.667121][ T8706] lo speed is unknown, defaulting to 1000 [ 250.691790][ T8706] lo speed is unknown, defaulting to 1000 [ 250.799050][ T8706] lo speed is unknown, defaulting to 1000 [ 251.254836][ T36] wlan1: Trigger new scan to find an IBSS to join [ 251.287344][ T8706] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 251.475468][ T8706] lo speed is unknown, defaulting to 1000 [ 251.489355][ T8706] lo speed is unknown, defaulting to 1000 [ 251.507513][ T8706] lo speed is unknown, defaulting to 1000 [ 251.524429][ T8706] lo speed is unknown, defaulting to 1000 [ 251.543270][ T8706] lo speed is unknown, defaulting to 1000 [ 251.921657][ T8740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.824'. [ 251.955946][ T8742] netlink: 'syz.3.825': attribute type 10 has an invalid length. [ 252.261570][ T8742] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 252.312526][ T152] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 252.726210][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.829'. [ 253.301160][ T8766] netlink: 144 bytes leftover after parsing attributes in process `syz.3.832'. [ 254.082716][ T8776] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 254.186740][ T8776] syzkaller0: create flow: hash 4201860865 index 1 [ 254.276202][ T8786] netlink: 'syz.4.838': attribute type 20 has an invalid length. [ 254.285024][ T152] wlan1: Trigger new scan to find an IBSS to join [ 254.285863][ T5963] wlan1: Trigger new scan to find an IBSS to join [ 254.951369][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.840'. [ 255.012266][ T1153] syzkaller0: tun_net_xmit 76 [ 255.043151][ T1153] syzkaller0: tun_net_xmit 48 [ 255.049144][ T6009] syzkaller0: tun_net_xmit 76 [ 255.087755][ T8775] syzkaller0: delete flow: hash 4201860865 index 1 [ 255.192468][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.841'. [ 256.680267][ T8813] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.845'. [ 257.325178][ T59] wlan1: Trigger new scan to find an IBSS to join [ 258.247963][ T5963] wlan1: Creating new IBSS network, BSSID f2:ed:cf:63:e9:55 [ 258.318649][ T8808] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 258.328123][ T49] wlan1: Selected IBSS BSSID f2:ed:cf:63:e9:55 based on configured SSID [ 258.601134][ T8827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.848'. [ 258.999834][ T8844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.852'. [ 259.054321][ T8843] netlink: 'syz.4.851': attribute type 20 has an invalid length. [ 259.331135][ T1153] wlan1: Trigger new scan to find an IBSS to join [ 259.389027][ T8849] netlink: 149044 bytes leftover after parsing attributes in process `syz.2.853'. [ 259.547456][ T8856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.854'. [ 259.815731][ T8863] netlink: 'syz.4.856': attribute type 21 has an invalid length. [ 259.841300][ T8868] netlink: 'syz.2.859': attribute type 2 has an invalid length. [ 259.860362][ T8868] netlink: 'syz.2.859': attribute type 8 has an invalid length. [ 259.875816][ T8868] netlink: 132 bytes leftover after parsing attributes in process `syz.2.859'. [ 259.927974][ T8863] netlink: 'syz.4.856': attribute type 4 has an invalid length. [ 260.079500][ T8870] netlink: 14 bytes leftover after parsing attributes in process `syz.4.856'. [ 260.101008][ T8871] netlink: 'syz.1.857': attribute type 27 has an invalid length. [ 260.112951][ T8871] netlink: 'syz.1.857': attribute type 3 has an invalid length. [ 260.178334][ T8871] netlink: 132 bytes leftover after parsing attributes in process `syz.1.857'. [ 260.263710][ T8873] netlink: 'syz.1.857': attribute type 2 has an invalid length. [ 260.385971][ T8873] netlink: 51 bytes leftover after parsing attributes in process `syz.1.857'. [ 260.422446][ T49] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 261.263841][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.274996][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.522155][ T8887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.863'. [ 261.597143][ T8889] FAULT_INJECTION: forcing a failure. [ 261.597143][ T8889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.612256][ T8889] CPU: 0 UID: 0 PID: 8889 Comm: syz.1.864 Not tainted syzkaller #0 PREEMPT(full) [ 261.612285][ T8889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 261.612299][ T8889] Call Trace: [ 261.612307][ T8889] [ 261.612316][ T8889] dump_stack_lvl+0x189/0x250 [ 261.612347][ T8889] ? __pfx____ratelimit+0x10/0x10 [ 261.612376][ T8889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.612402][ T8889] ? __pfx__printk+0x10/0x10 [ 261.612434][ T8889] ? __pfx___mutex_lock+0x10/0x10 [ 261.612473][ T8889] should_fail_ex+0x414/0x560 [ 261.612507][ T8889] _copy_to_user+0x31/0xb0 [ 261.612533][ T8889] netns_bpf_prog_query+0x292/0x4f0 [ 261.612566][ T8889] ? __pfx_netns_bpf_prog_query+0x10/0x10 [ 261.612607][ T8889] __sys_bpf+0x7d6/0x870 [ 261.612637][ T8889] ? __pfx___sys_bpf+0x10/0x10 [ 261.612683][ T8889] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 261.612714][ T8889] ? __pfx_ksys_write+0x10/0x10 [ 261.612740][ T8889] ? rcu_is_watching+0x15/0xb0 [ 261.612770][ T8889] __x64_sys_bpf+0x7c/0x90 [ 261.612796][ T8889] do_syscall_64+0xfa/0x3b0 [ 261.612824][ T8889] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.612852][ T8889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.612872][ T8889] ? clear_bhb_loop+0x60/0xb0 [ 261.612898][ T8889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.612918][ T8889] RIP: 0033:0x7f3ab6b8ebe9 [ 261.612943][ T8889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.612961][ T8889] RSP: 002b:00007f3ab7973038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 261.612983][ T8889] RAX: ffffffffffffffda RBX: 00007f3ab6dc5fa0 RCX: 00007f3ab6b8ebe9 [ 261.612998][ T8889] RDX: 0000000000000040 RSI: 0000200000000640 RDI: 0000000000000010 [ 261.613011][ T8889] RBP: 00007f3ab7973090 R08: 0000000000000000 R09: 0000000000000000 [ 261.613023][ T8889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.613034][ T8889] R13: 00007f3ab6dc6038 R14: 00007f3ab6dc5fa0 R15: 00007fff8701bc58 [ 261.613070][ T8889] [ 262.491004][ T8906] netlink: 149044 bytes leftover after parsing attributes in process `syz.3.869'. [ 263.990407][ T8927] __nla_validate_parse: 2 callbacks suppressed [ 263.990429][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.875'. [ 264.219138][ T8938] netlink: 56 bytes leftover after parsing attributes in process `syz.0.879'. [ 264.594632][ T8932] : port 1(bond0) entered blocking state [ 264.626934][ T8932] : port 1(bond0) entered disabled state [ 264.668949][ T8932] bond0: entered allmulticast mode [ 264.682469][ T8944] netlink: 'syz.0.880': attribute type 20 has an invalid length. [ 264.689794][ T8932] bond_slave_0: entered allmulticast mode [ 264.736311][ T8932] bond_slave_1: entered allmulticast mode [ 264.751760][ T8932] bridge_slave_1: entered allmulticast mode [ 264.783933][ T8932] bond0: entered promiscuous mode [ 264.864889][ T8932] bond_slave_0: entered promiscuous mode [ 264.894232][ T8932] bond_slave_1: entered promiscuous mode [ 264.915326][ T8932] bridge_slave_1: entered promiscuous mode [ 265.955650][ T8971] netlink: 32 bytes leftover after parsing attributes in process `syz.2.884'. [ 265.970428][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.884'. [ 266.502592][ T8977] netlink: 'syz.1.887': attribute type 20 has an invalid length. [ 267.362244][ T8994] netlink: 'syz.4.892': attribute type 20 has an invalid length. [ 268.336878][ T9015] netlink: 36 bytes leftover after parsing attributes in process `syz.1.898'. [ 268.431754][ T9016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'. [ 268.978574][ T9016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'. [ 269.750829][ T9042] netlink: 'syz.4.904': attribute type 2 has an invalid length. [ 269.821782][ T9042] netlink: 164 bytes leftover after parsing attributes in process `syz.4.904'. [ 269.911758][ T9043] netlink: 'syz.4.904': attribute type 2 has an invalid length. [ 270.022090][ T9043] netlink: 164 bytes leftover after parsing attributes in process `syz.4.904'. [ 270.155699][ T9050] netlink: 'syz.0.906': attribute type 20 has an invalid length. [ 271.468992][ T9072] netlink: 'syz.2.914': attribute type 20 has an invalid length. [ 272.093810][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.917'. [ 272.495662][ T9089] netlink: 64 bytes leftover after parsing attributes in process `syz.3.921'. [ 272.689704][ T9092] FAULT_INJECTION: forcing a failure. [ 272.689704][ T9092] name failslab, interval 1, probability 0, space 0, times 0 [ 272.809856][ T9092] CPU: 0 UID: 0 PID: 9092 Comm: syz.1.920 Not tainted syzkaller #0 PREEMPT(full) [ 272.809886][ T9092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 272.809899][ T9092] Call Trace: [ 272.809912][ T9092] [ 272.809925][ T9092] dump_stack_lvl+0x189/0x250 [ 272.809965][ T9092] ? __pfx____ratelimit+0x10/0x10 [ 272.810005][ T9092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.810040][ T9092] ? __pfx__printk+0x10/0x10 [ 272.810114][ T9092] ? __pfx___might_resched+0x10/0x10 [ 272.810137][ T9092] ? fs_reclaim_acquire+0x7d/0x100 [ 272.810190][ T9092] should_fail_ex+0x414/0x560 [ 272.810259][ T9092] should_failslab+0xa8/0x100 [ 272.810308][ T9092] __kmalloc_noprof+0xcb/0x4f0 [ 272.810342][ T9092] ? kernfs_fop_write_iter+0x158/0x4f0 [ 272.810407][ T9092] kernfs_fop_write_iter+0x158/0x4f0 [ 272.810486][ T9092] vfs_write+0x5c6/0xb30 [ 272.810555][ T9092] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 272.810609][ T9092] ? __pfx_vfs_write+0x10/0x10 [ 272.810711][ T9092] ? __fget_files+0x2a/0x420 [ 272.810791][ T9092] ksys_write+0x145/0x250 [ 272.810846][ T9092] ? __pfx_ksys_write+0x10/0x10 [ 272.810871][ T9092] ? rcu_is_watching+0x15/0xb0 [ 272.810931][ T9092] ? do_syscall_64+0xbe/0x3b0 [ 272.810992][ T9092] do_syscall_64+0xfa/0x3b0 [ 272.811022][ T9092] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.811058][ T9092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.811082][ T9092] ? clear_bhb_loop+0x60/0xb0 [ 272.811130][ T9092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.811152][ T9092] RIP: 0033:0x7f3ab6b8ebe9 [ 272.811179][ T9092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.811197][ T9092] RSP: 002b:00007f3ab7952038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 272.811219][ T9092] RAX: ffffffffffffffda RBX: 00007f3ab6dc6090 RCX: 00007f3ab6b8ebe9 [ 272.811234][ T9092] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000006 [ 272.811248][ T9092] RBP: 00007f3ab7952090 R08: 0000000000000000 R09: 0000000000000000 [ 272.811260][ T9092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.811272][ T9092] R13: 00007f3ab6dc6128 R14: 00007f3ab6dc6090 R15: 00007fff8701bc58 [ 272.811382][ T9092] [ 273.398137][ T9100] netlink: 'syz.0.922': attribute type 20 has an invalid length. [ 274.017945][ T9109] FAULT_INJECTION: forcing a failure. [ 274.017945][ T9109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.064812][ T9109] CPU: 1 UID: 0 PID: 9109 Comm: syz.1.925 Not tainted syzkaller #0 PREEMPT(full) [ 274.064842][ T9109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 274.064856][ T9109] Call Trace: [ 274.064864][ T9109] [ 274.064874][ T9109] dump_stack_lvl+0x189/0x250 [ 274.064905][ T9109] ? __pfx____ratelimit+0x10/0x10 [ 274.064935][ T9109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.064960][ T9109] ? __pfx__printk+0x10/0x10 [ 274.064989][ T9109] ? __might_fault+0xb0/0x130 [ 274.065031][ T9109] should_fail_ex+0x414/0x560 [ 274.065065][ T9109] _copy_from_user+0x2d/0xb0 [ 274.065095][ T9109] ____sys_sendmsg+0x2fe/0x830 [ 274.065124][ T9109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.065156][ T9109] ? import_iovec+0x74/0xa0 [ 274.065184][ T9109] ___sys_sendmsg+0x21f/0x2a0 [ 274.065208][ T9109] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.065271][ T9109] ? __fget_files+0x2a/0x420 [ 274.065290][ T9109] ? __fget_files+0x3a0/0x420 [ 274.065321][ T9109] __x64_sys_sendmsg+0x19b/0x260 [ 274.065345][ T9109] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 274.065365][ T9109] ? perf_trace_preemptirq_template+0xa3/0x340 [ 274.065405][ T9109] ? __pfx_ksys_write+0x10/0x10 [ 274.065431][ T9109] ? rcu_is_watching+0x15/0xb0 [ 274.065458][ T9109] ? do_syscall_64+0xbe/0x3b0 [ 274.065493][ T9109] do_syscall_64+0xfa/0x3b0 [ 274.065521][ T9109] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.065550][ T9109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.065570][ T9109] ? clear_bhb_loop+0x60/0xb0 [ 274.065596][ T9109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.065616][ T9109] RIP: 0033:0x7f3ab6b8ebe9 [ 274.065635][ T9109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.065653][ T9109] RSP: 002b:00007f3ab7952038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.065674][ T9109] RAX: ffffffffffffffda RBX: 00007f3ab6dc6090 RCX: 00007f3ab6b8ebe9 [ 274.065690][ T9109] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 274.065702][ T9109] RBP: 00007f3ab7952090 R08: 0000000000000000 R09: 0000000000000000 [ 274.065724][ T9109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.065737][ T9109] R13: 00007f3ab6dc6128 R14: 00007f3ab6dc6090 R15: 00007fff8701bc58 [ 274.065771][ T9109] [ 275.608521][ T9128] netlink: 32 bytes leftover after parsing attributes in process `syz.1.930'. [ 276.905851][ T9148] netlink: 'syz.4.936': attribute type 20 has an invalid length. [ 277.331480][ T1153] wlan1: Trigger new scan to find an IBSS to join [ 278.986104][ T5963] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 279.280725][ T9169] netlink: 'syz.3.944': attribute type 20 has an invalid length. [ 280.802869][ T9192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.947'. [ 281.163411][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 281.368061][ T49] wlan1: Trigger new scan to find an IBSS to join [ 282.478129][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 282.813261][ T9233] netlink: 176 bytes leftover after parsing attributes in process `syz.1.956'. [ 282.826268][ T12] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 282.869329][ T9233] FAULT_INJECTION: forcing a failure. [ 282.869329][ T9233] name failslab, interval 1, probability 0, space 0, times 0 [ 282.903198][ T9233] CPU: 1 UID: 0 PID: 9233 Comm: syz.1.956 Not tainted syzkaller #0 PREEMPT(full) [ 282.903229][ T9233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.903242][ T9233] Call Trace: [ 282.903252][ T9233] [ 282.903261][ T9233] dump_stack_lvl+0x189/0x250 [ 282.903291][ T9233] ? __pfx____ratelimit+0x10/0x10 [ 282.903318][ T9233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.903342][ T9233] ? __pfx__printk+0x10/0x10 [ 282.903376][ T9233] ? __pfx___might_resched+0x10/0x10 [ 282.903402][ T9233] should_fail_ex+0x414/0x560 [ 282.903434][ T9233] should_failslab+0xa8/0x100 [ 282.903464][ T9233] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 