last executing test programs: 5m33.496637895s ago: executing program 3 (id=2915): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x1f, 0x10, 0x8, 0x5, 0x0, 0xffffffc0, 0x0}) 5m33.453724256s ago: executing program 3 (id=2918): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0xfffffffd, 0xe}, {0x10000002, 0x0, 0x4, 0x2}]}, 0x94) close(0x3) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = semget$private(0x0, 0x6, 0x0) semtimedop(r8, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r8, &(0x7f00000000c0)=[{0x4, 0x0, 0x800}, {0x2}], 0x2) semop(r8, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) semtimedop(r8, &(0x7f0000000000)=[{0x3, 0x0, 0x800}, {0x4, 0x5}], 0x2, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) r10 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1241, 0x0) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000380)={'wg1\x00', 0x600}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0) bind$llc(r9, &(0x7f0000000580)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) close(r9) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100627269646765000020000280050016000200000008001d00090000000c001e00ef00000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socket(0x2, 0x80805, 0x0) 5m30.355228295s ago: executing program 3 (id=2950): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001000)=[{{&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @remote}, 0x1, 0x2, 0x1, 0x2}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="88fe9d4cb22cd92ff64b890a0160eba9176998ffbf96e51fe645f2c7c019b90c191df1913e9a0cde", 0x28}, {&(0x7f0000000300)="353587c0936853ade0a8d997e1ac622d8abbb24bd02c005a86f80bc2f3148b8769753710af0a5914de3f820aa390fc73db943d95a679ba64311a04a5", 0x3c}, {&(0x7f00000003c0)="94f5acb6ef82d540b66c4a8cd679de7c8244d4e7f5b422066a3a6c74cc4db57e9d214adad02087", 0x27}], 0x3, &(0x7f0000000580)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x80}}, @mark={{0x14, 0x1, 0x24, 0xc}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18}}], 0x90}}, {{&(0x7f0000000740)=@l2tp6={0xa, 0x0, 0x4, @mcast1, 0xa0e1, 0x4}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000007c0)="7cf63a77d2b9fd5b54b57624db90c2f4cfe8167d7643104fffac8e6ccf825ab37ce97a3728ed323c17275bcbb03bd981fa236bd126d49161fd621c6fa7d3004045c121167ae80d1b761a2c0dd805964c4b6e7ce8c377d0b4edafe082be03217c4039c64e167b13de36465329ddf230647ecc7614d13725f739ea2fcdbf34fe52564a0f2395a1161a5a750f42ba02f3aba7f545ea1dddb5013e627de4ed8f6e8112221baea77e2410edc89e7b6101421b5d553119196c34feb07de7eeb373c61d7494845f9f21674b53da0351d0b544c514", 0xd1}, {&(0x7f00000008c0)="0a98561850e7db5af0bf3f9fa31cbb4cbcf58c27ff08685aa35e318713c579173ae49c6be312c2077563c7e2d6abf400aef07497a55fe491c31a0cf280a0629b500d995a7da6438e03c0f8b93292cfeaa9424c82c0753052851252ed8c362a635465a097adc21a62", 0x68}, {&(0x7f0000000640)="fa4f4e81c225ef1b481147209206eed0362ba7f96429ac112d7085d500ee3f32e31a897311d9cdff", 0x28}, {&(0x7f0000000940)="7f62e10ad4fd7d9d186959a222f9ee32ee7497e731f5e942d9d3ffe8410e927012b7cb5d80b07f307a066e1eac177a461f27ab5202b3418d152c3010a5761af86f9701de20ad1c1e018565e3b35a98ae5c06cf0ee1eaf4f437dd7c47f7efb1fb4d13ee0df9bf29368798eb278adc83638a0eaae5938447", 0x77}, {&(0x7f00000009c0)="657d73ea56e68d551454f0", 0xb}], 0x5, &(0x7f0000000b80)=[@txtime={{0x18, 0x1, 0x3d, 0xe}}, @mark={{0x14, 0x1, 0x24, 0x972}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffe}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffff77}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0xa8}}, {{&(0x7f0000000c40)=@l2={0x1f, 0x3, @any, 0x6, 0x1}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000a00)="d459ee1939f447de9c0222755e0db6d1957f0892d187d4762ad6cd48ce7b5609c50e400c5949c04d2d651fcb1e270766e2e7a9b090", 0x35}, {&(0x7f0000000cc0)="cc", 0x1}, {&(0x7f0000000d00)="55e91cffb369e44ee53bbe50e7f7d440578bdf3a2049fd9eaf71692b18541300a7914a3e71afe0ba8acb9ec672a046f5ef7c392232a753f72d429f4e21be75d8a300c49325fb7b2e9a235b61e7e26c180078c2eaa0ebd839f900735fb66b090815a23e31d9e0c80d47ec60500a385a1c3a0142e55193a644109e903b798d092fe91a7eb24dd4ca7be482d6027dbff78b3f9861d9017b6aed3fdd7428d2460458c5c8bcd9ed39c67a58d4fe12c7dc0298cbe598669975c85021a984d84c15fb0b1f75ff486d4f7a1237186d37af8bce3801846c053e3db391786b7c5ba416195d5afb7899e357877ef698", 0xea}, {&(0x7f0000000e00)="1ed67c394213fb69a99f0327653c40ee90016fd9b881840c2675ac70896a67939b", 0x21}, {&(0x7f0000000e40)="a16cdd74e3bc6a6037284a86115b28a6f7228dfd3aac2a1dd76cb87a9a1739f0c2d95c869141e7a85b02c96d", 0x2c}, {&(0x7f0000000e80)="a100a9aaa707a741376025b9d795cf4fa6a307a00ba45d5c386e20d9feff4cc6ba2272b11c8f6070202af55ca1903e09f157b1d1a2eb98936ac89ce080843fc93be618bd2b70ba52961252d1c88eb9393f8e9099aabc6bcc590530f3217e445d6ef3f2f9885d8239fb21c7681d092481", 0x70}], 0x6, &(0x7f0000000f80)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffd}}, @timestamping={{0x14, 0x1, 0x25, 0x4d4e4cd}}, @mark={{0x14, 0x1, 0x24, 0x4c55}}, @timestamping={{0x14, 0x1, 0x25, 0xf}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x78}}], 0x3, 0x8009) 5m30.270563396s ago: executing program 3 (id=2952): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x28, 0x1, 0x9, 0x0, 0x0, 0x7, 0x2041e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x100, 0x10000, 0x8, 0x0, 0x9, 0x2020005, 0xb, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x20000000102, 0x200) semop(r0, &(0x7f0000000240)=[{0x1, 0x20, 0x800}, {0x0, 0xe65b}], 0x2) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000700)=""/236) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x1, 0x50c, &(0x7f0000001080)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r3, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x36f0516f) 5m29.257717703s ago: executing program 3 (id=2974): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000e50000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30190000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRESHEX=r4, @ANYBLOB="47a11155fe173e1c242b25d67270940cc44bad5bd23b2dbe3110afcd00bcd384a15e91c8cfc961f9b8eff44c38c1f5d05c940db53f567f5402f20a0c1647ea04c4c378a81a344b153f033b9d57c26d2fc2d0957ec463ccf28fe2206bc30fe3455863cf12082adc3862f31de56e119dff17c0e8b90f38e6b899d77f83052d45ad4d6d9f0d76a5b0c68d21cb6b8eb7"], 0xfc}}, 0x804) mq_timedreceive(r0, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) 5m28.870843005s ago: executing program 3 (id=2985): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) r4 = socket$key(0xf, 0x3, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x0, 0x2, 0xc, 0x1, 0x18, 0xfffffffffffffffc}, @exit, @exit, @exit, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r6}, 0x10) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x572, &(0x7f0000000980)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x54, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x88, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {}, {0x5, 0xf}}, [@TCA_RATE={0x5, 0x5, {0x9, 0x7}}, @filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_ACT={0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x81, 0x8, 0xfff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}}, 0x20040054) 5m28.830581485s ago: executing program 32 (id=2985): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) r4 = socket$key(0xf, 0x3, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x0, 0x2, 0xc, 0x1, 0x18, 0xfffffffffffffffc}, @exit, @exit, @exit, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r6}, 0x10) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x572, &(0x7f0000000980)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x54, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x88, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {}, {0x5, 0xf}}, [@TCA_RATE={0x5, 0x5, {0x9, 0x7}}, @filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_ACT={0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x81, 0x8, 0xfff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}}, 0x20040054) 4m23.014688309s ago: executing program 1 (id=4016): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5b1d071468882d03, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x3}, 0x10) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 4m23.014262189s ago: executing program 1 (id=4017): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x71b5, &(0x7f0000000040)={0x0, 0x9272, 0xc000, 0x1, 0xae}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8054}, 0x4af584f715520309) io_uring_enter(r1, 0xf00, 0x2, 0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) 4m22.909690899s ago: executing program 1 (id=4018): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0xbc3, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x2000, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) 4m22.82725767s ago: executing program 1 (id=4019): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x3}, 0x10) 4m22.74431182s ago: executing program 1 (id=4022): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0xb, 0xd, 