282.903492][ T9233] ? __alloc_skb+0x112/0x2d0 [ 282.903526][ T9233] __alloc_skb+0x112/0x2d0 [ 282.903559][ T9233] netlink_ack+0x146/0xa50 [ 282.903584][ T9233] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 282.903609][ T9233] ? ref_tracker_free+0x63a/0x7d0 [ 282.903636][ T9233] ? __asan_memcpy+0x40/0x70 [ 282.903657][ T9233] ? __pfx_ref_tracker_free+0x10/0x10 [ 282.903680][ T9233] ? __skb_clone+0x63/0x7a0 [ 282.903711][ T9233] netlink_rcv_skb+0x28c/0x470 [ 282.903740][ T9233] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 282.903770][ T9233] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 282.903836][ T9233] ? netlink_deliver_tap+0x2e/0x1b0 [ 282.903875][ T9233] netlink_unicast+0x82c/0x9e0 [ 282.903910][ T9233] ? __pfx_netlink_unicast+0x10/0x10 [ 282.903939][ T9233] ? netlink_sendmsg+0x642/0xb30 [ 282.903965][ T9233] ? skb_put+0x11b/0x210 [ 282.903988][ T9233] netlink_sendmsg+0x805/0xb30 [ 282.904033][ T9233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.904067][ T9233] ? __lock_acquire+0xab9/0xd20 [ 282.904095][ T9233] ? aa_sock_msg_perm+0xf1/0x1d0 [ 282.904118][ T9233] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 282.904142][ T9233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.904180][ T9233] __sock_sendmsg+0x21c/0x270 [ 282.904213][ T9233] sock_write_iter+0x258/0x330 [ 282.904242][ T9233] ? __pfx_sock_write_iter+0x10/0x10 [ 282.904280][ T9233] ? bpf_lsm_file_permission+0x9/0x20 [ 282.904305][ T9233] ? security_file_permission+0x75/0x290 [ 282.904345][ T9233] vfs_write+0x5c6/0xb30 [ 282.904380][ T9233] ? __pfx_sock_write_iter+0x10/0x10 [ 282.904404][ T9233] ? __pfx_vfs_write+0x10/0x10 [ 282.904438][ T9233] ? __fget_files+0x2a/0x420 [ 282.904464][ T9233] ksys_write+0x145/0x250 [ 282.904490][ T9233] ? __pfx_ksys_write+0x10/0x10 [ 282.904510][ T9233] ? rcu_is_watching+0x15/0xb0 [ 282.904537][ T9233] ? do_syscall_64+0xbe/0x3b0 [ 282.904572][ T9233] do_syscall_64+0xfa/0x3b0 [ 282.904595][ T9233] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.904618][ T9233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.904635][ T9233] ? clear_bhb_loop+0x60/0xb0 [ 282.904656][ T9233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.904672][ T9233] RIP: 0033:0x7f3ab6b8ebe9 [ 282.904688][ T9233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.904704][ T9233] RSP: 002b:00007f3ab7973038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 282.904724][ T9233] RAX: ffffffffffffffda RBX: 00007f3ab6dc5fa0 RCX: 00007f3ab6b8ebe9 [ 282.904737][ T9233] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000003 [ 282.904749][ T9233] RBP: 00007f3ab7973090 R08: 0000000000000000 R09: 0000000000000000 [ 282.904761][ T9233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.904773][ T9233] R13: 00007f3ab6dc6038 R14: 00007f3ab6dc5fa0 R15: 00007fff8701bc58 [ 282.904816][ T9233] [ 283.894517][ T9242] netlink: 208192 bytes leftover after parsing attributes in process `syz.2.957'. [ 283.905934][ T9242] netlink: 'syz.2.957': attribute type 1 has an invalid length. [ 283.913627][ T9242] netlink: 'syz.2.957': attribute type 2 has an invalid length. [ 284.382521][ T9249] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.961'. [ 285.863851][ T9267] netlink: 'syz.1.965': attribute type 1 has an invalid length. [ 285.938411][ T9267] netlink: 'syz.1.965': attribute type 4 has an invalid length. [ 286.017124][ T9268] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.965'. [ 286.800396][ T9267] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.965'. [ 287.611480][ T9282] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 287.619542][ T9282] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 288.106717][ T9291] netlink: 'syz.3.973': attribute type 20 has an invalid length. [ 288.801316][ T9311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.978'. [ 289.502773][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.983'. [ 289.523335][ T9323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.983'. [ 289.587594][ T9327] netlink: 100 bytes leftover after parsing attributes in process `syz.3.983'. [ 289.612802][ T9323] netlink: 33 bytes leftover after parsing attributes in process `syz.3.983'. [ 289.641961][ T9323] bridge_slave_0: entered allmulticast mode [ 289.784336][ T9323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.983'. [ 289.858975][ T9323] netlink: 33 bytes leftover after parsing attributes in process `syz.3.983'. [ 290.012670][ T9332] netlink: 'syz.1.985': attribute type 20 has an invalid length. [ 290.026892][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.986'. [ 290.452555][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 290.468684][ T9325] infiniband syz0: set active [ 290.481684][ T9325] infiniband syz0: added veth0_vlan [ 290.502889][ T9325] syz0: rxe_create_cq: returned err = -12 [ 290.522006][ T9325] infiniband syz0: Couldn't create ib_mad CQ [ 290.533337][ T9325] infiniband syz0: Couldn't open port 1 [ 290.599234][ T9340] netlink: 'syz.3.988': attribute type 20 has an invalid length. [ 290.688559][ T9325] RDS/IB: syz0: added [ 290.733518][ T9325] smc: adding ib device syz0 with port count 1 [ 290.775108][ T9325] smc: ib device syz0 port 1 has pnetid [ 292.660079][ T9364] wg2: entered promiscuous mode [ 292.686686][ T9364] wg2: entered allmulticast mode [ 293.180243][ T9374] lo speed is unknown, defaulting to 1000 [ 293.239444][ T9374] lo speed is unknown, defaulting to 1000 [ 294.847099][ T9397] netlink: 'syz.3.1006': attribute type 10 has an invalid length. [ 295.799365][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1011'. [ 296.107630][ T9414] lo speed is unknown, defaulting to 1000 [ 296.133056][ T9414] lo speed is unknown, defaulting to 1000 [ 297.027726][ T9421] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.1012'. [ 297.653602][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1014'. [ 297.794941][ T9430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1015'. [ 299.226041][ T9452] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1021'. [ 299.286466][ T9455] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1021'. [ 300.234205][ T9460] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1024'. [ 300.738096][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1028'. [ 301.050106][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 301.769482][ T9496] FAULT_INJECTION: forcing a failure. [ 301.769482][ T9496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.892125][ T9496] CPU: 1 UID: 0 PID: 9496 Comm: syz.2.1036 Not tainted syzkaller #0 PREEMPT(full) [ 301.892155][ T9496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 301.892169][ T9496] Call Trace: [ 301.892182][ T9496] [ 301.892197][ T9496] dump_stack_lvl+0x189/0x250 [ 301.892237][ T9496] ? __pfx____ratelimit+0x10/0x10 [ 301.892279][ T9496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.892316][ T9496] ? __pfx__printk+0x10/0x10 [ 301.892361][ T9496] ? __might_fault+0xb0/0x130 [ 301.892465][ T9496] should_fail_ex+0x414/0x560 [ 301.892533][ T9496] _copy_from_iter+0x1db/0x16f0 [ 301.892635][ T9496] ? __pfx__copy_from_iter+0x10/0x10 [ 301.892695][ T9496] ? rcu_is_watching+0x15/0xb0 [ 301.892729][ T9496] ? trace_kmalloc+0x1f/0xd0 [ 301.892764][ T9496] ? kernfs_fop_write_iter+0x158/0x4f0 [ 301.892829][ T9496] kernfs_fop_write_iter+0x19f/0x4f0 [ 301.892910][ T9496] vfs_write+0x5c6/0xb30 [ 301.893014][ T9496] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 301.893061][ T9496] ? __pfx_vfs_write+0x10/0x10 [ 301.893164][ T9496] ? __fget_files+0x2a/0x420 [ 301.893244][ T9496] ksys_write+0x145/0x250 [ 301.893299][ T9496] ? __pfx_ksys_write+0x10/0x10 [ 301.893370][ T9496] ? do_syscall_64+0xbe/0x3b0 [ 301.893431][ T9496] do_syscall_64+0xfa/0x3b0 [ 301.893476][ T9496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.893496][ T9496] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 301.893518][ T9496] ? clear_bhb_loop+0x60/0xb0 [ 301.893569][ T9496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.893592][ T9496] RIP: 0033:0x7fb6da18ebe9 [ 301.893621][ T9496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.893640][ T9496] RSP: 002b:00007fb6daf20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 301.893663][ T9496] RAX: ffffffffffffffda RBX: 00007fb6da3c5fa0 RCX: 00007fb6da18ebe9 [ 301.893678][ T9496] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000006 [ 301.893692][ T9496] RBP: 00007fb6daf20090 R08: 0000000000000000 R09: 0000000000000000 [ 301.893705][ T9496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.893718][ T9496] R13: 00007fb6da3c6038 R14: 00007fb6da3c5fa0 R15: 00007ffc0ad16318 [ 301.893830][ T9496] [ 302.256545][ T9494] lo speed is unknown, defaulting to 1000 [ 302.271126][ T9494] lo speed is unknown, defaulting to 1000 [ 302.429414][ T9499] netlink: 'syz.0.1037': attribute type 20 has an invalid length. [ 302.532174][ T9501] netlink: 'syz.4.1038': attribute type 2 has an invalid length. [ 303.292198][ T9516] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1043'. [ 304.201669][ T9534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1049'. [ 306.151826][ T9564] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1056'. [ 306.316411][ T9570] FAULT_INJECTION: forcing a failure. [ 306.316411][ T9570] name failslab, interval 1, probability 0, space 0, times 0 [ 306.324213][ T9574] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1056'. [ 306.398386][ T9570] CPU: 1 UID: 0 PID: 9570 Comm: syz.0.1057 Not tainted syzkaller #0 PREEMPT(full) [ 306.398416][ T9570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.398429][ T9570] Call Trace: [ 306.398438][ T9570] [ 306.398448][ T9570] dump_stack_lvl+0x189/0x250 [ 306.398480][ T9570] ? __pfx____ratelimit+0x10/0x10 [ 306.398515][ T9570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.398541][ T9570] ? __pfx__printk+0x10/0x10 [ 306.398579][ T9570] ? __pfx___might_resched+0x10/0x10 [ 306.398608][ T9570] should_fail_ex+0x414/0x560 [ 306.398643][ T9570] should_failslab+0xa8/0x100 [ 306.398677][ T9570] __kmalloc_cache_noprof+0x70/0x3d0 [ 306.398706][ T9570] ? dev_ethtool+0x126/0x19b0 [ 306.398735][ T9570] dev_ethtool+0x126/0x19b0 [ 306.398766][ T9570] ? __pfx_perf_trace_lock+0x10/0x10 [ 306.398792][ T9570] ? __pfx_dev_ethtool+0x10/0x10 [ 306.398816][ T9570] ? dev_load+0x21/0x1f0 [ 306.398854][ T9570] ? dev_load+0x21/0x1f0 [ 306.398886][ T9570] ? dev_load+0x21/0x1f0 [ 306.398917][ T9570] dev_ioctl+0x392/0x1150 [ 306.398953][ T9570] sock_do_ioctl+0x22c/0x300 [ 306.398985][ T9570] ? __pfx_sock_do_ioctl+0x10/0x10 [ 306.399036][ T9570] sock_ioctl+0x576/0x790 [ 306.399065][ T9570] ? __pfx_sock_ioctl+0x10/0x10 [ 306.399091][ T9570] ? __fget_files+0x2a/0x420 [ 306.399109][ T9570] ? __fget_files+0x3a0/0x420 [ 306.399126][ T9570] ? __fget_files+0x2a/0x420 [ 306.399151][ T9570] ? bpf_lsm_file_ioctl+0x9/0x20 [ 306.399179][ T9570] ? __pfx_sock_ioctl+0x10/0x10 [ 306.399204][ T9570] __se_sys_ioctl+0xfc/0x170 [ 306.399234][ T9570] do_syscall_64+0xfa/0x3b0 [ 306.399264][ T9570] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.399291][ T9570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.399312][ T9570] ? clear_bhb_loop+0x60/0xb0 [ 306.399338][ T9570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.399359][ T9570] RIP: 0033:0x7f755bf8ebe9 [ 306.399378][ T9570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.399395][ T9570] RSP: 002b:00007f755cdcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.399420][ T9570] RAX: ffffffffffffffda RBX: 00007f755c1c5fa0 RCX: 00007f755bf8ebe9 [ 306.399435][ T9570] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 306.399448][ T9570] RBP: 00007f755cdcd090 R08: 0000000000000000 R09: 0000000000000000 [ 306.399460][ T9570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.399471][ T9570] R13: 00007f755c1c6038 R14: 00007f755c1c5fa0 R15: 00007fffe71eb268 [ 306.399515][ T9570] [ 307.375463][ T9589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1063'. [ 307.505295][ T9595] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 307.529009][ T9595] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 307.617825][ T9595] netlink: 'syz.4.1065': attribute type 11 has an invalid length. [ 307.646682][ T9595] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1065'. [ 307.730962][ T9602] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1067'. [ 307.764130][ T9595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.806966][ T9595] netlink: 'syz.4.1065': attribute type 1 has an invalid length. [ 307.825141][ T9595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.929809][ T9608] netlink: 'syz.3.1069': attribute type 20 has an invalid length. [ 308.216195][ T9614] netlink: 'syz.0.1071': attribute type 1 has an invalid length. [ 309.025935][ T9627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1075'. [ 309.046089][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'. [ 309.141909][ T9623] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1074'. [ 309.419557][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1077'. [ 309.487885][ T9637] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1078'. [ 310.113334][ T152] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 310.652456][ T9655] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 310.997176][ T9661] FAULT_INJECTION: forcing a failure. [ 310.997176][ T9661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.040870][ T9661] CPU: 0 UID: 0 PID: 9661 Comm: syz.1.1085 Not tainted syzkaller #0 PREEMPT(full) [ 311.040898][ T9661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.040911][ T9661] Call Trace: [ 311.040920][ T9661] [ 311.040929][ T9661] dump_stack_lvl+0x189/0x250 [ 311.040959][ T9661] ? __pfx____ratelimit+0x10/0x10 [ 311.040989][ T9661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.041014][ T9661] ? __pfx__printk+0x10/0x10 [ 311.041047][ T9661] ? __might_fault+0xb0/0x130 [ 311.041086][ T9661] should_fail_ex+0x414/0x560 [ 311.041120][ T9661] _copy_from_user+0x2d/0xb0 [ 311.041144][ T9661] generic_map_update_batch+0x51b/0x7f0 [ 311.041182][ T9661] ? __pfx_generic_map_update_batch+0x10/0x10 [ 311.041205][ T9661] ? __fget_files+0x2a/0x420 [ 311.041231][ T9661] ? __pfx_generic_map_update_batch+0x10/0x10 [ 311.041253][ T9661] bpf_map_do_batch+0x369/0x5f0 [ 311.041290][ T9661] __sys_bpf+0x6af/0x870 [ 311.041319][ T9661] ? __pfx___sys_bpf+0x10/0x10 [ 311.041381][ T9661] __x64_sys_bpf+0x7c/0x90 [ 311.041406][ T9661] do_syscall_64+0xfa/0x3b0 [ 311.041437][ T9661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.041457][ T9661] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 311.041478][ T9661] ? clear_bhb_loop+0x60/0xb0 [ 311.041503][ T9661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.041523][ T9661] RIP: 0033:0x7f3ab6b8ebe9 [ 311.041542][ T9661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.041559][ T9661] RSP: 002b:00007f3ab7973038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 311.041580][ T9661] RAX: ffffffffffffffda RBX: 00007f3ab6dc5fa0 RCX: 00007f3ab6b8ebe9 [ 311.041595][ T9661] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 311.041607][ T9661] RBP: 00007f3ab7973090 R08: 0000000000000000 R09: 0000000000000000 [ 311.041620][ T9661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 311.041632][ T9661] R13: 00007f3ab6dc6038 R14: 00007f3ab6dc5fa0 R15: 00007fff8701bc58 [ 311.041665][ T9661] [ 312.569855][ T1153] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 312.885947][ T1153] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 313.691939][ T9703] __nla_validate_parse: 3 callbacks suppressed [ 313.691991][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1099'. [ 313.963915][ T9707] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1095'. [ 314.240605][ T9714] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1102'. [ 314.281938][ T152] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 314.928201][ T9730] netlink: 'syz.0.1103': attribute type 27 has an invalid length. [ 314.972018][ T9731] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1106'. [ 315.002548][ T9722] netlink: 'syz.0.1103': attribute type 2 has an invalid length. [ 315.067403][ T9722] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1103'. [ 315.082351][ T9730] netlink: 'syz.0.1103': attribute type 3 has an invalid length. [ 315.104464][ T9730] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1103'. [ 315.126432][ T9729] netlink: 'syz.3.1105': attribute type 10 has an invalid length. [ 315.175174][ T9732] netlink: 'syz.3.1105': attribute type 10 has an invalid length. [ 315.631624][ T9737] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1108'. [ 315.672775][ T9737] netlink: zone id is out of range [ 315.682760][ T9737] netlink: get zone limit has 8 unknown bytes [ 315.695893][ T9738] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1107'. [ 315.850966][ T9741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.876025][ T9741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.205327][ T9741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.245820][ T9741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.203890][ T9767] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1117'. [ 317.303087][ T9756] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1114'. [ 318.125917][ T9784] Q±6ã×\b‹¡Y­4: renamed from lo (while UP) [ 318.551953][ T9801] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 318.891194][ T9803] __nla_validate_parse: 2 callbacks suppressed [ 318.891259][ T9803] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1128'. [ 318.966604][ T9807] netlink: 'syz.4.1129': attribute type 6 has an invalid length. [ 319.491345][ T9825] netlink: 149044 bytes leftover after parsing attributes in process `syz.1.1135'. [ 320.290063][ T152] wlan1: Trigger new scan to find an IBSS to join [ 320.363920][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1140'. [ 320.956558][ T9849] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1142'. [ 320.982644][ T9841] lo speed is unknown, defaulting to 1000 [ 321.031948][ T9841] lo speed is unknown, defaulting to 1000 [ 321.691844][ T5961] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 321.984284][ T9869] FAULT_INJECTION: forcing a failure. [ 321.984284][ T9869] name failslab, interval 1, probability 0, space 0, times 0 [ 322.076465][ T9869] CPU: 0 UID: 0 PID: 9869 Comm: syz.3.1148 Not tainted syzkaller #0 PREEMPT(full) [ 322.076495][ T9869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 322.076507][ T9869] Call Trace: [ 322.076516][ T9869] [ 322.076524][ T9869] dump_stack_lvl+0x189/0x250 [ 322.076554][ T9869] ? __pfx____ratelimit+0x10/0x10 [ 322.076583][ T9869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.076608][ T9869] ? __pfx__printk+0x10/0x10 [ 322.076643][ T9869] ? __pfx___might_resched+0x10/0x10 [ 322.076663][ T9869] ? fs_reclaim_acquire+0x7d/0x100 [ 322.076688][ T9869] should_fail_ex+0x414/0x560 [ 322.076729][ T9869] should_failslab+0xa8/0x100 [ 322.076761][ T9869] __kmalloc_noprof+0xcb/0x4f0 [ 322.076788][ T9869] ? kfree+0x4d/0x440 [ 322.076809][ T9869] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 322.076834][ T9869] tomoyo_realpath_from_path+0xe3/0x5d0 [ 322.076857][ T9869] ? tomoyo_domain+0xd9/0x130 [ 322.076884][ T9869] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 322.076912][ T9869] tomoyo_path_number_perm+0x1e8/0x5a0 [ 322.076944][ T9869] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 322.076992][ T9869] ? __lock_acquire+0xab9/0xd20 [ 322.077047][ T9869] ? __fget_files+0x2a/0x420 [ 322.077069][ T9869] ? __fget_files+0x2a/0x420 [ 322.077085][ T9869] ? __fget_files+0x3a0/0x420 [ 322.077102][ T9869] ? __fget_files+0x2a/0x420 [ 322.077124][ T9869] security_file_ioctl+0xcb/0x2d0 [ 322.077153][ T9869] __se_sys_ioctl+0x47/0x170 [ 322.077189][ T9869] do_syscall_64+0xfa/0x3b0 [ 322.077219][ T9869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.077239][ T9869] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 322.077258][ T9869] ? clear_bhb_loop+0x60/0xb0 [ 322.077284][ T9869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.077303][ T9869] RIP: 0033:0x7fd302f8ebe9 [ 322.077322][ T9869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.077339][ T9869] RSP: 002b:00007fd303d75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 322.077361][ T9869] RAX: ffffffffffffffda RBX: 00007fd3031c5fa0 RCX: 00007fd302f8ebe9 [ 322.077375][ T9869] RDX: 0000200000000040 RSI: 00000000000089e0 RDI: 0000000000000004 [ 322.077388][ T9869] RBP: 00007fd303d75090 R08: 0000000000000000 R09: 0000000000000000 [ 322.077400][ T9869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.077411][ T9869] R13: 00007fd3031c6038 R14: 00007fd3031c5fa0 R15: 00007ffd11887e28 [ 322.077445][ T9869] [ 322.084392][ T9869] ERROR: Out of memory at tomoyo_realpath_from_path. [ 322.479193][ T9879] netlink: 948 bytes leftover after parsing attributes in process `syz.4.1151'. [ 322.743101][ T9889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1152'. [ 323.060212][ T9894] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1154'. [ 323.102887][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.109569][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.163946][ T9897] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1155'. [ 324.322215][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1161'. [ 324.393625][ T9920] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1161'. [ 324.430125][ T9922] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1161'. [ 324.523620][ T9920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1161'. [ 324.589776][ T9920] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1161'. [ 324.608733][ T9930] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1164'. [ 324.704945][ T9932] FAULT_INJECTION: forcing a failure. [ 324.704945][ T9932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.718730][ T9932] CPU: 1 UID: 0 PID: 9932 Comm: syz.2.1165 Not tainted syzkaller #0 PREEMPT(full) [ 324.718759][ T9932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 324.718771][ T9932] Call Trace: [ 324.718779][ T9932] [ 324.718788][ T9932] dump_stack_lvl+0x189/0x250 [ 324.718819][ T9932] ? __pfx____ratelimit+0x10/0x10 [ 324.718847][ T9932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.718873][ T9932] ? __pfx__printk+0x10/0x10 [ 324.718901][ T9932] ? __might_fault+0xb0/0x130 [ 324.718943][ T9932] should_fail_ex+0x414/0x560 [ 324.718976][ T9932] _copy_from_user+0x2d/0xb0 [ 324.719000][ T9932] ethtool_get_stats+0x184/0x370 [ 324.719028][ T9932] ? __pfx_ethtool_get_stats+0x10/0x10 [ 324.719065][ T9932] dev_ethtool+0xb4a/0x19b0 [ 324.719100][ T9932] ? __pfx_dev_ethtool+0x10/0x10 [ 324.719139][ T9932] ? dev_load+0x21/0x1f0 [ 324.719171][ T9932] dev_ioctl+0x392/0x1150 [ 324.719204][ T9932] sock_do_ioctl+0x22c/0x300 [ 324.719234][ T9932] ? __pfx_sock_do_ioctl+0x10/0x10 [ 324.719257][ T9932] ? __lock_acquire+0xab9/0xd20 [ 324.719307][ T9932] sock_ioctl+0x576/0x790 [ 324.719335][ T9932] ? __pfx_sock_ioctl+0x10/0x10 [ 324.719360][ T9932] ? __fget_files+0x2a/0x420 [ 324.719378][ T9932] ? __fget_files+0x3a0/0x420 [ 324.719395][ T9932] ? __fget_files+0x2a/0x420 [ 324.719417][ T9932] ? bpf_lsm_file_ioctl+0x9/0x20 [ 324.719450][ T9932] ? __pfx_sock_ioctl+0x10/0x10 [ 324.719474][ T9932] __se_sys_ioctl+0xfc/0x170 [ 324.719503][ T9932] do_syscall_64+0xfa/0x3b0 [ 324.719531][ T9932] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.719559][ T9932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.719581][ T9932] ? clear_bhb_loop+0x60/0xb0 [ 324.719607][ T9932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.719627][ T9932] RIP: 0033:0x7fb6da18ebe9 [ 324.719646][ T9932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.719664][ T9932] RSP: 002b:00007fb6daf20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 324.719686][ T9932] RAX: ffffffffffffffda RBX: 00007fb6da3c5fa0 RCX: 00007fb6da18ebe9 [ 324.719700][ T9932] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 324.719714][ T9932] RBP: 00007fb6daf20090 R08: 0000000000000000 R09: 0000000000000000 [ 324.719727][ T9932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.719738][ T9932] R13: 00007fb6da3c6038 R14: 00007fb6da3c5fa0 R15: 00007ffc0ad16318 [ 324.719774][ T9932] [ 325.097610][ T9935] netlink: 'syz.1.1166': attribute type 1 has an invalid length. [ 325.111511][ T9935] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1166'. [ 325.193613][ T9940] netlink: 'syz.2.1168': attribute type 1 has an invalid length. [ 325.257830][ T9938] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1167'. [ 325.299899][ T9942] netlink: 149044 bytes leftover after parsing attributes in process `syz.1.1169'. [ 325.355686][ T36] wlan1: Trigger new scan to find an IBSS to join [ 325.473106][ T9948] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1171'. [ 325.882358][ T9962] netlink: 'syz.4.1176': attribute type 11 has an invalid length. [ 326.018033][ T9964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.345153][ T152] wlan1: Creating new IBSS network, BSSID 00:00:00:00:a8:6c [ 326.903566][ T9974] syz.0.1179 uses obsolete (PF_INET,SOCK_PACKET) [ 327.044455][ T5961] wlan1: Created IBSS using preconfigured BSSID 00:00:00:8d:00:00 [ 327.058413][ T5961] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 328.757264][ T9991] lo speed is unknown, defaulting to 1000 [ 328.805650][ T9991] lo speed is unknown, defaulting to 1000 [ 330.414055][T10038] __nla_validate_parse: 6 callbacks suppressed [ 330.414080][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 330.859673][T10047] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1200'. [ 331.153005][T10055] FAULT_INJECTION: forcing a failure. [ 331.153005][T10055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.202263][T10055] CPU: 1 UID: 0 PID: 10055 Comm: syz.4.1204 Not tainted syzkaller #0 PREEMPT(full) [ 331.202293][T10055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 331.202306][T10055] Call Trace: [ 331.202315][T10055] [ 331.202324][T10055] dump_stack_lvl+0x189/0x250 [ 331.202356][T10055] ? __pfx____ratelimit+0x10/0x10 [ 331.202385][T10055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.202408][T10055] ? __pfx__printk+0x10/0x10 [ 331.202439][T10055] ? __might_fault+0xb0/0x130 [ 331.202476][T10055] should_fail_ex+0x414/0x560 [ 331.202513][T10055] _copy_to_user+0x31/0xb0 [ 331.202540][T10055] simple_read_from_buffer+0xe1/0x170 [ 331.202578][T10055] proc_fail_nth_read+0x1b3/0x220 [ 331.202606][T10055] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 331.202635][T10055] ? rw_verify_area+0x2a6/0x4d0 [ 331.202662][T10055] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 331.202688][T10055] vfs_read+0x200/0xa30 [ 331.202713][T10055] ? fdget_pos+0x247/0x320 [ 331.202739][T10055] ? __pfx___mutex_lock+0x10/0x10 [ 331.202771][T10055] ? __pfx_vfs_read+0x10/0x10 [ 331.202800][T10055] ? __fget_files+0x2a/0x420 [ 331.202822][T10055] ? __fget_files+0x3a0/0x420 [ 331.202839][T10055] ? __fget_files+0x2a/0x420 [ 331.202871][T10055] ksys_read+0x145/0x250 [ 331.202903][T10055] ? __pfx_ksys_read+0x10/0x10 [ 331.202928][T10055] ? rcu_is_watching+0x15/0xb0 [ 331.202958][T10055] ? do_syscall_64+0xbe/0x3b0 [ 331.202995][T10055] do_syscall_64+0xfa/0x3b0 [ 331.203022][T10055] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.203050][T10055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.203071][T10055] ? clear_bhb_loop+0x60/0xb0 [ 331.203099][T10055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.203146][T10055] RIP: 0033:0x7f2658f8d5fc [ 331.203166][T10055] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 331.203183][T10055] RSP: 002b:00007f2659dcd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 331.203205][T10055] RAX: ffffffffffffffda RBX: 00007f26591c5fa0 RCX: 00007f2658f8d5fc [ 331.203220][T10055] RDX: 000000000000000f RSI: 00007f2659dcd0a0 RDI: 0000000000000004 [ 331.203232][T10055] RBP: 00007f2659dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 331.203244][T10055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.203256][T10055] R13: 00007f26591c6038 R14: 00007f26591c5fa0 R15: 00007ffe608157c8 [ 331.203295][T10055] [ 331.781379][T10060] netlink: 'syz.4.1208': attribute type 6 has an invalid length. [ 331.789873][T10060] netlink: 174904 bytes leftover after parsing attributes in process `syz.4.1208'. [ 332.242681][T10072] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1209'. [ 332.554468][T10078] lo speed is unknown, defaulting to 1000 [ 332.586297][T10078] lo speed is unknown, defaulting to 1000 [ 333.033536][T10087] netlink: 'syz.3.1213': attribute type 20 has an invalid length. [ 333.113094][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1214'. [ 333.234825][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1214'. [ 333.315591][T10092] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1215'. [ 333.335780][T10089] lo: entered allmulticast mode [ 333.386648][T10095] lo: entered promiscuous mode [ 333.391507][T10095] lo: left allmulticast mode [ 333.428443][ T980] lo speed is unknown, defaulting to 1000 [ 333.434618][ T5928] lo speed is unknown, defaulting to 1000 [ 333.904671][T10112] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1219'. [ 334.224210][T10123] netlink: 'syz.1.1221': attribute type 10 has an invalid length. [ 334.352114][T10119] netlink: 'syz.1.1221': attribute type 11 has an invalid length. [ 334.360511][T10119] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.1221'. [ 334.605494][T10118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.609500][T10130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1225'. [ 337.769276][T10145] FAULT_INJECTION: forcing a failure. [ 337.769276][T10145] name failslab, interval 1, probability 0, space 0, times 0 [ 337.829605][T10145] CPU: 