0x204, &(0x7f0000000080)="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"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x7) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) r5 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000700)=r4, 0x1) syz_io_uring_setup(0x60db, &(0x7f0000000400)={0x0, 0xc890, 0x4000, 0x4, 0x2000, 0x0, r5}, 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095", @ANYBLOB="edfd7692c5fcc0538ea3105260f10587b2bdb5166df0e7d2b1b64ecb8047e9a0ea319dc96105e5239a51663c1ec5ac074b8c7feb931c567ddde6d23d454f88c8afffa87406ef830edb7f9ac9d098b5ce06eb08fc061f42815af02841ef8df0450caba9b0e493e9f5cc9bea582287dbd386cab8b7cfd4aac83259674fe73250f4addeb8e9d5b2a7521f12adaed4cde99ccd851307edeca232da71", @ANYRES8=r6], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 4m21.815012667s ago: executing program 1 (id=4046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (fail_nth: 11) 4m6.855802643s ago: executing program 33 (id=4046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (fail_nth: 11) 2.867967122s ago: executing program 2 (id=9482): perf_event_open(0x0, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000002c0)={0x1, 0x4, 0x1000400000000, 0x10000000000008}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000040), 0xfe, 0x508, &(0x7f0000000500)="$eJzs3U1sI1cdAPD/TD7sTdMmhR4AFbqUwoJWayfeNqp6YTlVCFVC9MhhGxInitaJo9gpTVik7JE7EpU4wYkzByQOSD1xR+IANy7lgFRgBWqQOLjyeJzNlxtrG9u78e8njebNe+P5v7ez8571rMwLYGxdj4iDiJiOiHciYi7PT/It7nS29nkfP7y/cvjw/koSrdbb/0qy8nZe9oHaTzvnR8Qz+TWLEfGDNyN+lJwK+ueIxt7+veVarbqTZ5Wbm9vlxt7+rY3N5fXqenWrUllaXFp4/fZrlUtr60ubv/3oWkT84fdf/vBPB9/6Sbtas3nZUTsuWafpU0dx2iYj4nuDCDYCE3l7ph/nw4/1IS5TGhGfi4iXs+d/Liayu3nSydv07SHWDgAYhFZrLlpzx48BgKsuzebAkrSUzwXMRpqWSp05vBdiJq3VG82ba/XdrdXOXNl8TKVrG7XqQj5XOB9TydrGZHUxS3ePa9XKqePbEfF8RPy8cC07Lq3Ua6uj/OIDAGPsmVPj/38LnfEfALjiio+ShVHWAwAYnuKoKwAADJ3xHwDGj/EfAMaP8R8Axo/xHwDGj/EfAMbK9996q721DvP3X6++u7d7r/7urdVq405+ys52ab1eX8/e2bN50fVq9fr24qux+165WW00y429/bub9d2t5t3svd53q1MDbxEAcJHnX/rgr0lEHLxxLdvi2Pv+LxyrXxx07YBBSkddAWBkJkZdAWBkzq72BYwL8/HAsSV6HxzLLp5JnPZ+X5dPrRsKT54bX/wM8//AU838P4yvx5v/910ergLz/zC+Wq3Emv8AMGbM8QPJBeXHf/9faB076O/3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiSZrMtSUv5WuCzkaalUsSzETEfU8naRq26EBHPRcRfClOF9vFiRFg3CACeZuk/knz9rxtzr8yeLp0u/K+Q7SPix798+xfvLTebO4sR08m/j/Kb7+f5lVHUHwC4SHec7o7jXR8/vL/S3YZZn4++01lctB33MN86JZMxme2L2VzDzH+S/Lij/X1l4hLiHzyIiC+c1/4kmxuZz1c+PR2/HfvZocZPT8RPs7LOvv1v8flLqAuMmw/a/U/rvOcvjevZ/vznv5j1UJ9dt/87PNP/pUf930SP/u96vzFe/eN3z2S25jplDyK+NBlx2L34sf6nGz/pEf+VPuP/7cWvvNyrrPWriBtxXvuTE7HKzc3tcmNv/9bG5vJ6db26VaksLS4tvH77tUo5m6Mud2eqz/rnGzef6xW/3f6ZHvGLF7T/6322/9f/f+eHX/2U+N/82vn3/4VPid8eE7/RZ/zlmd8Ve5W146/2aP9F9/9mn/E//Pv+ap+nAgBD0Njbv7dcu1Pd6SRqA0ukgw+RJZKIgwGHeJQo/OZnbw4r1gATcZTT/W/xhFRMYnSJ0fZLwOA9euhHXRMAAAAAAAAAAAAAAKCXYfw50ajbCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNX1SQAAAP//gILP2Q==") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) r1 = syz_open_dev$sg(0x0, 0x80000000, 0x84100) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x7fff0026}, {0x6, 0x6, 0x76, 0x5}]}) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sync() r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="00000000000000ffff00000000000000850000000c81b3716f9317dc5a774ad1b342857bcaa40000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c00"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe, 0x4}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}}, 0x0) sync() 2.421807385s ago: executing program 5 (id=9489): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffdc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000900)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x0, 0x0, r2, &(0x7f0000000340)="02", 0x1, 0x7, 0x0, 0x2}]) 1.48033597s ago: executing program 5 (id=9501): syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, r0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x2}}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x854}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x1d}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x4044814) 1.245605942s ago: executing program 5 (id=9502): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="a18300000000000000000500"], 0x38}}, 0x20008080) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x2}}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x854}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x1d}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x4044814) 1.219529422s ago: executing program 4 (id=9503): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@enum={0xe, 0x1, 0x0, 0x6, 0x4, [{0xa, 0x100}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @volatile={0x0, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x46, 0x0, 0x8, 0x1}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getgroups(0x2, &(0x7f0000000440)=[r3, r4]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000680)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r6, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x4048001) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x8, 0x2, @dev}]}, 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001500010000000000000074a002000000", @ANYRES32=r10], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r11, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close(r11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1.061088743s ago: executing program 4 (id=9504): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000ff0f000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0xa004, 0x10000, 0x0, 0x4, 0xa, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r8, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write$UHID_SET_REPORT_REPLY(r8, &(0x7f00000007c0)=ANY=[], 0xffe0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}}, 0x810) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000980)='sys_enter\x00'}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 855.509395ms ago: executing program 2 (id=9508): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 741.243685ms ago: executing program 6 (id=9511): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20f4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) migrate_pages(0x0, 0xfc, 0x0, &(0x7f0000000240)=0x1) 740.464405ms ago: executing program 4 (id=9512): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 719.610376ms ago: executing program 0 (id=9513): syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, r0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x2}}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x854}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x1d}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x4044814) 689.307036ms ago: executing program 5 (id=9514): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@enum={0xe, 0x1, 0x0, 0x6, 0x4, [{0xa, 0x100}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @volatile={0x0, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x46, 0x0, 0x8, 0x1}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getgroups(0x2, &(0x7f0000000440)=[r3, r4]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000680)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r6, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x4048001) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x8, 0x2, @dev}]}, 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001500010000000000000074a002000000", @ANYRES32=r10], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r11, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close(r11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 679.577106ms ago: executing program 6 (id=9515): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 639.956356ms ago: executing program 6 (id=9516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 595.814586ms ago: executing program 6 (id=9517): open(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x40c0080) 430.569487ms ago: executing program 5 (id=9518): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffdc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000900)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000340)="02", 0x1, 0x7, 0x0, 0x2}]) 386.439107ms ago: executing program 6 (id=9519): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@restrict={0x5, 0x0, 0x0, 0xb, 0x1}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x5b, 0x0, 0x80, 0x4}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x1}, @func={0xa, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000380)=""/84, 0x50, 0x54, 0x1}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x18) getpgrp(0x0) r5 = accept(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) shutdown(r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x0, 0x6, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x7, 0x8000, 0x401, 0x8}}) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@gettclass={0x24, 0x2a, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xf, 0x8}, {0x9, 