1 UID: 0 PID: 10145 Comm: syz.1.1230 Not tainted syzkaller #0 PREEMPT(full) [ 337.829633][T10145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 337.829647][T10145] Call Trace: [ 337.829655][T10145] [ 337.829664][T10145] dump_stack_lvl+0x189/0x250 [ 337.829694][T10145] ? __pfx____ratelimit+0x10/0x10 [ 337.829724][T10145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.829749][T10145] ? __pfx__printk+0x10/0x10 [ 337.829778][T10145] ? __pfx___might_resched+0x10/0x10 [ 337.829798][T10145] ? fs_reclaim_acquire+0x7d/0x100 [ 337.829823][T10145] should_fail_ex+0x414/0x560 [ 337.829856][T10145] should_failslab+0xa8/0x100 [ 337.829887][T10145] __kmalloc_noprof+0xcb/0x4f0 [ 337.829913][T10145] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 337.829944][T10145] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 337.829978][T10145] genl_family_rcv_msg_doit+0xb8/0x300 [ 337.830010][T10145] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 337.830044][T10145] ? apparmor_capable+0x137/0x1b0 [ 337.830072][T10145] ? bpf_lsm_capable+0x9/0x20 [ 337.830098][T10145] ? security_capable+0x7e/0x2e0 [ 337.830137][T10145] genl_rcv_msg+0x60e/0x790 [ 337.830176][T10145] ? __pfx_genl_rcv_msg+0x10/0x10 [ 337.830199][T10145] ? __pfx_handshake_nl_accept_doit+0x10/0x10 [ 337.830229][T10145] ? __asan_memcpy+0x40/0x70 [ 337.830251][T10145] ? __pfx_ref_tracker_free+0x10/0x10 [ 337.830287][T10145] netlink_rcv_skb+0x205/0x470 [ 337.830313][T10145] ? __lock_acquire+0xab9/0xd20 [ 337.830343][T10145] ? __pfx_genl_rcv_msg+0x10/0x10 [ 337.830368][T10145] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 337.830420][T10145] ? down_read+0x1ad/0x2e0 [ 337.830442][T10145] genl_rcv+0x28/0x40 [ 337.830463][T10145] netlink_unicast+0x82c/0x9e0 [ 337.830501][T10145] ? __pfx_netlink_unicast+0x10/0x10 [ 337.830530][T10145] ? netlink_sendmsg+0x642/0xb30 [ 337.830558][T10145] ? skb_put+0x11b/0x210 [ 337.830581][T10145] netlink_sendmsg+0x805/0xb30 [ 337.830610][T10145] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.830648][T10145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.830684][T10145] ? __sanitizer_cov_trace_pc+0x11/0x70 [ 337.830714][T10145] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 337.830736][T10145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.830768][T10145] __sock_sendmsg+0x21c/0x270 [ 337.830799][T10145] ____sys_sendmsg+0x505/0x830 [ 337.830827][T10145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.830860][T10145] ? import_iovec+0x74/0xa0 [ 337.830889][T10145] ___sys_sendmsg+0x21f/0x2a0 [ 337.830914][T10145] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.830979][T10145] ? __fget_files+0x2a/0x420 [ 337.830997][T10145] ? __fget_files+0x3a0/0x420 [ 337.831028][T10145] __x64_sys_sendmsg+0x19b/0x260 [ 337.831054][T10145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 337.831106][T10145] do_syscall_64+0xfa/0x3b0 [ 337.831138][T10145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.831165][T10145] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 337.831187][T10145] ? clear_bhb_loop+0x60/0xb0 [ 337.831213][T10145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.831233][T10145] RIP: 0033:0x7f3ab6b8ebe9 [ 337.831252][T10145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.831270][T10145] RSP: 002b:00007f3ab7973038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.831291][T10145] RAX: ffffffffffffffda RBX: 00007f3ab6dc5fa0 RCX: 00007f3ab6b8ebe9 [ 337.831306][T10145] RDX: 0000000024000044 RSI: 0000200000000000 RDI: 0000000000000006 [ 337.831319][T10145] RBP: 00007f3ab7973090 R08: 0000000000000000 R09: 0000000000000000 [ 337.831332][T10145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.831343][T10145] R13: 00007f3ab6dc6038 R14: 00007f3ab6dc5fa0 R15: 00007fff8701bc58 [ 337.831377][T10145] [ 338.708586][T10160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1233'. [ 338.991171][T10168] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1231'. [ 339.680707][T10172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1236'. [ 339.936383][T10180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1240'. [ 340.186200][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'. [ 340.959648][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1243'. [ 341.780321][T10217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1251'. [ 342.387932][T10236] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1254'. [ 342.741486][T10243] netlink: 'syz.0.1260': attribute type 6 has an invalid length. [ 342.972664][T10254] FAULT_INJECTION: forcing a failure. [ 342.972664][T10254] name failslab, interval 1, probability 0, space 0, times 0 [ 342.988425][T10254] CPU: 1 UID: 0 PID: 10254 Comm: syz.1.1264 Not tainted syzkaller #0 PREEMPT(full) [ 342.988455][T10254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.988468][T10254] Call Trace: [ 342.988476][T10254] [ 342.988486][T10254] dump_stack_lvl+0x189/0x250 [ 342.988515][T10254] ? __pfx____ratelimit+0x10/0x10 [ 342.988544][T10254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.988569][T10254] ? __pfx__printk+0x10/0x10 [ 342.988600][T10254] ? __lock_acquire+0xab9/0xd20 [ 342.988640][T10254] should_fail_ex+0x414/0x560 [ 342.988674][T10254] should_failslab+0xa8/0x100 [ 342.988705][T10254] kmem_cache_alloc_noprof+0x73/0x3c0 [ 342.988730][T10254] ? skb_clone+0x212/0x3a0 [ 342.988758][T10254] skb_clone+0x212/0x3a0 [ 342.988784][T10254] __netlink_deliver_tap+0x404/0x850 [ 342.988829][T10254] ? netlink_deliver_tap+0x2e/0x1b0 [ 342.988861][T10254] netlink_deliver_tap+0x19c/0x1b0 [ 342.988892][T10254] netlink_unicast+0x7fa/0x9e0 [ 342.988929][T10254] ? __pfx_netlink_unicast+0x10/0x10 [ 342.988966][T10254] ? netlink_sendmsg+0x642/0xb30 [ 342.988993][T10254] ? skb_put+0x11b/0x210 [ 342.989016][T10254] netlink_sendmsg+0x805/0xb30 [ 342.989054][T10254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.989083][T10254] ? aa_sock_msg_perm+0xf1/0x1d0 [ 342.989100][T10254] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 342.989119][T10254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.989145][T10254] __sock_sendmsg+0x21c/0x270 [ 342.989168][T10254] ____sys_sendmsg+0x505/0x830 [ 342.989191][T10254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.989217][T10254] ? import_iovec+0x74/0xa0 [ 342.989239][T10254] ___sys_sendmsg+0x21f/0x2a0 [ 342.989258][T10254] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.989308][T10254] ? __fget_files+0x2a/0x420 [ 342.989322][T10254] ? __fget_files+0x3a0/0x420 [ 342.989346][T10254] __x64_sys_sendmsg+0x19b/0x260 [ 342.989369][T10254] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.989384][T10254] ? perf_trace_preemptirq_template+0xa3/0x340 [ 342.989417][T10254] ? __pfx_ksys_write+0x10/0x10 [ 342.989444][T10254] ? do_syscall_64+0xbe/0x3b0 [ 342.989473][T10254] do_syscall_64+0xfa/0x3b0 [ 342.989495][T10254] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.989518][T10254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.989534][T10254] ? clear_bhb_loop+0x60/0xb0 [ 342.989554][T10254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.989570][T10254] RIP: 0033:0x7f3ab6b8ebe9 [ 342.989587][T10254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.989601][T10254] RSP: 002b:00007f3ab7973038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.989619][T10254] RAX: ffffffffffffffda RBX: 00007f3ab6dc5fa0 RCX: 00007f3ab6b8ebe9 [ 342.989631][T10254] RDX: 0000000024000044 RSI: 0000200000000000 RDI: 0000000000000003 [ 342.989642][T10254] RBP: 00007f3ab7973090 R08: 0000000000000000 R09: 0000000000000000 [ 342.989652][T10254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.989662][T10254] R13: 00007f3ab6dc6038 R14: 00007f3ab6dc5fa0 R15: 00007fff8701bc58 [ 342.989689][T10254] [ 342.991454][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1264'. [ 343.688645][T10261] syz.1.1266 (10261) used greatest stack depth: 17864 bytes left [ 343.958007][T10272] netlink: 'syz.3.1270': attribute type 20 has an invalid length. [ 343.996053][T10274] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1271'. [ 344.254168][T10284] FAULT_INJECTION: forcing a failure. [ 344.254168][T10284] name failslab, interval 1, probability 0, space 0, times 0 [ 344.256048][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1276'. [ 344.321738][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 344.324923][T10284] CPU: 0 UID: 0 PID: 10284 Comm: syz.1.1275 Not tainted syzkaller #0 PREEMPT(full) [ 344.324956][T10284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 344.324971][T10284] Call Trace: [ 344.324981][T10284] [ 344.324991][T10284] dump_stack_lvl+0x189/0x250 [ 344.325025][T10284] ? __pfx____ratelimit+0x10/0x10 [ 344.325058][T10284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.325086][T10284] ? __pfx__printk+0x10/0x10 [ 344.325126][T10284] ? __pfx___might_resched+0x10/0x10 [ 344.325156][T10284] should_fail_ex+0x414/0x560 [ 344.325193][T10284] should_failslab+0xa8/0x100 [ 344.325230][T10284] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 344.325263][T10284] ? __alloc_skb+0x112/0x2d0 [ 344.325304][T10284] __alloc_skb+0x112/0x2d0 [ 344.325343][T10284] netlink_sendmsg+0x5c6/0xb30 [ 344.325390][T10284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.325428][T10284] ? aa_sock_msg_perm+0xf1/0x1d0 [ 344.325461][T10284] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 344.325487][T10284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.325530][T10284] __sock_sendmsg+0x21c/0x270 [ 344.325563][T10284] ____sys_sendmsg+0x505/0x830 [ 344.325596][T10284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.325631][T10284] ? import_iovec+0x74/0xa0 [ 344.325663][T10284] ___sys_sendmsg+0x21f/0x2a0 [ 344.325690][T10284] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.325761][T10284] ? __fget_files+0x2a/0x420 [ 344.325780][T10284] ? __fget_files+0x3a0/0x420 [ 344.325814][T10284] __x64_sys_sendmsg+0x19b/0x260 [ 344.325842][T10284] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 344.325879][T10284] ? __pfx_ksys_write+0x10/0x10 [ 344.325908][T10284] ? rcu_is_watching+0x15/0xb0 [ 344.325937][T10284] ? do_syscall_64+0xbe/0x3b0 [ 344.325976][T10284] do_syscall_64+0xfa/0x3b0 [ 344.326008][T10284] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.326037][T10284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.326061][T10284] ? clear_bhb_loop+0x60/0xb0 [ 344.326090][T10284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.326112][T10284] RIP: 0033:0x7f3ab6b8ebe9 [ 344.326135][T10284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.326154][T10284] RSP: 002b:00007f3ab7973038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.326180][T10284] RAX: ffffffffffffffda RBX: 00007f3ab6dc5fa0 RCX: 00007f3ab6b8ebe9 [ 344.326197][T10284] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 344.326210][T10284] RBP: 00007f3ab7973090 R08: 0000000000000000 R09: 0000000000000000 [ 344.326225][T10284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.326240][T10284] R13: 00007f3ab6dc6038 R14: 00007f3ab6dc5fa0 R15: 00007fff8701bc58 [ 344.326280][T10284] [ 345.381695][T10313] netlink: 'syz.0.1286': attribute type 20 has an invalid length. [ 345.542896][ T152] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 345.632023][T10316] netlink: 'syz.1.1288': attribute type 17 has an invalid length. [ 345.685258][T10316] netlink: 'syz.1.1288': attribute type 16 has an invalid length. [ 345.729635][T10316] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1288'. [ 346.439172][T10325] lo speed is unknown, defaulting to 1000 [ 346.479549][T10325] lo speed is unknown, defaulting to 1000 [ 347.125586][T10345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1294'. [ 348.401393][T10361] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1299'. [ 348.547482][T10370] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1302'. [ 349.216886][T10364] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1300'. [ 350.432062][T10381] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 350.487037][T10381] syzkaller1: linktype set to 778 [ 350.801416][T10377] lo speed is unknown, defaulting to 1000 [ 351.130111][T10377] lo speed is unknown, defaulting to 1000 [ 351.819180][T10392] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1309'. [ 351.862422][T10394] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1311'. [ 352.041179][T10398] netlink: 'syz.3.1310': attribute type 20 has an invalid length. [ 354.029563][T10415] netlink: 'syz.4.1316': attribute type 29 has an invalid length. [ 354.101132][T10413] netlink: 'syz.4.1316': attribute type 29 has an invalid length. [ 354.815296][T10423] netlink: 149044 bytes leftover after parsing attributes in process `syz.4.1318'. [ 354.936705][T10411] lo speed is unknown, defaulting to 1000 [ 355.388808][T10411] lo speed is unknown, defaulting to 1000 [ 355.749210][T10429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1319'. [ 355.763345][T10429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1319'. [ 355.797564][T10429] netlink: 'syz.4.1319': attribute type 27 has an invalid length. [ 356.060339][T10433] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1321'. [ 356.350785][T10435] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1323'. [ 356.404349][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 357.175249][T10444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1325'. [ 357.296299][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1325'. [ 358.676303][T10456] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1328'. [ 359.655566][T10470] netlink: 'syz.2.1333': attribute type 20 has an invalid length. [ 361.446442][T10491] netlink: 'syz.4.1340': attribute type 10 has an invalid length. [ 361.513675][T10491] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 361.656647][T10497] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1343'. [ 361.705355][T10497] FAULT_INJECTION: forcing a failure. [ 361.705355][T10497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.787460][T10497] CPU: 0 UID: 0 PID: 10497 Comm: syz.0.1343 Not tainted syzkaller #0 PREEMPT(full) [ 361.787490][T10497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 361.787503][T10497] Call Trace: [ 361.787511][T10497] [ 361.787520][T10497] dump_stack_lvl+0x189/0x250 [ 361.787552][T10497] ? __pfx____ratelimit+0x10/0x10 [ 361.787581][T10497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.787606][T10497] ? __pfx__printk+0x10/0x10 [ 361.787650][T10497] should_fail_ex+0x414/0x560 [ 361.787684][T10497] _copy_to_user+0x31/0xb0 [ 361.787711][T10497] simple_read_from_buffer+0xe1/0x170 [ 361.787747][T10497] proc_fail_nth_read+0x1b3/0x220 [ 361.787775][T10497] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 361.787812][T10497] ? rw_verify_area+0x2a6/0x4d0 [ 361.787838][T10497] ? __lock_acquire+0xab9/0xd20 [ 361.787866][T10497] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 361.787892][T10497] vfs_read+0x200/0xa30 [ 361.787918][T10497] ? fdget_pos+0x247/0x320 [ 361.787942][T10497] ? __pfx___mutex_lock+0x10/0x10 [ 361.787973][T10497] ? __pfx_vfs_read+0x10/0x10 [ 361.788002][T10497] ? __fget_files+0x2a/0x420 [ 361.788026][T10497] ? __fget_files+0x3a0/0x420 [ 361.788043][T10497] ? __fget_files+0x2a/0x420 [ 361.788073][T10497] ksys_read+0x145/0x250 [ 361.788103][T10497] ? __pfx_ksys_read+0x10/0x10 [ 361.788128][T10497] ? rcu_is_watching+0x15/0xb0 [ 361.788155][T10497] ? do_syscall_64+0xbe/0x3b0 [ 361.788190][T10497] do_syscall_64+0xfa/0x3b0 [ 361.788218][T10497] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.788245][T10497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.788266][T10497] ? clear_bhb_loop+0x60/0xb0 [ 361.788292][T10497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.788312][T10497] RIP: 0033:0x7f755bf8d5fc [ 361.788331][T10497] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 361.788349][T10497] RSP: 002b:00007f755cdcd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 361.788370][T10497] RAX: ffffffffffffffda RBX: 00007f755c1c5fa0 RCX: 00007f755bf8d5fc [ 361.788384][T10497] RDX: 000000000000000f RSI: 00007f755cdcd0a0 RDI: 0000000000000004 [ 361.788397][T10497] RBP: 00007f755cdcd090 R08: 0000000000000000 R09: 0000000000000000 [ 361.788414][T10497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.788426][T10497] R13: 00007f755c1c6038 R14: 00007f755c1c5fa0 R15: 00007fffe71eb268 [ 361.788462][T10497] [ 362.190205][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 362.209293][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 362.218758][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.240123][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.262040][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.311824][T10499] lo speed is unknown, defaulting to 1000 [ 362.322922][T10499] lo speed is unknown, defaulting to 1000 [ 362.637502][T10511] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1346'. [ 362.915062][ T1153] wlan1: Created IBSS using preconfigured BSSID 00:00:00:8d:00:00 [ 362.923030][ T1153] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 363.455436][T10531] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1354'. [ 364.239253][T10499] chnl_net:caif_netlink_parms(): no params data found [ 364.286291][ T5864] Bluetooth: hci1: command tx timeout [ 364.609001][T10499] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.618984][T10499] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.635362][T10499] bridge_slave_0: entered allmulticast mode [ 364.647411][T10499] bridge_slave_0: entered promiscuous mode [ 364.695292][T10499] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.703225][T10499] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.732488][T10499] bridge_slave_1: entered allmulticast mode [ 364.753180][T10499] bridge_slave_1: entered promiscuous mode [ 364.941131][T10499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.042360][T10499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.228657][T10574] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1365'. [ 365.422281][ T49] wlan1: Created IBSS using preconfigured BSSID 00:00:00:8d:00:00 [ 365.454738][ T49] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 366.362448][T10499] team0: Port device team_slave_0 added [ 366.375151][ T5864] Bluetooth: hci1: command tx timeout [ 366.401986][T10499] team0: Port device team_slave_1 added [ 366.567553][T10596] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1371'. [ 366.699034][T10598] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1372'. [ 366.888917][T10499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.898754][T10499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.926359][T10499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.973919][T10499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.994259][T10499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.041713][T10499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.282526][T10499] hsr_slave_0: entered promiscuous mode [ 367.293369][T10499] hsr_slave_1: entered promiscuous mode [ 367.304326][T10499] debugfs: 'hsr0' already exists in 'hsr' [ 367.327267][T10499] Cannot create hsr debugfs directory [ 367.379534][T10613] tun0: tun_chr_ioctl cmd 1074025677 [ 367.389623][T10613] tun0: linktype set to 774 [ 367.437038][T10616] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1378'. [ 368.464988][ T5864] Bluetooth: hci1: command tx timeout [ 368.699360][T10635] netlink: 'syz.4.1383': attribute type 8 has an invalid length. [ 368.776142][T10635] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1383'. [ 368.843790][T10635] rdma_rxe: rxe_newlink: failed to add lo [ 368.923452][T10499] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 368.947197][T10499] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 368.971996][T10499] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 369.041351][T10499] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 369.471541][T10652] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1390'. [ 369.863253][T10499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.893810][T10669] bridge_slave_1: left allmulticast mode [ 369.934885][T10669] bridge_slave_1: left promiscuous mode [ 369.944086][T10669] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.524772][ T5864] Bluetooth: hci1: command tx timeout [ 370.733025][T10669] bridge_slave_0: left allmulticast mode [ 370.740386][T10669] bridge_slave_0: left promiscuous mode [ 370.747582][T10669] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.809440][T10669] bond0: (slave bridge0): Releasing backup interface [ 370.891063][T10684] netlink: 'syz.0.1397': attribute type 20 has an invalid length. [ 371.087099][T10499] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.170137][T10687] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1396'. [ 371.219889][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.227161][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.267383][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.274636][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.951810][T10706] netlink: 'syz.2.1402': attribute type 2 has an invalid length. [ 372.514149][T10499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.266957][T10739] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1409'. [ 374.403026][T10499] veth0_vlan: entered promiscuous mode [ 374.454953][T10499] veth1_vlan: entered promiscuous mode [ 374.601667][T10499] veth0_macvtap: entered promiscuous mode [ 374.689446][T10741] netlink: 'syz.3.1410': attribute type 2 has an invalid length. [ 374.738046][T10741] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1410'. [ 374.952337][T10499] veth1_macvtap: entered promiscuous mode [ 375.506554][T10499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.550012][T10499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.591879][ T1153] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.640122][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.675811][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.717051][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.878215][T10751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1415'. [ 376.021657][T10757] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1417'. [ 376.105692][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.113664][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.191946][T10755] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.1418'. [ 376.440817][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.460919][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.129635][T10775] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1421'. [ 377.608619][T10772] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1339'. [ 377.711395][T10778] lo speed is unknown, defaulting to 1000 [ 377.731562][T10778] lo speed is unknown, defaulting to 1000 [ 378.356525][T10785] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1424'. [ 378.393837][T10789] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1426'. [ 379.542915][T10802] netlink: 14719 bytes leftover after parsing attributes in process `syz.5.1430'. [ 379.831520][T10812] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1433'. [ 380.716601][T10831] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1441'. [ 380.893461][T10833] bond_slave_1: entered allmulticast mode [ 381.307533][T10840] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.1443'. [ 382.540294][T10866] netlink: 149044 bytes leftover after parsing attributes in process `syz.2.1451'. [ 382.847390][T10868] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1452'. [ 384.131167][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.144847][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.231332][T10890] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1460'. [ 384.286496][T10893] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1458'. [ 384.601087][T10897] lo speed is unknown, defaulting to 1000 [ 384.613353][T10897] lo speed is unknown, defaulting to 1000 [ 385.040223][T10905] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1466'. [ 385.950828][T10924] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1468'. [ 387.533716][ T5961] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 388.288152][T10971] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1483'. [ 388.586892][T10973] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1484'. [ 388.971036][T10977] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1486'. [ 389.807952][T11001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1494'. [ 389.876203][T10998] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1493'. [ 390.006286][T11006] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1495'. [ 390.533349][T11015] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1499'. [ 390.844455][T11027] netlink: 'syz.5.1504': attribute type 20 has an invalid length. [ 391.606702][T11050] netlink: 'syz.0.1508': attribute type 20 has an invalid length. [ 391.906188][T11057] netlink: 'syz.5.1510': attribute type 20 has an invalid length. [ 392.576830][T11071] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1516'. [ 394.468256][T11114] netlink: 'syz.0.1531': attribute type 20 has an invalid length. [ 395.992946][T11150] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1542'. [ 396.902194][T11170] netlink: 'syz.3.1549': attribute type 20 has an invalid length. [ 397.779459][T11179] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1551'. [ 399.498719][T11210] netlink: 149044 bytes leftover after parsing attributes in process `syz.0.1559'. [ 399.536096][T11209] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1560'. [ 400.970864][T11229] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1565'. [ 401.146236][T11231] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1566'. [ 401.421787][T11241] netlink: 'syz.2.1570': attribute type 20 has an invalid length. [ 401.486554][T11244] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1568'. [ 402.237624][T11251] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1571'. [ 402.502470][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1573'. [ 402.879173][T11263] netlink: 149044 bytes leftover after parsing attributes in process `syz.5.1574'. [ 402.899951][T11262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1575'. [ 404.538478][T11287] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.1580'. [ 404.585861][T11293] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1581'. [ 404.758457][T11296] netlink: 'syz.5.1582': attribute type 20 has an invalid length. [ 405.276027][T11306] netlink: 'syz.3.1585': attribute type 20 has an invalid length. [ 405.781349][T11316] netlink: 'syz.5.1587': attribute type 20 has an invalid length. [ 405.994912][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1588'. [ 406.510790][T11329] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1589'. [ 406.827529][T11335] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1592'. [ 406.900587][T11331] netlink: 'syz.0.1590': attribute type 20 has an invalid length. [ 407.028672][T11338] netlink: 'syz.3.1593': attribute type 20 has an invalid length. [ 407.203358][T11346] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1595'. [ 407.623521][T11348] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1596'. [ 407.679607][T11350] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.1597'. [ 407.706979][T11355] netlink: 'syz.5.1598': attribute type 20 has an invalid length. [ 409.054902][T11373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1603'. [ 410.687703][T11382] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1606'. [ 410.745153][T11384] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1605'. [ 410.928048][T11390] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1608'. [ 411.844125][T11392] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.1611'. [ 412.468498][T11412] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1615'. [ 413.602668][T11442] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1624'. [ 413.705190][T11431] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1620'. [ 413.990904][T11444] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1625'. [ 414.769424][T11454] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1629'. [ 415.421088][T11471] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1635'. [ 415.505760][T11474] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1637'. [ 416.200850][T11485] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1638'. [ 417.662524][T11507] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1643'. [ 417.873976][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1646'. [ 418.018818][T11516] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1648'. [ 418.659329][ T5961] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 420.090817][T11531] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1653'. [ 420.811421][T11546] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1658'. [ 421.370133][T11556] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1662'. [ 421.681580][T11565] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1666'. [ 422.500559][T11593] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1676'. [ 422.527131][T11594] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1675'. [ 422.801165][T11601] netlink: 'syz.4.1679': attribute type 29 has an invalid length. [ 422.829769][T11601] netlink: 'syz.4.1679': attribute type 29 has an invalid length. [ 422.832654][T11603] netlink: 'syz.2.1678': attribute type 2 has an invalid length. [ 422.848307][T11596] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1677'. [ 422.864001][T11603] netlink: 'syz.2.1678': attribute type 1 has an