0x5}, {0xe}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 316.333028ms ago: executing program 2 (id=9520): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="06000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r2, &(0x7f00000010c0)=[{&(0x7f0000000080)=""/4089, 0xff9}], 0x1, 0x833, 0xffff) 314.716098ms ago: executing program 6 (id=9521): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r2, 0xee72) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r1, 0x5423, 0x0) 279.745838ms ago: executing program 0 (id=9522): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0}, 0x137}, {{&(0x7f0000000740)=@rc={0x1f, @fixed}, 0x80, 0x0}, 0x2}], 0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={r3, 0x8}, &(0x7f0000000140)=0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0}, 0x137}, {{&(0x7f0000000740)=@rc={0x1f, @fixed}, 0x80, 0x0}, 0x2}], 0x2, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) (async) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={r3, 0x8}, &(0x7f0000000140)=0x8) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) 230.478199ms ago: executing program 2 (id=9523): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x61, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0xb, 0x20005, 0xb, 0x0, 0x3, 0x0, 0x20000006}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000002c0)={0x1, 0x4, 0x1000400000000, 0x10000000000008}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000040), 0xfe, 0x508, &(0x7f0000000500)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) r1 = syz_open_dev$sg(0x0, 0x80000000, 0x84100) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x7fff0026}, {0x6, 0x6, 0x76, 0x5}]}) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sync() r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="00000000000000ffff00000000000000850000000c81b3716f9317dc5a774ad1b342857bcaa40000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c00"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe, 0x4}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}}, 0x0) sync() 206.733549ms ago: executing program 0 (id=9524): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x1c, 0x0, 0x0}) 189.121279ms ago: executing program 4 (id=9525): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20f4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) migrate_pages(0x0, 0xfc, 0x0, &(0x7f0000000240)=0x1) 178.866269ms ago: executing program 0 (id=9526): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x8, 0x7, 0x3, 0x2, {{0x1d, 0x4, 0x3, 0x8, 0x74, 0x68, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x23, 0xfa, [@dev={0xac, 0x14, 0x14, 0x1a}, @multicast2, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @timestamp_addr={0x44, 0x3c, 0x29, 0x1, 0x6, [{@local, 0x9}, {@broadcast, 0x7}, {@initdev={0xac, 0x1e, 0x4, 0x0}, 0x2}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x5}, {@empty}, {@multicast1, 0x401}]}]}}}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000780)='netlink_extack\x00', 0xffffffffffffffff, 0x0, 0xb0}, 0x18) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="54010000100013070000000006000000fe8000000000000000000000000000aafe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000ac1414aa0000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000020004000000000000000000620014"], 0x154}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 171.023269ms ago: executing program 4 (id=9527): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x71b5, &(0x7f0000000040)={0x0, 0x926e, 0xc000, 0x1, 0xae}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8054}, 0x4af584f715520309) io_uring_enter(r0, 0xf00, 0x2, 0x17, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x3, 0x800, 0x0, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f0000001040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200, 0x1}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1600) 159.854229ms ago: executing program 2 (id=9528): mount$tmpfs(0x0, 0x0, 0x0, 0x401, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r2, 0xffffffffffffffff, 0x1d, 0x0, @val=@perf_event={0x5}}, 0x18) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x1}}], 0x30}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r8}]}]}, 0x28}}, 0x0) mount$nfs(&(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2001000, &(0x7f00000000c0)={[{'/proc/sys/fs/binfmt_misc/register\x00'}, {'$'}, {'/proc/sys/fs/binfmt_misc/register\x00'}, {'$'}], [{@subj_type={'subj_type', 0x3d, '/proc/sys/fs/binfmt_misc/register\x00'}}, {@permit_directio}, {@fowner_eq}, {@obj_user}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@uid_gt={'uid>', r8}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@hash}, {@context={'context', 0x3d, 'system_u'}}]}) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x8000000000000001, &(0x7f0000000240)=0x1) write$binfmt_register(r0, &(0x7f0000000340)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x1, 0x3a, '$', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x29) 146.800369ms ago: executing program 0 (id=9529): open(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 111.541949ms ago: executing program 5 (id=9530): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) semtimedop(0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000a80)='kfree\x00', r4}, 0x18) bind$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r7}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x4000) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0) ioctl$int_out(r8, 0x2, &(0x7f0000000080)) r9 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r9) 66.58697ms ago: executing program 0 (id=9531): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 65.83438ms ago: executing program 2 (id=9532): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r5, 0x4734}}, 0x10) close_range(r2, r2, 0x0) munmap(&(0x7f0000004000/0x2000)=nil, 0x2000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TUNATTACHFILTER(r6, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) 0s ago: executing program 4 (id=9533): capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000080)={0x6, 0x1, 0x2, 0x0, 0xffffffff, 0x40}) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080006000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24001e00680009360300000000000000000a0000000000000004000b00ef33010001000000c0b429c745938e28ad6745c86716267ba3e0487d22373cd575c264e9a3563632c73539a43cd1c22f59c28a6f8226707bc18995a91e686b7f0936077ac4766b0f83d2b426ada8e2a9851b509b1ec1ea036857848200c5a537f3"], 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000380)="b9ff03006043778cff9e14f086dd07", 0x0, 0x209, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) connect$netlink(r5, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x80000}, 0xc) (async, rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) (async, rerun: 64) epoll_create1(0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e00000006000000000400000004000010000000", @ANYRES32, @ANYBLOB="01f0ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000300"/28], 0x50) (async) r6 = socket$kcm(0xa, 0x2, 0x73) recvmsg$kcm(r6, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x2140) (async, rerun: 32) socket$inet6(0x10, 0x3, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r7}, 0x38) (async, rerun: 32) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x2) (rerun: 32) socket(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 275] random: crng reseeded on system resumption [ 512.356051][T27288] syzkaller1: entered promiscuous mode [ 512.361546][T27288] syzkaller1: entered allmulticast mode [ 512.379944][T27292] siw: device registration error -23 [ 512.576665][T27316] siw: device registration error -23 [ 512.645904][T27328] FAULT_INJECTION: forcing a failure. [ 512.645904][T27328] name failslab, interval 1, probability 0, space 0, times 0 [ 512.658647][T27328] CPU: 1 UID: 0 PID: 27328 Comm: syz.5.8501 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 512.658750][T27328] Tainted: [W]=WARN [ 512.658756][T27328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 512.658767][T27328] Call Trace: [ 512.658772][T27328] [ 512.658778][T27328] __dump_stack+0x1d/0x30 [ 512.658796][T27328] dump_stack_lvl+0xe8/0x140 [ 512.658845][T27328] dump_stack+0x15/0x1b [ 512.658859][T27328] should_fail_ex+0x265/0x280 [ 512.658876][T27328] should_failslab+0x8c/0xb0 [ 512.658900][T27328] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 512.658929][T27328] ? __d_alloc+0x3d/0x340 [ 512.658956][T27328] __d_alloc+0x3d/0x340 [ 512.659059][T27328] d_alloc_parallel+0x58/0xc70 [ 512.659076][T27328] ? __rcu_read_unlock+0x4f/0x70 [ 512.659102][T27328] ? __d_lookup+0x316/0x340 [ 512.659150][T27328] ? default_pointer+0xf2/0x5e0 [ 512.659271][T27328] __lookup_slow+0x8c/0x250 [ 512.659288][T27328] lookup_noperm+0xc9/0x180 [ 512.659303][T27328] simple_start_creating+0x97/0x120 [ 512.659327][T27328] debugfs_start_creating+0xe9/0x160 [ 512.659411][T27328] __debugfs_create_file+0x6b/0x330 [ 512.659428][T27328] debugfs_create_file_full+0x3f/0x60 [ 512.659449][T27328] ? __pfx_bond_setup+0x10/0x10 [ 512.659513][T27328] ref_tracker_dir_debugfs+0x100/0x1e0 [ 512.659550][T27328] alloc_netdev_mqs+0x1a7/0xa50 [ 512.659639][T27328] rtnl_create_link+0x239/0x710 [ 512.659727][T27328] rtnl_newlink_create+0x14c/0x620 [ 512.659838][T27328] ? security_capable+0x83/0x90 [ 512.659867][T27328] ? netlink_ns_capable+0x86/0xa0 [ 512.659936][T27328] rtnl_newlink+0xf29/0x12d0 [ 512.659965][T27328] ? cmp_ex_search+0x25/0x40 [ 512.659982][T27328] ? bsearch+0x95/0xc0 [ 512.660003][T27328] ? __pfx_cmp_ex_search+0x10/0x10 [ 512.660021][T27328] ? rep_movs_alternative+0xf/0x90 [ 512.660041][T27328] ? __memcg_slab_free_hook+0x135/0x230 [ 512.660133][T27328] ? __rcu_read_unlock+0x4f/0x70 [ 512.660153][T27328] ? avc_has_perm_noaudit+0x1b1/0x200 [ 512.660171][T27328] ? cred_has_capability+0x210/0x280 [ 512.660278][T27328] ? selinux_capable+0x31/0x40 [ 512.660318][T27328] ? security_capable+0x83/0x90 [ 512.660344][T27328] ? ns_capable+0x7d/0xb0 [ 512.660374][T27328] ? __pfx_rtnl_newlink+0x10/0x10 [ 512.660393][T27328] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 512.660415][T27328] netlink_rcv_skb+0x123/0x220 [ 512.660530][T27328] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 512.660615][T27328] rtnetlink_rcv+0x1c/0x30 [ 512.660699][T27328] netlink_unicast+0x5c0/0x690 [ 512.660726][T27328] netlink_sendmsg+0x58b/0x6b0 [ 512.660743][T27328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.660767][T27328] __sock_sendmsg+0x145/0x180 [ 512.660866][T27328] ____sys_sendmsg+0x31e/0x4e0 [ 512.660896][T27328] ___sys_sendmsg+0x17b/0x1d0 [ 512.660923][T27328] __x64_sys_sendmsg+0xd4/0x160 [ 512.660995][T27328] x64_sys_call+0x191e/0x3000 [ 512.661044][T27328] do_syscall_64+0xd2/0x200 [ 512.661060][T27328] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 512.661084][T27328] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 512.661116][T27328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.661155][T27328] RIP: 0033:0x7f6957f2efc9 [ 512.661167][T27328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.661182][T27328] RSP: 002b:00007f695698f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.661198][T27328] RAX: ffffffffffffffda RBX: 00007f6958185fa0 RCX: 00007f6957f2efc9 [ 512.661208][T27328] RDX: 0000000004004090 RSI: 0000200000000140 RDI: 0000000000000003 [ 512.661290][T27328] RBP: 00007f695698f090 R08: 0000000000000000 R09: 0000000000000000 [ 512.661300][T27328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.661311][T27328] R13: 00007f6958186038 R14: 00007f6958185fa0 R15: 00007ffee88658d8 [ 512.661405][T27328] [ 513.033355][T27314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.041818][T27314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.046538][T27328] bond1: option arp_interval: invalid value (18446744073004543351) [ 513.057470][T27328] bond1: option arp_interval: allowed values 0 - 2147483647 [ 513.065645][T27328] bond1 (unregistering): Released all slaves [ 513.092638][T27331] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 513.103396][T27331] bond3 (unregistering): Released all slaves [ 513.207914][T27348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.224884][T27348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.245451][T27350] siw: device registration error -23 [ 513.369213][T27356] block device autoloading is deprecated and will be removed. [ 513.427846][T27360] can0: slcan on ptm1. [ 513.432150][ T4245] Bluetooth: hci0: command 0x1003 tx timeout [ 513.432173][T14105] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 513.468563][T27360] can0 (unregistered): slcan off ptm1. [ 513.474235][T27360] Falling back ldisc for ptm1. [ 513.715285][T27379] __nla_validate_parse: 8 callbacks suppressed [ 513.715304][T27379] netlink: 19 bytes leftover after parsing attributes in process `syz.4.8520'. [ 513.748591][T27385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8522'. [ 513.757669][T27385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8522'. [ 513.771132][T27381] siw: device registration error -23 [ 514.081185][T27396] Set syz1 is full, maxelem 65536 reached [ 514.098288][T27404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.106964][T27404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.140962][T27408] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8533'. [ 514.160686][T27408] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8533'. [ 514.287836][T27418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8537'. [ 514.490880][T27433] siw: device registration error -23 [ 514.518285][T27437] syzkaller1: entered promiscuous mode [ 514.523879][T27437] syzkaller1: entered allmulticast mode [ 514.534185][T27441] FAULT_INJECTION: forcing a failure. [ 514.534185][T27441] name failslab, interval 1, probability 0, space 0, times 0 [ 514.546896][T27441] CPU: 1 UID: 0 PID: 27441 Comm: syz.6.8547 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 514.546933][T27441] Tainted: [W]=WARN [ 514.546941][T27441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 514.547030][T27441] Call Trace: [ 514.547037][T27441] [ 514.547046][T27441] __dump_stack+0x1d/0x30 [ 514.547071][T27441] dump_stack_lvl+0xe8/0x140 [ 514.547095][T27441] dump_stack+0x15/0x1b [ 514.547115][T27441] should_fail_ex+0x265/0x280 [ 514.547138][T27441] should_failslab+0x8c/0xb0 [ 514.547218][T27441] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 514.547250][T27441] ? __alloc_skb+0x101/0x320 [ 514.547278][T27441] __alloc_skb+0x101/0x320 [ 514.547306][T27441] netlink_alloc_large_skb+0xbf/0xf0 [ 514.547365][T27441] netlink_sendmsg+0x3cf/0x6b0 [ 514.547402][T27441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.547419][T27441] __sock_sendmsg+0x145/0x180 [ 514.547445][T27441] ____sys_sendmsg+0x31e/0x4e0 [ 514.547556][T27441] ___sys_sendmsg+0x17b/0x1d0 [ 514.547593][T27441] __x64_sys_sendmsg+0xd4/0x160 [ 514.547620][T27441] x64_sys_call+0x191e/0x3000 [ 514.547669][T27441] do_syscall_64+0xd2/0x200 [ 514.547692][T27441] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 514.547785][T27441] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 514.547818][T27441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.547843][T27441] RIP: 0033:0x7f93bbf8efc9 [ 514.547856][T27441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.547872][T27441] RSP: 002b:00007f93ba9ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.547963][T27441] RAX: ffffffffffffffda RBX: 00007f93bc1e5fa0 RCX: 00007f93bbf8efc9 [ 514.547975][T27441] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 514.547999][T27441] RBP: 00007f93ba9ef090 R08: 0000000000000000 R09: 0000000000000000 [ 514.548014][T27441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.548115][T27441] R13: 00007f93bc1e6038 R14: 00007f93bc1e5fa0 R15: 00007fff6d073a58 [ 514.548135][T27441] [ 514.790568][T27446] can0: slcan on ptm0. [ 514.815676][T27452] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8553'. [ 514.857296][T27458] random: crng reseeded on system resumption [ 514.973561][T27446] can0 (unregistered): slcan off ptm0. [ 514.980306][T27446] Falling back ldisc for ptm0. [ 515.001053][T27466] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8559'. [ 515.172922][T27473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8561'. [ 515.237034][T27473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8561'. [ 515.435348][T27500] random: crng reseeded on system resumption [ 515.598203][T27510] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 515.637699][T27510] bond1 (unregistering): Released all slaves [ 515.704830][T27517] syzkaller1: entered promiscuous mode [ 515.710446][T27517] syzkaller1: entered allmulticast mode [ 515.802960][T27519] random: crng reseeded on system resumption [ 516.203519][T27553] random: crng reseeded on system resumption [ 516.272585][T27535] Set syz1 is full, maxelem 65536 reached [ 516.290893][T10467] Bluetooth: hci0: Frame reassembly failed (-84) [ 516.315136][T27539] Bluetooth: hci0: Frame reassembly failed (-90) [ 516.489785][ T270] Bluetooth: hci1: Frame reassembly failed (-84) [ 516.584208][T27593] veth1_to_batadv: entered promiscuous mode [ 516.590819][T27593] batadv_slave_0: entered promiscuous mode [ 516.596790][T27593] batadv_slave_0: left promiscuous mode [ 516.611142][T27593] veth1_to_batadv: left promiscuous mode [ 516.621045][ T29] kauditd_printk_skb: 543 callbacks suppressed [ 516.621074][ T29] audit: type=1326 audit(2000000184.478:38912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27590 comm="syz.5.8609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6957f2efc9 code=0x7ffc0000 [ 516.659041][ T29] audit: type=1326 audit(2000000184.478:38913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27590 comm="syz.5.8609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f6957f2efc9 code=0x7ffc0000 [ 516.682546][ T29] audit: type=1326 