invalid length. [ 422.864033][T11603] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1678'. [ 422.864063][T11603] nbd: couldn't find a device at index 16 [ 422.871007][T11603] netlink: 'syz.2.1678': attribute type 4 has an invalid length. [ 422.871036][T11603] netlink: 210788 bytes leftover after parsing attributes in process `syz.2.1678'. [ 423.043296][T11608] netlink: 'syz.4.1679': attribute type 29 has an invalid length. [ 424.523750][T11631] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1684'. [ 424.829255][T11641] netlink: 'syz.3.1688': attribute type 20 has an invalid length. [ 425.253016][T11647] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1689'. [ 425.604047][T11654] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1691'. [ 425.956445][T11663] netlink: 'syz.0.1696': attribute type 20 has an invalid length. [ 426.333722][T11674] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1698'. [ 426.581862][T11678] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1701'. [ 426.992818][T11688] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1702'. [ 426.995984][T11690] netlink: 'syz.4.1705': attribute type 20 has an invalid length. [ 428.096365][T11722] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1711'. [ 428.537598][T11735] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1715'. [ 429.801932][T11754] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1719'. [ 429.830998][T11755] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1718'. [ 429.991864][T11763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1721'. [ 430.240943][T11769] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1723'. [ 431.004383][T11781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1727'. [ 431.059202][T11777] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1726'. [ 431.509704][T11789] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1728'. [ 432.922641][T11816] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1736'. [ 433.492685][T11829] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1740'. [ 433.527581][T11827] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1740'. [ 433.587452][T11829] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1740'. [ 433.760572][T11837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1742'. [ 434.424260][T11850] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1746'. [ 435.198855][T11868] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1752'. [ 435.626071][T11881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1757'. [ 436.344052][T11898] netlink: 'syz.5.1763': attribute type 20 has an invalid length. [ 436.635252][T11903] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1765'. [ 436.774002][T11905] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1766'. [ 440.296091][T11926] netlink: 'syz.3.1771': attribute type 16 has an invalid length. [ 440.304213][T11926] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1771'. [ 440.399716][T11932] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1773'. [ 440.542386][T11930] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.1772'. [ 440.586119][T11939] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1775'. [ 440.705536][T11936] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1774'. [ 441.107367][T11945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1778'. [ 441.857425][T11960] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1782'. [ 441.993423][T11962] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 442.096276][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1784'. [ 442.251130][T11975] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1787'. [ 442.403391][T11978] netlink: 'syz.3.1789': attribute type 20 has an invalid length. [ 442.558029][T11989] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.1788'. [ 442.938331][T11997] netlink: 'syz.2.1795': attribute type 39 has an invalid length. [ 443.679393][T12010] netlink: 'syz.2.1798': attribute type 20 has an invalid length. [ 445.170241][T12037] žÿÿÿ: renamed from team_slave_1 (while UP) [ 445.522121][T12041] __nla_validate_parse: 1 callbacks suppressed [ 445.522170][T12041] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1809'. [ 445.594569][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.601082][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.030455][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1813'. [ 446.060993][ T5864] Bluetooth: hci2: ISO packet for unknown connection handle 12 [ 447.230369][T12049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.282326][T12049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.883826][ T6010] lo speed is unknown, defaulting to 1000 [ 447.890127][ T6010] s: Port: 1 Link DOWN [ 447.898843][T12084] mac80211_hwsim hwsim74 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 447.909346][ T49] wlan1: Created IBSS using preconfigured BSSID 00:00:00:8d:00:00 [ 447.952613][ T49] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 448.064337][ T1153] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.084970][ T1153] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.253987][T12106] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1821'. [ 448.311592][ T1153] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.349348][ T1153] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.343962][T12126] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1829'. [ 449.441691][T12128] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1830'. [ 449.713963][T12133] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1831'. [ 449.739745][T12133] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1831'. [ 449.900450][ T5963] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 450.027409][T12137] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1833'. [ 450.373267][T12151] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1836'. [ 450.456004][T12151] netlink: zone id is out of range [ 450.461314][T12151] netlink: zone id is out of range [ 450.466678][T12151] netlink: zone id is out of range [ 450.471943][T12151] netlink: zone id is out of range [ 450.479166][T12151] netlink: zone id is out of range [ 450.485860][T12151] netlink: zone id is out of range [ 450.491126][T12151] netlink: zone id is out of range [ 450.501072][T12151] netlink: zone id is out of range [ 450.507714][T12151] netlink: zone id is out of range [ 450.519210][T12151] netlink: zone id is out of range [ 451.089813][T12161] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.1838'. [ 451.542347][T12171] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1842'. [ 452.198064][T12182] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1846'. [ 452.232694][T12188] netlink: 'syz.5.1848': attribute type 3 has an invalid length. [ 452.271077][T12188] netlink: 'syz.5.1848': attribute type 1 has an invalid length. [ 452.304210][T12188] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.1848'. [ 453.190331][T12202] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1854'. [ 453.234214][T12201] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1852'. [ 453.589895][T12202] netlink: 'syz.2.1854': attribute type 1 has an invalid length. [ 453.974324][T12202] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.982898][T12202] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.449669][T12202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.507550][T12202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.942844][T12055] lo speed is unknown, defaulting to 1000 [ 454.948944][T12221] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.1858'. [ 454.958902][T12055] syz2: Port: 1 Link DOWN [ 454.980709][ T1153] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.022921][ T1153] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.054925][ T1153] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.088777][ T1153] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.177607][T12234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1860'. [ 455.971747][T12251] netlink: 'syz.5.1865': attribute type 2 has an invalid length. [ 456.032598][T12251] netlink: 'syz.5.1865': attribute type 1 has an invalid length. [ 456.253226][T12251] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.1865'. [ 456.285041][T12251] nbd: couldn't find a device at index 65545 [ 456.641210][T12256] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1866'. [ 456.663745][T12256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1866'. [ 456.803221][T12267] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1872'. [ 456.864598][T12267] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1872'. [ 458.462824][T12287] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1876'. [ 459.530346][T12311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1884'. [ 459.605145][T12311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1884'. [ 460.123245][T12326] FAULT_INJECTION: forcing a failure. [ 460.123245][T12326] name failslab, interval 1, probability 0, space 0, times 0 [ 460.160163][T12326] CPU: 1 UID: 0 PID: 12326 Comm: syz.5.1888 Not tainted syzkaller #0 PREEMPT(full) [ 460.160193][T12326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.160212][T12326] Call Trace: [ 460.160221][T12326] [ 460.160231][T12326] dump_stack_lvl+0x189/0x250 [ 460.160262][T12326] ? __pfx____ratelimit+0x10/0x10 [ 460.160299][T12326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.160325][T12326] ? __pfx__printk+0x10/0x10 [ 460.160361][T12326] ? __pfx___might_resched+0x10/0x10 [ 460.160380][T12326] ? fs_reclaim_acquire+0x7d/0x100 [ 460.160405][T12326] should_fail_ex+0x414/0x560 [ 460.160439][T12326] should_failslab+0xa8/0x100 [ 460.160472][T12326] __kmalloc_cache_noprof+0x70/0x3d0 [ 460.160500][T12326] ? __request_module+0x2b5/0x5e0 [ 460.160540][T12326] __request_module+0x2b5/0x5e0 [ 460.160578][T12326] ? __pfx___request_module+0x10/0x10 [ 460.160614][T12326] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 460.160667][T12326] load_settype+0x3a/0xc0 [ 460.160693][T12326] ip_set_create+0x489/0x1940 [ 460.160718][T12326] ? ip_set_create+0x4a2/0x1940 [ 460.160757][T12326] ? __pfx_ip_set_create+0x10/0x10 [ 460.160822][T12326] nfnetlink_rcv_msg+0xb4a/0x1130 [ 460.160851][T12326] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 460.160899][T12326] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 460.160923][T12326] ? kasan_save_free_info+0x46/0x50 [ 460.160976][T12326] ? perf_trace_preemptirq_template+0xa3/0x340 [ 460.161005][T12326] ? kasan_quarantine_put+0x3d/0x220 [ 460.161051][T12326] netlink_rcv_skb+0x205/0x470 [ 460.161083][T12326] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 460.161114][T12326] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 460.161157][T12326] ? bpf_lsm_capable+0x9/0x20 [ 460.161185][T12326] ? security_capable+0x7e/0x2e0 [ 460.161224][T12326] nfnetlink_rcv+0x26a/0x2520 [ 460.161255][T12326] ? __dev_queue_xmit+0x1d79/0x3b50 [ 460.161297][T12326] ? __dev_queue_xmit+0x27b/0x3b50 [ 460.161335][T12326] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 460.161361][T12326] ? __pfx___dev_queue_xmit+0x10/0x10 [ 460.161401][T12326] ? ref_tracker_free+0x63a/0x7d0 [ 460.161431][T12326] ? __asan_memcpy+0x40/0x70 [ 460.161454][T12326] ? __pfx_ref_tracker_free+0x10/0x10 [ 460.161480][T12326] ? __skb_clone+0x63/0x7a0 [ 460.161507][T12326] ? __skb_clone+0x483/0x7a0 [ 460.161537][T12326] ? skb_clone+0x246/0x3a0 [ 460.161563][T12326] ? __netlink_deliver_tap+0x807/0x850 [ 460.161594][T12326] ? netlink_deliver_tap+0x2e/0x1b0 [ 460.161631][T12326] ? netlink_deliver_tap+0x2e/0x1b0 [ 460.161671][T12326] netlink_unicast+0x82c/0x9e0 [ 460.161709][T12326] ? __pfx_netlink_unicast+0x10/0x10 [ 460.161739][T12326] ? netlink_sendmsg+0x642/0xb30 [ 460.161767][T12326] ? skb_put+0x11b/0x210 [ 460.161790][T12326] netlink_sendmsg+0x805/0xb30 [ 460.161833][T12326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.161867][T12326] ? aa_sock_msg_perm+0xf1/0x1d0 [ 460.161889][T12326] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 460.161912][T12326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.161944][T12326] __sock_sendmsg+0x21c/0x270 [ 460.161976][T12326] ____sys_sendmsg+0x505/0x830 [ 460.162005][T12326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.162039][T12326] ? import_iovec+0x74/0xa0 [ 460.162069][T12326] ___sys_sendmsg+0x21f/0x2a0 [ 460.162094][T12326] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.162158][T12326] ? __fget_files+0x2a/0x420 [ 460.162177][T12326] ? __fget_files+0x3a0/0x420 [ 460.162209][T12326] __x64_sys_sendmsg+0x19b/0x260 [ 460.162235][T12326] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 460.162269][T12326] ? __pfx_ksys_write+0x10/0x10 [ 460.162306][T12326] ? rcu_is_watching+0x15/0xb0 [ 460.162334][T12326] ? do_syscall_64+0xbe/0x3b0 [ 460.162369][T12326] do_syscall_64+0xfa/0x3b0 [ 460.162398][T12326] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.162427][T12326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.162449][T12326] ? clear_bhb_loop+0x60/0xb0 [ 460.162476][T12326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.162503][T12326] RIP: 0033:0x7f47d2b8ebe9 [ 460.162524][T12326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.162543][T12326] RSP: 002b:00007f47d3a02038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.162567][T12326] RAX: ffffffffffffffda RBX: 00007f47d2dc6090 RCX: 00007f47d2b8ebe9 [ 460.162583][T12326] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 460.162597][T12326] RBP: 00007f47d3a02090 R08: 0000000000000000 R09: 0000000000000000 [ 460.162611][T12326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.162623][T12326] R13: 00007f47d2dc6128 R14: 00007f47d2dc6090 R15: 00007ffeb894ce58 [ 460.162657][T12326] [ 460.171656][T12326] Can't find ip_set type haÕn±€p [ 460.369522][T12331] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.1889'. [ 461.105962][T12343] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1892'. [ 461.289154][T12349] rdma_rxe: rxe_newlink: failed to add lo [ 461.326057][T12349] FAULT_INJECTION: forcing a failure. [ 461.326057][T12349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.377987][T12349] CPU: 0 UID: 0 PID: 12349 Comm: syz.4.1895 Not tainted syzkaller #0 PREEMPT(full) [ 461.378016][T12349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 461.378030][T12349] Call Trace: [ 461.378038][T12349] [ 461.378048][T12349] dump_stack_lvl+0x189/0x250 [ 461.378078][T12349] ? __pfx____ratelimit+0x10/0x10 [ 461.378108][T12349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.378132][T12349] ? __pfx__printk+0x10/0x10 [ 461.378176][T12349] should_fail_ex+0x414/0x560 [ 461.378211][T12349] _copy_to_user+0x31/0xb0 [ 461.378237][T12349] simple_read_from_buffer+0xe1/0x170 [ 461.378274][T12349] proc_fail_nth_read+0x1b3/0x220 [ 461.378302][T12349] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.378322][T12349] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.378346][T12349] ? vfs_read+0x1e5/0xa30 [ 461.378374][T12349] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.378399][T12349] vfs_read+0x200/0xa30 [ 461.378424][T12349] ? fdget_pos+0x247/0x320 [ 461.378448][T12349] ? __pfx___mutex_lock+0x10/0x10 [ 461.378478][T12349] ? __pfx_vfs_read+0x10/0x10 [ 461.378507][T12349] ? __fget_files+0x2a/0x420 [ 461.378530][T12349] ? __fget_files+0x3a0/0x420 [ 461.378547][T12349] ? __fget_files+0x2a/0x420 [ 461.378574][T12349] ksys_read+0x145/0x250 [ 461.378604][T12349] ? __pfx_ksys_read+0x10/0x10 [ 461.378645][T12349] do_syscall_64+0xfa/0x3b0 [ 461.378676][T12349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.378695][T12349] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 461.378716][T12349] ? clear_bhb_loop+0x60/0xb0 [ 461.378741][T12349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.378760][T12349] RIP: 0033:0x7f2658f8d5fc [ 461.378778][T12349] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 461.378796][T12349] RSP: 002b:00007f2659dcd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 461.378817][T12349] RAX: ffffffffffffffda RBX: 00007f26591c5fa0 RCX: 00007f2658f8d5fc [ 461.378832][T12349] RDX: 000000000000000f RSI: 00007f2659dcd0a0 RDI: 0000000000000007 [ 461.378844][T12349] RBP: 00007f2659dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 461.378856][T12349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 461.378867][T12349] R13: 00007f26591c6038 R14: 00007f26591c5fa0 R15: 00007ffe608157c8 [ 461.378902][T12349] [ 461.642040][T12353] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1896'. [ 461.725780][T12352] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1897'. [ 461.798170][T12357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1899'. [ 463.123747][T12376] net_ratelimit: 74 callbacks suppressed [ 463.123782][T12376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.352374][T12383] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1909'. [ 463.452478][T12382] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1908'. [ 463.617741][T12390] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1912'. [ 463.762220][T12395] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1914'. [ 463.789912][T12393] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1913'. [ 463.817454][T12393] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1913'. [ 463.964110][T12398] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.1915'. [ 464.957920][T12428] netlink: 'syz.5.1924': attribute type 10 has an invalid length. [ 464.991533][T12428] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.999504][T12428] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.103932][T12428] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.111353][T12428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.119132][T12428] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.126392][T12428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.183774][T12428] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 466.230673][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.915656][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.010484][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.092539][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.487369][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.499605][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.509857][ T49] bond0 (unregistering): Released all slaves [ 468.588561][ T49] hsr_slave_0: left promiscuous mode [ 468.594756][ T49] hsr_slave_1: left promiscuous mode [ 468.601334][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.611957][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.622332][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.630017][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.651597][ T49] veth1_macvtap: left promiscuous mode [ 468.658206][ T49] veth0_macvtap: left promiscuous mode [ 468.663879][ T49] veth1_vlan: left promiscuous mode [ 468.669720][ T49] veth0_vlan: left promiscuous mode [ 469.428967][T12488] netlink: 'syz.4.1943': attribute type 21 has an invalid length. [ 469.870461][ T49] team0 (unregistering): Port device team_slave_1 removed [ 469.982620][ T49] team0 (unregistering): Port device team_slave_0 removed [ 471.025564][T12488] netlink: 'syz.4.1943': attribute type 1 has an invalid length. [ 473.526133][T12497] __nla_validate_parse: 5 callbacks suppressed [ 473.526155][T12497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1948'. [ 474.951159][T12521] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1955'. [ 475.058972][T12528] delete_channel: no stack [ 475.079642][T12528] delete_channel: no stack [ 475.853626][T12539] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1960'. [ 476.191061][T12553] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1965'. [ 476.202786][T12553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1965'. [ 477.561779][T12568] bridge_slave_1: left allmulticast mode [ 477.573189][T12568] bridge_slave_1: left promiscuous mode [ 477.585476][T12568] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.686552][T12568] bridge_slave_0: left allmulticast mode [ 477.715594][T12568] bridge_slave_0: left promiscuous mode [ 477.727697][T12568] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.131461][T12590] FAULT_INJECTION: forcing a failure. [ 479.131461][T12590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.165145][T12590] CPU: 0 UID: 0 PID: 12590 Comm: syz.2.1977 Not tainted syzkaller #0 PREEMPT(full) [ 479.165190][T12590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 479.165203][T12590] Call Trace: [ 479.165214][T12590] [ 479.165227][T12590] dump_stack_lvl+0x189/0x250 [ 479.165263][T12590] ? __pfx____ratelimit+0x10/0x10 [ 479.165300][T12590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.165330][T12590] ? __pfx__printk+0x10/0x10 [ 479.165368][T12590] ? __might_fault+0xb0/0x130 [ 479.165411][T12590] ? __might_fault+0xb0/0x130 [ 479.165464][T12590] should_fail_ex+0x414/0x560 [ 479.165515][T12590] _copy_from_user+0x2d/0xb0 [ 479.165547][T12590] ___sys_sendmsg+0x158/0x2a0 [ 479.165585][T12590] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.165681][T12590] ? __fget_files+0x2a/0x420 [ 479.165746][T12590] ? __fget_files+0x2a/0x420 [ 479.165764][T12590] ? __fget_files+0x3a0/0x420 [ 479.165827][T12590] __x64_sys_sendmsg+0x19b/0x260 [ 479.165864][T12590] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 479.165883][T12590] ? perf_trace_preemptirq_template+0xa3/0x340 [ 479.165947][T12590] ? __pfx_ksys_write+0x10/0x10 [ 479.165972][T12590] ? rcu_is_watching+0x15/0xb0 [ 479.166011][T12590] ? do_syscall_64+0xbe/0x3b0 [ 479.166057][T12590] do_syscall_64+0xfa/0x3b0 [ 479.166086][T12590] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.166116][T12590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.166138][T12590] ? clear_bhb_loop+0x60/0xb0 [ 479.166180][T12590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.166202][T12590] RIP: 0033:0x7fb6da18ebe9 [ 479.166226][T12590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.166245][T12590] RSP: 002b:00007fb6daf20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.166267][T12590] RAX: ffffffffffffffda RBX: 00007fb6da3c5fa0 RCX: 00007fb6da18ebe9 [ 479.166282][T12590] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 479.166295][T12590] RBP: 00007fb6daf20090 R08: 0000000000000000 R09: 0000000000000000 [ 479.166308][T12590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.166320][T12590] R13: 00007fb6da3c6038 R14: 00007fb6da3c5fa0 R15: 00007ffc0ad16318 [ 479.166392][T12590] [ 479.654836][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1978'. [ 479.730319][T12602] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1983'. [ 479.827680][T12609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1985'. [ 479.974934][T12618] netlink: 'syz.4.1988': attribute type 39 has an invalid length. [ 480.155196][T12629] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1989'. [ 480.383678][T12639] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1997'. [ 480.780869][T12652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2001'. [ 480.993642][T12655] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2002'. [ 481.778162][T12687] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2013'. [ 481.859696][T12689] FAULT_INJECTION: forcing a failure. [ 481.859696][T12689] name failslab, interval 1, probability 0, space 0, times 0 [ 481.934121][T12689] CPU: 1 UID: 0 PID: 12689 Comm: syz.2.2014 Not tainted syzkaller #0 PREEMPT(full) [ 481.934160][T12689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 481.934173][T12689] Call Trace: [ 481.934184][T12689] [ 481.934195][T12689] dump_stack_lvl+0x189/0x250 [ 481.934231][T12689] ? __pfx____ratelimit+0x10/0x10 [ 481.934265][T12689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.934296][T12689] ? __pfx__printk+0x10/0x10 [ 481.934351][T12689] ? __pfx___might_resched+0x10/0x10 [ 481.934399][T12689] should_fail_ex+0x414/0x560 [ 481.934449][T12689] should_failslab+0xa8/0x100 [ 481.934490][T12689] __kmalloc_cache_noprof+0x70/0x3d0 [ 481.934523][T12689] ? find_get_pmu_context+0x8b/0x890 [ 481.934566][T12689] find_get_pmu_context+0x8b/0x890 [ 481.934598][T12689] ? find_get_context+0x3d7/0x4f0 [ 481.934647][T12689] __se_sys_perf_event_open+0xbfd/0x1d70 [ 481.934714][T12689] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 481.934781][T12689] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 481.934817][T12689] ? __pfx_ksys_write+0x10/0x10 [ 481.934841][T12689] ? rcu_is_watching+0x15/0xb0 [ 481.934883][T12689] ? do_syscall_64+0xbe/0x3b0 [ 481.934912][T12689] ? __x64_sys_perf_event_open+0x20/0xc0 [ 481.934949][T12689] do_syscall_64+0xfa/0x3b0 [ 481.934978][T12689] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.935010][T12689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.935033][T12689] ? clear_bhb_loop+0x60/0xb0 [ 481.935068][T12689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.935090][T12689] RIP: 0033:0x7fb6da18ebe9 [ 481.935113][T12689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.935131][T12689] RSP: 002b:00007fb6daf20038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 481.935159][T12689] RAX: ffffffffffffffda RBX: 00007fb6da3c5fa0 RCX: 00007fb6da18ebe9 [ 481.935174][T12689] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000180 [ 481.935188][T12689] RBP: 00007fb6daf20090 R08: 000000000000000a R09: 0000000000000000 [ 481.935200][T12689] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 481.935211][T12689] R13: 00007fb6da3c6038 R14: 00007fb6da3c5fa0 R15: 00007ffc0ad16318 [ 481.935279][T12689] [ 482.509586][T12702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2018'. [ 484.720513][T12753] netlink: 'syz.3.2036': attribute type 29 has an invalid length. [ 484.746924][T12753] netlink: 'syz.3.2036': attribute type 29 has an invalid length. [ 484.776941][T12755] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2037'. [ 484.795630][T12758] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2033'. [ 485.929161][T12783] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2045'. [ 486.379059][T12795] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2049'. [ 486.471939][T12797] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2050'. [ 486.745687][T12809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2055'. [ 486.747574][T12802] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.2054'. [ 488.367834][T12840] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2064'. [ 488.608422][ T5869] Bluetooth: hci1: command 0x0406 tx timeout [ 489.456926][T12867] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2072'. [ 490.160331][T12884] FAULT_INJECTION: forcing a failure. [ 490.160331][T12884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.273661][T12884] CPU: 0 UID: 0 PID: 12884 Comm: syz.2.2077 Not tainted syzkaller #0 PREEMPT(full) [ 490.273693][T12884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 490.273707][T12884] Call Trace: [ 490.273716][T12884] [ 490.273726][T12884] dump_stack_lvl+0x189/0x250 [ 490.273757][T12884] ? __pfx____ratelimit+0x10/0x10 [ 490.273788][T12884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.273813][T12884] ? __pfx__printk+0x10/0x10 [ 490.273843][T12884] ? __might_fault+0xb0/0x130 [ 490.273887][T12884] should_fail_ex+0x414/0x560 [ 490.273930][T12884] _copy_from_iter+0x1db/0x16f0 [ 490.273956][T12884] ? rcu_is_watching+0x15/0xb0 [ 490.273980][T12884] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 490.274012][T12884] ? __pfx__copy_from_iter+0x10/0x10 [ 490.274035][T12884] ? __build_skb_around+0x257/0x3e0 [ 490.274072][T12884] ? netlink_sendmsg+0x642/0xb30 [ 490.274101][T12884] ? skb_put+0x11b/0x210 [ 490.274124][T12884] netlink_sendmsg+0x6b2/0xb30 [ 490.274166][T12884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.274201][T12884] ? aa_sock_msg_perm+0xf1/0x1d0 [ 490.274222][T12884] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 490.274245][T12884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.274277][T12884] __sock_sendmsg+0x21c/0x270 [ 490.274307][T12884] ____sys_sendmsg+0x505/0x830 [ 490.274335][T12884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.274375][T12884] ? import_iovec+0x74/0xa0 [ 490.274403][T12884] ___sys_sendmsg+0x21f/0x2a0 [ 490.274428][T12884] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.274491][T12884] ? __fget_files+0x2a/0x420 [ 490.274509][T12884] ? __fget_files+0x3a0/0x420 [ 490.274541][T12884] __x64_sys_sendmsg+0x19b/0x260 [ 490.274566][T12884] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.274600][T12884] ? __pfx_ksys_write+0x10/0x10 [ 490.274624][T12884] ? rcu_is_watching+0x15/0xb0 [ 490.274650][T12884] ? do_syscall_64+0xbe/0x3b0 [ 490.274683][T12884] do_syscall_64+0xfa/0x3b0 [ 490.274711][T12884] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.274738][T12884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.274759][T12884] ? clear_bhb_loop+0x60/0xb0 [ 490.274785][T12884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.274804][T12884] RIP: 0033:0x7fb6da18ebe9 [ 490.274822][T12884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.274840][T12884] RSP: 002b:00007fb6daf20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.274862][T12884] RAX: ffffffffffffffda RBX: 00007fb6da3c5fa0 RCX: 00007fb6da18ebe9 [ 490.274877][T12884] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 490.274890][T12884] RBP: 00007fb6daf20090 R08: 0000000000000000 R09: 0000000000000000 [ 490.274902][T12884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.274914][T12884] R13: 00007fb6da3c6038 R14: 00007fb6da3c5fa0 R15: 00007ffc0ad16318 [ 490.274949][T12884] [ 490.972686][T12889] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2079'. [ 