audit(2000000184.478:38914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27590 comm="syz.5.8609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6957f2efc9 code=0x7ffc0000 [ 516.706187][ T29] audit: type=1326 audit(2000000184.478:38915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27590 comm="syz.5.8609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6957f2efc9 code=0x7ffc0000 [ 516.729624][ T29] audit: type=1326 audit(2000000184.499:38916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27590 comm="syz.5.8609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6957f2efc9 code=0x7ffc0000 [ 516.753667][ T29] audit: type=1326 audit(2000000184.520:38917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27590 comm="syz.5.8609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6957f2efc9 code=0x7ffc0000 [ 517.104453][ T29] audit: type=1400 audit(2000000184.972:38918): avc: denied { ioctl } for pid=27628 comm="syz.2.8624" path="socket:[97739]" dev="sockfs" ino=97739 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 517.364078][T27647] FAULT_INJECTION: forcing a failure. [ 517.364078][T27647] name failslab, interval 1, probability 0, space 0, times 0 [ 517.376766][T27647] CPU: 1 UID: 0 PID: 27647 Comm: syz.5.8631 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 517.376791][T27647] Tainted: [W]=WARN [ 517.376862][T27647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 517.376873][T27647] Call Trace: [ 517.376878][T27647] [ 517.376884][T27647] __dump_stack+0x1d/0x30 [ 517.376902][T27647] dump_stack_lvl+0xe8/0x140 [ 517.376918][T27647] dump_stack+0x15/0x1b [ 517.376932][T27647] should_fail_ex+0x265/0x280 [ 517.377004][T27647] should_failslab+0x8c/0xb0 [ 517.377057][T27647] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 517.377081][T27647] ? __d_alloc+0x3d/0x340 [ 517.377107][T27647] __d_alloc+0x3d/0x340 [ 517.377135][T27647] d_alloc_parallel+0x58/0xc70 [ 517.377152][T27647] ? lockref_get_not_dead+0x120/0x1c0 [ 517.377277][T27647] ? __rcu_read_unlock+0x4f/0x70 [ 517.377298][T27647] __lookup_slow+0x8c/0x250 [ 517.377315][T27647] lookup_slow+0x3c/0x60 [ 517.377330][T27647] link_path_walk+0x753/0x900 [ 517.377357][T27647] path_lookupat+0x63/0x2a0 [ 517.377420][T27647] filename_lookup+0x147/0x340 [ 517.377497][T27647] vfs_statx+0x9d/0x390 [ 517.377522][T27647] __se_sys_newlstat+0x69/0x280 [ 517.377588][T27647] ? fput+0x8f/0xc0 [ 517.377601][T27647] ? ksys_write+0x192/0x1a0 [ 517.377756][T27647] __x64_sys_newlstat+0x31/0x40 [ 517.377782][T27647] x64_sys_call+0x1b88/0x3000 [ 517.377842][T27647] do_syscall_64+0xd2/0x200 [ 517.377858][T27647] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 517.377881][T27647] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 517.377948][T27647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.377970][T27647] RIP: 0033:0x7f6957f2efc9 [ 517.377981][T27647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.378059][T27647] RSP: 002b:00007f695698f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 517.378073][T27647] RAX: ffffffffffffffda RBX: 00007f6958185fa0 RCX: 00007f6957f2efc9 [ 517.378083][T27647] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001800 [ 517.378093][T27647] RBP: 00007f695698f090 R08: 0000000000000000 R09: 0000000000000000 [ 517.378102][T27647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.378112][T27647] R13: 00007f6958186038 R14: 00007f6958185fa0 R15: 00007ffee88658d8 [ 517.378197][T27647] [ 517.620178][ T2310] Bluetooth: hci2: Frame reassembly failed (-84) [ 517.626975][T27649] Bluetooth: hci2: Frame reassembly failed (-90) [ 517.685408][ T29] audit: type=1326 audit(2000000185.581:38919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27654 comm="syz.5.8635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6957f2efc9 code=0x7ffc0000 [ 517.709088][ T29] audit: type=1326 audit(2000000185.581:38920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27654 comm="syz.5.8635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6957f2efc9 code=0x7ffc0000 [ 517.732712][ T29] audit: type=1326 audit(2000000185.581:38921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27654 comm="syz.5.8635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6957f2efc9 code=0x7ffc0000 [ 517.996456][T27670] can0: slcan on ptm3. [ 518.038952][T27670] can0 (unregistered): slcan off ptm3. [ 518.044549][T27670] Falling back ldisc for ptm3. [ 518.122806][T27680] random: crng reseeded on system resumption [ 518.175577][T27682] siw: device registration error -23 [ 518.229445][ T4245] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 518.457588][ T3519] Bluetooth: hci1: command 0x1003 tx timeout [ 518.457594][T14105] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 518.588687][T27701] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 518.600093][T27701] bond1 (unregistering): Released all slaves [ 518.701177][T27711] random: crng reseeded on system resumption [ 518.734025][T27713] __nla_validate_parse: 13 callbacks suppressed [ 518.734038][T27713] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8659'. [ 518.834362][T27719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.857555][T27719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.908051][ T2310] Bluetooth: hci0: Frame reassembly failed (-84) [ 518.914381][ T2310] Bluetooth: hci0: Frame reassembly failed (-84) [ 518.990524][T27730] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 519.001230][T27730] bond1 (unregistering): Released all slaves [ 519.301272][T27744] syzkaller1: entered promiscuous mode [ 519.306884][T27744] syzkaller1: entered allmulticast mode [ 519.432561][T27742] Set syz1 is full, maxelem 65536 reached [ 519.533364][T27757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8677'. [ 519.552147][T10467] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.580634][T27763] netlink: 19 bytes leftover after parsing attributes in process `syz.4.8678'. [ 519.600190][ T3519] Bluetooth: hci2: command 0x1003 tx timeout [ 519.600407][ T3524] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 519.622118][T10467] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.672157][T27754] lo speed is unknown, defaulting to 1000 [ 519.679506][T10467] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.706812][T10467] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.768260][T10467] bridge_slave_1: left allmulticast mode [ 519.774006][T10467] bridge_slave_1: left promiscuous mode [ 519.779789][T10467] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.789132][T10467] bridge_slave_0: left allmulticast mode [ 519.794874][T10467] bridge_slave_0: left promiscuous mode [ 519.800737][T10467] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.942447][T10467] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.986819][T10467] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.021913][T10467] bond_slave_1: left promiscuous mode [ 520.030038][T10467] $Hÿ (unregistering): (slave batadv0): Releasing backup interface [ 520.040544][T10467] batadv0: left promiscuous mode [ 520.046338][T10467] $Hÿ (unregistering): Released all slaves [ 520.055370][T10467] bond0 (unregistering): Released all slaves [ 520.073183][T27779] Set syz1 is full, maxelem 65536 reached [ 520.138789][T10467] tipc: Disabling bearer [ 520.141527][T27790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8688'. [ 520.144246][T10467] tipc: Left network mode [ 520.171271][T27754] chnl_net:caif_netlink_parms(): no params data found [ 520.210571][T27795] netlink: 19 bytes leftover after parsing attributes in process `syz.4.8690'. [ 520.254811][T10467] hsr_slave_0: left promiscuous mode [ 520.261464][T10467] hsr_slave_1: left promiscuous mode [ 520.273231][T10467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.280696][T10467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.294861][T10467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.302266][T10467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.317536][T10467] veth1_macvtap: left promiscuous mode [ 520.327560][T10467] veth0_macvtap: left promiscuous mode [ 520.334087][T10467] veth1_vlan: left promiscuous mode [ 520.342914][T10467] veth0_vlan: left promiscuous mode [ 520.383533][T27812] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8697'. [ 520.474840][T10467] team0 (unregistering): Port device team_slave_1 removed [ 520.485162][T10467] team0 (unregistering): Port device team_slave_0 removed [ 520.529770][ T9] lo speed is unknown, defaulting to 1000 [ 520.535591][ T9] infiniband syz2: ib_query_port failed (-19) [ 520.562767][T27754] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.569891][T27754] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.577033][T27754] bridge_slave_0: entered allmulticast mode [ 520.583465][T27754] bridge_slave_0: entered promiscuous mode [ 520.601981][T27754] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.609143][T27754] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.623091][T27754] bridge_slave_1: entered allmulticast mode [ 520.629771][T27754] bridge_slave_1: entered promiscuous mode [ 520.637152][T27821] can0: slcan on ptm1. [ 520.651567][T10455] Bluetooth: hci1: Frame reassembly failed (-84) [ 520.658329][T27812] Bluetooth: hci1: Frame reassembly failed (-90) [ 520.666877][T27754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.676148][T27821] can0 (unregistered): slcan off ptm1. [ 520.677460][T27754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.690658][T27821] Falling back ldisc for ptm1. [ 520.707123][T27754] team0: Port device team_slave_0 added [ 520.713818][T27754] team0: Port device team_slave_1 added [ 520.724284][T27824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8701'. [ 520.750432][T27754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.757405][T27754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.783343][T27754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.817381][T27754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.824500][T27754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.850464][T27754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.861039][T14105] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 520.944303][T27754] hsr_slave_0: entered promiscuous mode [ 520.952805][T27754] hsr_slave_1: entered promiscuous mode [ 520.958676][T27754] debugfs: 'hsr0' already exists in 'hsr' [ 520.964432][T27754] Cannot create hsr debugfs directory [ 520.974961][T27838] can0: slcan on ptm0. [ 521.085403][T27838] can0 (unregistered): slcan off ptm0. [ 521.094965][T27838] Falling back ldisc for ptm0. [ 521.122146][T27841] syzkaller1: entered promiscuous mode [ 521.127684][T27841] syzkaller1: entered allmulticast mode [ 521.214143][T27848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8711'. [ 521.332928][T27860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8716'. [ 521.342095][T27859] GUP no longer grows the stack in syz.4.8717 (27859): 200000005000-200000008000 (200000004000) [ 521.352707][T27859] CPU: 0 UID: 0 PID: 27859 Comm: syz.4.8717 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 521.352735][T27859] Tainted: [W]=WARN [ 521.352741][T27859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 521.352752][T27859] Call Trace: [ 521.352757][T27859] [ 521.352767][T27859] __dump_stack+0x1d/0x30 [ 521.352788][T27859] dump_stack_lvl+0xe8/0x140 [ 521.352828][T27859] dump_stack+0x15/0x1b [ 521.352848][T27859] fixup_user_fault+0x50e/0x560 [ 521.352878][T27859] fault_in_user_writeable+0x5d/0xd0 [ 521.352992][T27859] futex_lock_pi+0x597/0x780 [ 521.353011][T27859] ? __pfx_futex_wake_mark+0x10/0x10 [ 521.353074][T27859] do_futex+0x21f/0x380 [ 521.353182][T27859] __se_sys_futex+0x2ed/0x360 [ 521.353292][T27859] __x64_sys_futex+0x78/0x90 [ 521.353326][T27859] x64_sys_call+0x2e48/0x3000 [ 521.353353][T27859] do_syscall_64+0xd2/0x200 [ 521.353372][T27859] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 521.353415][T27859] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 521.353444][T27859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.353463][T27859] RIP: 0033:0x7f72399befc9 [ 521.353476][T27859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.353553][T27859] RSP: 002b:00007f723841f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 521.353643][T27859] RAX: ffffffffffffffda RBX: 00007f7239c15fa0 RCX: 00007f72399befc9 [ 521.353692][T27859] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 521.353707][T27859] RBP: 00007f7239a41f91 R08: 0000000000000000 R09: 0000000000000000 [ 521.353722][T27859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.353736][T27859] R13: 00007f7239c16038 R14: 00007f7239c15fa0 R15: 00007ffc72aed648 [ 521.353756][T27859] [ 521.544857][ T29] kauditd_printk_skb: 455 callbacks suppressed [ 521.544873][ T29] audit: type=1326 audit(2000000189.635:39377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27857 comm="syz.4.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f72399befc9 code=0x7ffc0000 [ 521.574505][ T29] audit: type=1326 audit(2000000189.635:39378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27857 comm="syz.4.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72399befc9 code=0x7ffc0000 [ 521.598110][ T29] audit: type=1326 audit(2000000189.635:39379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27857 comm="syz.4.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72399befc9 code=0x7ffc0000 [ 521.621663][ T29] audit: type=1326 audit(2000000189.635:39380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27857 comm="syz.4.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f72399befc9 code=0x7ffc0000 [ 521.645047][ T29] audit: type=1326 audit(2000000189.635:39381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27857 comm="syz.4.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72399befc9 code=0x7ffc0000 [ 521.668733][ T29] audit: type=1326 audit(2000000189.635:39382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27857 comm="syz.4.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f72399befc9 code=0x7ffc0000 [ 521.692338][ T29] audit: type=1326 audit(2000000189.635:39383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27857 comm="syz.4.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72399befc9 code=0x7ffc0000 [ 521.715967][ T29] audit: type=1326 audit(2000000189.635:39384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27857 comm="syz.4.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72399befc9 code=0x7ffc0000 [ 521.739443][ T29] audit: type=1326 audit(2000000189.635:39385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27857 comm="syz.4.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72399befc9 code=0x7ffc0000 [ 521.762993][ T29] audit: type=1326 audit(2000000189.635:39386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27857 comm="syz.4.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f72399befc9 code=0x7ffc0000 [ 521.814173][T27754] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 521.826771][T27754] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 521.837129][T27754] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 521.849395][T27754] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 521.890550][T27754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.904704][T27754] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.914797][T10467] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.921932][T10467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.938798][T10458] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.945942][T10458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.072005][T27754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.136619][T27867] Set syz1 is full, maxelem 65536 reached [ 522.234443][T27754] veth0_vlan: entered promiscuous mode [ 522.242355][T27754] veth1_vlan: entered promiscuous mode [ 522.262917][T27754] veth0_macvtap: entered promiscuous mode [ 522.271068][T27754] veth1_macvtap: entered promiscuous mode [ 522.341042][T27754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.353489][T27754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.364235][T10467] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.373694][T10467] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.391583][T10467] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.406530][T27881] Set syz1 is full, maxelem 65536 reached [ 522.421018][T10467] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.451923][T27908] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8674'. [ 522.528715][T27910] syzkaller1: entered promiscuous mode [ 522.534309][T27910] syzkaller1: entered allmulticast mode [ 522.571047][ T3519] Bluetooth: hci1: command 0x1003 tx timeout [ 522.596000][ T3524] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 522.887796][T10467] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.946008][T10467] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.955206][T27919] Bluetooth: hci0: Frame reassembly failed (-90) [ 522.962967][T10455] Bluetooth: hci0: Frame reassembly failed (-84) [ 523.012149][T27924] chnl_net:caif_netlink_parms(): no params data found [ 523.044841][T10467] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.072015][T27924] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.079296][T27924] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.087048][T27924] bridge_slave_0: entered allmulticast mode [ 523.110290][T27924] bridge_slave_0: entered promiscuous mode [ 523.123663][T27924] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.130904][T27924] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.157686][T27924] bridge_slave_1: entered allmulticast mode [ 523.168953][T27924] bridge_slave_1: entered promiscuous mode [ 523.192110][T10467] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.247940][T27963] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 523.260744][T27963] bond0 (unregistering): Released all slaves [ 523.266908][T27970] mmap: syz.2.8745 (27970): VmData 167751680 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 523.286469][T27924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.304997][T27924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.337554][T10467] bridge_slave_1: left allmulticast mode [ 523.343247][T10467] bridge_slave_1: left promiscuous mode [ 523.348910][T10467] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.357920][T10467] bridge_slave_0: left allmulticast mode [ 523.363674][T10467] bridge_slave_0: left promiscuous mode [ 523.369448][T10467] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.508185][T27983] __nla_validate_parse: 1 callbacks suppressed [ 523.508197][T27983] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8750'. [ 523.525932][T10467] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.534599][T10467] bond_slave_0: left promiscuous mode [ 523.541080][T10467] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.550101][T10467] bond_slave_1: left promiscuous mode [ 523.556310][T10467] $Hÿ (unregistering): Released all slaves [ 523.564979][T10467] bond0 (unregistering): Released all slaves [ 523.573382][T10467] bond1 (unregistering): Released all slaves [ 523.582078][T27924] team0: Port device team_slave_0 added [ 523.589030][T27924] team0: Port device team_slave_1 added [ 523.610546][T27924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.617507][T27924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.643500][T27924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.657239][T27985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8751'. [ 523.668412][T27924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.675354][T27924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.701306][T27924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.722052][T10467] tipc: Disabling bearer [ 523.727060][T10467] tipc: Left network mode [ 523.767958][T27983] Bluetooth: hci1: Frame reassembly failed (-90) [ 523.775019][ T270] Bluetooth: hci1: Frame reassembly failed (-84) [ 523.794567][T27924] hsr_slave_0: entered promiscuous mode [ 523.800844][T27924] hsr_slave_1: entered promiscuous mode [ 523.806743][T27924] debugfs: 'hsr0' already exists in 'hsr' [ 523.812501][T27924] Cannot create hsr debugfs directory [ 523.902101][T10467] hsr_slave_0: left promiscuous mode [ 523.908047][T10467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.915525][T10467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.926407][T10467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.933881][T10467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.943952][T10467] veth1_macvtap: left promiscuous mode [ 523.949432][T10467] veth0_macvtap: left promiscuous mode [ 523.955051][T10467] veth1_vlan: left promiscuous mode [ 523.960276][T10467] veth0_vlan: left promiscuous mode [ 524.079813][T10467] team0 (unregistering): Port device team_slave_1 removed [ 524.092004][T10467] team0 (unregistering): Port device team_slave_0 removed [ 524.102989][ T270] smc: removing ib device syz! [ 524.334738][T28005] netlink: 19 bytes leftover after parsing attributes in process `syz.2.8758'. [ 524.371749][T10467] IPVS: stop unused estimator thread 0... [ 524.422945][T28009] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 524.433846][T28009] bond0 (unregistering): Released all slaves [ 524.473593][T28014] netlink: 'syz.2.8761': attribute type 27 has an invalid length. [ 524.487773][T28014] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.495003][T28014] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.504361][T28014] $Hÿ: left promiscuous mode [ 524.509134][T28014] bond_slave_0: left promiscuous mode [ 524.514594][T28014] bond_slave_1: left promiscuous mode [ 524.521255][T28014] dummy0: left promiscuous mode [ 524.528911][T28014] 0ªX¹¦À: left allmulticast mode [ 524.554084][T28014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.563590][T28014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.613145][T27924] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 524.622300][T27924] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 524.632428][T27924] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 524.641585][T27924] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 524.653742][T28017] SELinux: failed to load policy [ 524.667693][T28016] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 524.675951][T28016] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.685329][T28016] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 524.711023][T10455] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.727091][T10455] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.736855][T10455] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.746843][T10455] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.792963][T27924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.813414][T27924] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.834701][ T270] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.841912][ T270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.860048][ T270] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.867137][ T270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.883588][T28037] netlink: 'syz.4.8766': attribute type 10 has an invalid length. [ 524.894723][T28037] team0: Port device dummy0 added [ 524.932787][ T3524] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 524.948929][T28049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8769'. [ 524.952100][T27924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.975012][T28050] netlink: 'syz.4.8766': attribute type 10 has an invalid length. [ 525.034256][T27924] veth0_vlan: entered promiscuous mode [ 525.043674][T27924] veth1_vlan: entered promiscuous mode [ 525.059556][T27924] veth0_macvtap: entered promiscuous mode [ 525.068124][T27924] veth1_macvtap: entered promiscuous mode [ 525.076560][T28050] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 525.091955][T28050] team0: Failed to send options change via netlink (err -105) [ 525.099491][T28050] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 525.108659][T28050] team0: Port device dummy0 removed [ 525.115518][T28050] dummy0: entered promiscuous mode [ 525.121073][T28050] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 525.141747][T27924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.151618][T27924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.162591][T10467] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.176435][T10467] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.191227][T10451] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.200601][T10451] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.407363][T28090] FAULT_INJECTION: forcing a failure. [ 525.407363][T28090] name failslab, interval 1, probability 0, space 0, times 0 [ 525.420147][T28090] CPU: 0 UID: 0 PID: 28090 Comm: syz.0.8778 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 525.420215][T28090] Tainted: [W]=WARN [ 525.420223][T28090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 525.420239][T28090] Call Trace: [ 525.420246][T28090] [ 525.420255][T28090] __dump_stack+0x1d/0x30 [ 525.420282][T28090] dump_stack_lvl+0xe8/0x140 [ 525.420305][T28090] dump_stack+0x15/0x1b [ 525.420321][T28090] should_fail_ex+0x265/0x280 [ 525.420367][T28090] should_failslab+0x8c/0xb0 [ 525.420397][T28090] kmem_cache_alloc_noprof+0x50/0x480 [ 525.420489][T28090] ? security_inode_alloc+0x37/0x100 [ 525.420516][T28090] security_inode_alloc+0x37/0x100 [ 525.420535][T28090] inode_init_always_gfp+0x4b7/0x500 [ 525.420569][T28090] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 525.420626][T28090] alloc_inode+0x58/0x170 [ 525.420649][T28090] new_inode+0x1d/0xe0 [ 525.420783][T28090] shmem_get_inode+0x244/0x750 [ 525.420852][T28090] shmem_mknod+0x46/0x180 [ 525.420935][T28090] shmem_mkdir+0x33/0x70 [ 525.420963][T28090] vfs_mkdir+0x213/0x340 [ 525.420987][T28090] do_mkdirat+0x132/0x3f0 [ 525.421041][T28090] __x64_sys_mkdir+0x42/0x50 [ 525.421066][T28090] x64_sys_call+0x2db9/0x3000 [ 525.421090][T28090] do_syscall_64+0xd2/0x200 [ 525.421146][T28090] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 525.421181][T28090] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 525.421219][T28090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.421278][T28090] RIP: 0033:0x7f841259efc9 [ 525.421291][T28090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.421312][T28090] RSP: 002b:00007f8411007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 525.421330][T28090] RAX: ffffffffffffffda RBX: 00007f84127f5fa0 RCX: 00007f841259efc9 [ 525.421341][T28090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 525.421418][T28090] RBP: 00007f8411007090 R08: 0000000000000000 R09: 0000000000000000 [ 525.421456][T28090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 