491.030188][T12894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2081'. [ 491.656732][T12911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2087'. [ 491.851955][T12904] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.2085'. [ 492.074869][T12922] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2088'. [ 492.103229][T12920] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2090'. [ 492.667882][T12932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2094'. [ 493.598069][T12943] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2096'. [ 493.731223][T12948] openvswitch: netlink: IP tunnel dst address not specified [ 493.827297][T12945] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2098'. [ 495.345265][T12977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2108'. [ 496.187215][T13001] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2114'. [ 496.321369][T13000] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2115'. [ 497.869373][T13028] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2124'. [ 498.963428][T13050] FAULT_INJECTION: forcing a failure. [ 498.963428][T13050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.057879][T13050] CPU: 0 UID: 0 PID: 13050 Comm: syz.3.2131 Not tainted syzkaller #0 PREEMPT(full) [ 499.057910][T13050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 499.057923][T13050] Call Trace: [ 499.057934][T13050] [ 499.057945][T13050] dump_stack_lvl+0x189/0x250 [ 499.057978][T13050] ? __pfx____ratelimit+0x10/0x10 [ 499.058010][T13050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.058036][T13050] ? __pfx__printk+0x10/0x10 [ 499.058071][T13050] ? __pfx___mutex_lock+0x10/0x10 [ 499.058114][T13050] should_fail_ex+0x414/0x560 [ 499.058150][T13050] _copy_to_user+0x31/0xb0 [ 499.058180][T13050] netns_bpf_prog_query+0x25b/0x4f0 [ 499.058214][T13050] ? __pfx_netns_bpf_prog_query+0x10/0x10 [ 499.058283][T13050] __sys_bpf+0x7d6/0x870 [ 499.058317][T13050] ? __pfx___sys_bpf+0x10/0x10 [ 499.058369][T13050] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 499.058402][T13050] ? __pfx_ksys_write+0x10/0x10 [ 499.058427][T13050] ? rcu_is_watching+0x15/0xb0 [ 499.058460][T13050] __x64_sys_bpf+0x7c/0x90 [ 499.058488][T13050] do_syscall_64+0xfa/0x3b0 [ 499.058517][T13050] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.058545][T13050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.058565][T13050] ? clear_bhb_loop+0x60/0xb0 [ 499.058593][T13050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.058613][T13050] RIP: 0033:0x7fd302f8ebe9 [ 499.058633][T13050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.058651][T13050] RSP: 002b:00007fd303d75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 499.058673][T13050] RAX: ffffffffffffffda RBX: 00007fd3031c5fa0 RCX: 00007fd302f8ebe9 [ 499.058687][T13050] RDX: 0000000000000040 RSI: 0000200000000640 RDI: 0000000000000010 [ 499.058701][T13050] RBP: 00007fd303d75090 R08: 0000000000000000 R09: 0000000000000000 [ 499.058714][T13050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.058726][T13050] R13: 00007fd3031c6038 R14: 00007fd3031c5fa0 R15: 00007ffd11887e28 [ 499.058765][T13050] [ 500.241050][T13073] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2138'. [ 501.900295][T13116] lo speed is unknown, defaulting to 1000 [ 501.953956][T13116] lo speed is unknown, defaulting to 1000 [ 502.010887][T13122] wg2: entered promiscuous mode [ 502.029827][T13122] wg2: entered allmulticast mode [ 502.565179][T13140] lo speed is unknown, defaulting to 1000 [ 502.594577][T13140] lo speed is unknown, defaulting to 1000 [ 503.651233][T13168] lo speed is unknown, defaulting to 1000 [ 503.739177][T13168] lo speed is unknown, defaulting to 1000 [ 504.553352][T13190] lo speed is unknown, defaulting to 1000 [ 504.565432][T13190] lo speed is unknown, defaulting to 1000 [ 506.330306][ T5864] Bluetooth: hci1: Malformed HCI Event [ 507.020849][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.027642][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.400088][ T5864] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5 [ 507.503716][ T5864] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 508.695369][ T5864] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 509.661075][T13362] lo speed is unknown, defaulting to 1000 [ 509.770713][T13362] lo speed is unknown, defaulting to 1000 [ 510.069740][ T5864] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 511.195166][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 511.467741][T13410] lo speed is unknown, defaulting to 1000 [ 511.529155][T13410] lo speed is unknown, defaulting to 1000 [ 512.175544][ T5864] Bluetooth: hci4: unexpected event 0x03 length: 151 > 11 [ 515.389145][ T5864] Bluetooth: hci3: Malformed HCI Event [ 515.563883][T13482] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2299'. [ 515.670381][T13485] openvswitch: netlink: Flow key attr not present in new flow. [ 515.694951][T13486] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2301'. [ 516.234839][ T5864] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 516.235208][ T5864] Bluetooth: hci1: connection err: -111 [ 517.301480][T13536] lo speed is unknown, defaulting to 1000 [ 517.309808][T13536] lo speed is unknown, defaulting to 1000 [ 517.807482][T13544] ------------[ cut here ]------------ [ 517.813036][T13544] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 518.048986][T13544] WARNING: CPU: 1 PID: 13544 at kernel/bpf/verifier.c:2733 reg_bounds_sanity_check+0x6e6/0xc20 [ 518.059632][T13544] Modules linked in: [ 518.063567][T13544] CPU: 1 UID: 0 PID: 13544 Comm: syz.5.2327 Not tainted syzkaller #0 PREEMPT(full) [ 518.073293][T13544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.083556][T13544] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 518.090758][T13544] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 1f 31 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 518.111160][T13544] RSP: 0018:ffffc900041eef08 EFLAGS: 00010282 [ 518.117428][T13544] RAX: 1839eb5149e24a00 RBX: 00000000ffffdfcc RCX: 0000000000080000 [ 518.125485][T13544] RDX: ffffc9001d28a000 RSI: 00000000000094fe RDI: 00000000000094ff [ 518.133506][T13544] RBP: 00000000ffffdfcd R08: 0000000000000003 R09: 0000000000000004 [ 518.141696][T13544] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888032bf3258 [ 518.149840][T13544] R13: ffff888032bf3278 R14: ffff888032bf3290 R15: 00000000ffffdfcc [ 518.158048][T13544] FS: 00007f47d3a026c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 518.167251][T13544] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 518.173880][T13544] CR2: 0000000100000000 CR3: 0000000031810000 CR4: 00000000003526f0 [ 518.181969][T13544] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 518.191201][T13544] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 518.199743][T13544] Call Trace: [ 518.203051][T13544] [ 518.208093][T13544] reg_set_min_max+0x214/0x300 [ 518.212933][T13544] check_cond_jmp_op+0x1625/0x2910 [ 518.218651][T13544] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 518.224257][T13544] ? do_check+0x4531/0xe520 [ 518.229395][T13544] ? kfree+0x18e/0x440 [ 518.233517][T13544] do_check+0x6751/0xe520 [ 518.238511][T13544] ? __pfx_do_check+0x10/0x10 [ 518.243674][T13544] ? init_func_state+0x1ddf/0x2d20 [ 518.248932][T13544] do_check_common+0x1949/0x24f0 [ 518.253939][T13544] bpf_check+0x1746a/0x1d2e0 [ 518.258723][T13544] ? rcu_is_watching+0x15/0xb0 [ 518.263539][T13544] ? trace_sched_exit_tp+0x36/0x110 [ 518.268935][T13544] ? __lock_acquire+0xab9/0xd20 [ 518.273844][T13544] ? __mutex_trylock_common+0x153/0x260 [ 518.279554][T13544] ? __pfx___mutex_trylock_common+0x10/0x10 [ 518.285634][T13544] ? css_rstat_updated+0x23a/0x4f0 [ 518.291384][T13544] ? __lock_acquire+0xab9/0xd20 [ 518.296345][T13544] ? __pfx_bpf_check+0x10/0x10 [ 518.301158][T13544] ? ktime_get_with_offset+0x8c/0x2a0 [ 518.306613][T13544] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 518.312888][T13544] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.318181][T13544] ? ktime_get_with_offset+0x8c/0x2a0 [ 518.323613][T13544] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 518.329954][T13544] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 518.336622][T13544] ? __asan_memset+0x22/0x50 [ 518.341250][T13544] ? bpf_obj_name_cpy+0x194/0x1e0 [ 518.346336][T13544] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 518.351567][T13544] ? security_bpf_prog_load+0x7f/0x310 [ 518.357219][T13544] bpf_prog_load+0x1318/0x1930 [ 518.362044][T13544] ? __pfx_bpf_prog_load+0x10/0x10 [ 518.367337][T13544] ? bpf_lsm_bpf+0x9/0x20 [ 518.371711][T13544] ? security_bpf+0x7e/0x300 [ 518.376399][T13544] __sys_bpf+0x528/0x870 [ 518.380692][T13544] ? __pfx___sys_bpf+0x10/0x10 [ 518.385595][T13544] ? exc_page_fault+0x76/0xf0 [ 518.390337][T13544] __x64_sys_bpf+0x7c/0x90 [ 518.395453][T13544] do_syscall_64+0xfa/0x3b0 [ 518.400019][T13544] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.405319][T13544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.411434][T13544] ? clear_bhb_loop+0x60/0xb0 [ 518.416189][T13544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.422125][T13544] RIP: 0033:0x7f47d2b8ebe9 [ 518.426615][T13544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.446401][T13544] RSP: 002b:00007f47d3a02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 518.454895][T13544] RAX: ffffffffffffffda RBX: 00007f47d2dc6090 RCX: 00007f47d2b8ebe9 [ 518.463018][T13544] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 518.471091][T13544] RBP: 00007f47d2c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 518.479184][T13544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.487364][T13544] R13: 00007f47d2dc6128 R14: 00007f47d2dc6090 R15: 00007ffeb894ce58 [ 518.496028][T13544] [ 518.499090][T13544] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 518.506400][T13544] CPU: 1 UID: 0 PID: 13544 Comm: syz.5.2327 Not tainted syzkaller #0 PREEMPT(full) [ 518.515798][T13544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.525972][T13544] Call Trace: [ 518.529269][T13544] [ 518.532321][T13544] dump_stack_lvl+0x99/0x250 [ 518.536933][T13544] ? __asan_memcpy+0x40/0x70 [ 518.541538][T13544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 518.546758][T13544] ? __pfx__printk+0x10/0x10 [ 518.551391][T13544] vpanic+0x281/0x750 [ 518.555485][T13544] ? __pfx__printk+0x10/0x10 [ 518.560104][T13544] ? __pfx_vpanic+0x10/0x10 [ 518.564626][T13544] ? is_bpf_text_address+0x26/0x2b0 [ 518.569861][T13544] panic+0xb9/0xc0 [ 518.573622][T13544] ? __pfx_panic+0x10/0x10 [ 518.578064][T13544] __warn+0x31b/0x4b0 [ 518.582151][T13544] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 518.587806][T13544] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 518.593459][T13544] report_bug+0x2be/0x4f0 [ 518.597804][T13544] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 518.603473][T13544] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 518.609124][T13544] ? reg_bounds_sanity_check+0x6e8/0xc20 [ 518.614786][T13544] handle_bug+0x84/0x160 [ 518.619043][T13544] exc_invalid_op+0x1a/0x50 [ 518.623562][T13544] asm_exc_invalid_op+0x1a/0x20 [ 518.628512][T13544] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 518.634778][T13544] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 1f 31 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 518.654426][T13544] RSP: 0018:ffffc900041eef08 EFLAGS: 00010282 [ 518.660537][T13544] RAX: 1839eb5149e24a00 RBX: 00000000ffffdfcc RCX: 0000000000080000 [ 518.668546][T13544] RDX: ffffc9001d28a000 RSI: 00000000000094fe RDI: 00000000000094ff [ 518.676549][T13544] RBP: 00000000ffffdfcd R08: 0000000000000003 R09: 0000000000000004 [ 518.684792][T13544] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888032bf3258 [ 518.692775][T13544] R13: ffff888032bf3278 R14: ffff888032bf3290 R15: 00000000ffffdfcc [ 518.700807][T13544] reg_set_min_max+0x214/0x300 [ 518.705603][T13544] check_cond_jmp_op+0x1625/0x2910 [ 518.710764][T13544] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 518.716264][T13544] ? do_check+0x4531/0xe520 [ 518.720801][T13544] ? kfree+0x18e/0x440 [ 518.724902][T13544] do_check+0x6751/0xe520 [ 518.729319][T13544] ? __pfx_do_check+0x10/0x10 [ 518.734010][T13544] ? init_func_state+0x1ddf/0x2d20 [ 518.739149][T13544] do_check_common+0x1949/0x24f0 [ 518.744129][T13544] bpf_check+0x1746a/0x1d2e0 [ 518.748738][T13544] ? rcu_is_watching+0x15/0xb0 [ 518.753512][T13544] ? trace_sched_exit_tp+0x36/0x110 [ 518.758763][T13544] ? __lock_acquire+0xab9/0xd20 [ 518.763665][T13544] ? __mutex_trylock_common+0x153/0x260 [ 518.769284][T13544] ? __pfx___mutex_trylock_common+0x10/0x10 [ 518.775292][T13544] ? css_rstat_updated+0x23a/0x4f0 [ 518.780478][T13544] ? __lock_acquire+0xab9/0xd20 [ 518.785369][T13544] ? __pfx_bpf_check+0x10/0x10 [ 518.790145][T13544] ? ktime_get_with_offset+0x8c/0x2a0 [ 518.795540][T13544] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 518.801794][T13544] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.807008][T13544] ? ktime_get_with_offset+0x8c/0x2a0 [ 518.812390][T13544] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 518.818648][T13544] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 518.825262][T13544] ? __asan_memset+0x22/0x50 [ 518.829863][T13544] ? bpf_obj_name_cpy+0x194/0x1e0 [ 518.834896][T13544] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 518.840120][T13544] ? security_bpf_prog_load+0x7f/0x310 [ 518.845607][T13544] bpf_prog_load+0x1318/0x1930 [ 518.850414][T13544] ? __pfx_bpf_prog_load+0x10/0x10 [ 518.855562][T13544] ? bpf_lsm_bpf+0x9/0x20 [ 518.860368][T13544] ? security_bpf+0x7e/0x300 [ 518.865002][T13544] __sys_bpf+0x528/0x870 [ 518.869281][T13544] ? __pfx___sys_bpf+0x10/0x10 [ 518.874084][T13544] ? exc_page_fault+0x76/0xf0 [ 518.878841][T13544] __x64_sys_bpf+0x7c/0x90 [ 518.883298][T13544] do_syscall_64+0xfa/0x3b0 [ 518.887832][T13544] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.893051][T13544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.899163][T13544] ? clear_bhb_loop+0x60/0xb0 [ 518.903976][T13544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.910243][T13544] RIP: 0033:0x7f47d2b8ebe9 [ 518.914674][T13544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.934325][T13544] RSP: 002b:00007f47d3a02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 518.942804][T13544] RAX: ffffffffffffffda RBX: 00007f47d2dc6090 RCX: 00007f47d2b8ebe9 [ 518.950803][T13544] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 518.958798][T13544] RBP: 00007f47d2c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 518.966793][T13544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.974784][T13544] R13: 00007f47d2dc6128 R14: 00007f47d2dc6090 R15: 00007ffeb894ce58 [ 518.983256][T13544] [ 518.986633][T13544] Kernel Offset: disabled [ 518.990967][T13544] Rebooting in 86400 seconds..