525.421471][T28090] R13: 00007f84127f6038 R14: 00007f84127f5fa0 R15: 00007ffc099b26d8 [ 525.421495][T28090] [ 525.440995][T28072] chnl_net:caif_netlink_parms(): no params data found [ 525.673710][T28098] netlink: 19 bytes leftover after parsing attributes in process `syz.6.8781'. [ 525.693622][ T3519] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 525.740085][T28072] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.747311][T28072] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.754774][T28072] bridge_slave_0: entered allmulticast mode [ 525.761337][T28072] bridge_slave_0: entered promiscuous mode [ 525.770762][T28072] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.777814][T28072] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.785142][T28072] bridge_slave_1: entered allmulticast mode [ 525.793002][T28072] bridge_slave_1: entered promiscuous mode [ 525.825111][T28072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.862997][T28072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.930399][T28072] team0: Port device team_slave_0 added [ 525.954228][T28072] team0: Port device team_slave_1 added [ 526.007499][T28072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.014485][T28072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.040456][T28072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.104014][T28072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.111018][T28072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.136986][T28072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.230393][T28072] hsr_slave_0: entered promiscuous mode [ 526.243092][T28072] hsr_slave_1: entered promiscuous mode [ 526.386172][ T29] kauditd_printk_skb: 292 callbacks suppressed [ 526.386231][ T29] audit: type=1326 audit(2000000194.719:39679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28134 comm="syz.5.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55393defc9 code=0x7ffc0000 [ 526.416146][ T29] audit: type=1326 audit(2000000194.719:39680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28134 comm="syz.5.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55393defc9 code=0x7ffc0000 [ 526.499471][ T29] audit: type=1326 audit(2000000194.782:39681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28134 comm="syz.5.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55393defc9 code=0x7ffc0000 [ 526.523106][ T29] audit: type=1326 audit(2000000194.782:39682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28134 comm="syz.5.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55393defc9 code=0x7ffc0000 [ 526.546709][ T29] audit: type=1326 audit(2000000194.782:39683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28134 comm="syz.5.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55393defc9 code=0x7ffc0000 [ 526.570263][ T29] audit: type=1326 audit(2000000194.782:39684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28134 comm="syz.5.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55393defc9 code=0x7ffc0000 [ 526.593902][ T29] audit: type=1326 audit(2000000194.782:39686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28134 comm="syz.5.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55393defc9 code=0x7ffc0000 [ 526.617536][ T29] audit: type=1326 audit(2000000194.782:39687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28134 comm="syz.5.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55393defc9 code=0x7ffc0000 [ 526.641151][ T29] audit: type=1326 audit(2000000194.782:39685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28134 comm="syz.5.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55393defc9 code=0x7ffc0000 [ 526.664813][ T29] audit: type=1326 audit(2000000194.782:39688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28134 comm="syz.5.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55393defc9 code=0x7ffc0000 [ 526.778032][T10467] bridge_slave_1: left allmulticast mode [ 526.783727][T10467] bridge_slave_1: left promiscuous mode [ 526.789479][T10467] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.797125][T28145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8798'. [ 526.806367][T10467] bridge_slave_0: left allmulticast mode [ 526.812093][T10467] bridge_slave_0: left promiscuous mode [ 526.817750][T10467] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.828783][T10467] veth7: left allmulticast mode [ 526.833654][T10467] veth7: left promiscuous mode [ 526.838600][T10467] bridge1: port 1(veth7) entered disabled state [ 526.846304][T10467] veth9: left allmulticast mode [ 526.851253][T10467] veth9: left promiscuous mode [ 526.856222][T10467] bridge2: port 1(veth9) entered disabled state [ 526.893427][ T3391] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 526.950445][T28153] netlink: 19 bytes leftover after parsing attributes in process `syz.5.8802'. [ 527.039244][T10472] Bluetooth: hci0: Frame reassembly failed (-90) [ 527.143180][T10467] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.152606][T10467] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.161659][T10467] $Hÿ (unregistering): Released all slaves [ 527.169993][T10467] bond0 (unregistering): Released all slaves [ 527.177955][T10467] bond1 (unregistering): Released all slaves [ 527.185898][T10467] bond2 (unregistering): Released all slaves [ 527.238207][T10467] tipc: Left network mode [ 527.259682][T10467] hsr_slave_0: left promiscuous mode [ 527.270294][T10467] hsr_slave_1: left promiscuous mode [ 527.284214][T10467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.301178][T10467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.413412][T10467] team0 (unregistering): Port device team_slave_1 removed [ 527.428247][T10467] team0 (unregistering): Port device team_slave_0 removed [ 527.495099][T28189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8818'. [ 527.656972][T28200] program syz.5.8823 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 527.668408][T10455] Bluetooth: hci1: Frame reassembly failed (-84) [ 527.692362][T28072] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 527.701486][T28072] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 527.710518][T28072] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 527.719915][T28072] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 527.765812][T28072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.782491][T28072] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.791777][T10455] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.798887][T10455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.813510][ T2310] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.820578][ T2310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.896824][T28225] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 527.907628][T28225] bond0 (unregistering): Released all slaves [ 527.922416][T28072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.988036][T28072] veth0_vlan: entered promiscuous mode [ 527.996228][T28072] veth1_vlan: entered promiscuous mode [ 528.012745][T28072] veth0_macvtap: entered promiscuous mode [ 528.020353][T28072] veth1_macvtap: entered promiscuous mode [ 528.030884][T28072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.041474][T28072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.052486][T10458] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.063568][T10458] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.077243][T10458] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.093619][T10467] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.131256][T28247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8831'. [ 528.244011][T28252] netlink: 19 bytes leftover after parsing attributes in process `syz.4.8833'. [ 528.473697][T28270] FAULT_INJECTION: forcing a failure. [ 528.473697][T28270] name failslab, interval 1, probability 0, space 0, times 0 [ 528.486458][T28270] CPU: 1 UID: 0 PID: 28270 Comm: syz.5.8840 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 528.486532][T28270] Tainted: [W]=WARN [ 528.486538][T28270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 528.486552][T28270] Call Trace: [ 528.486559][T28270] [ 528.486567][T28270] __dump_stack+0x1d/0x30 [ 528.486645][T28270] dump_stack_lvl+0xe8/0x140 [ 528.486707][T28270] dump_stack+0x15/0x1b [ 528.486727][T28270] should_fail_ex+0x265/0x280 [ 528.486747][T28270] should_failslab+0x8c/0xb0 [ 528.486850][T28270] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 528.486889][T28270] ? __alloc_skb+0x101/0x320 [ 528.486918][T28270] __alloc_skb+0x101/0x320 [ 528.486952][T28270] netlink_dump+0x10d/0x8a0 [ 528.486986][T28270] ? __kfree_skb+0x109/0x150 [ 528.487015][T28270] ? nlmon_xmit+0x4f/0x60 [ 528.487057][T28270] ? consume_skb+0x49/0x150 [ 528.487094][T28270] __netlink_dump_start+0x43e/0x520 [ 528.487181][T28270] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 528.487209][T28270] rtnetlink_rcv_msg+0x552/0x6d0 [ 528.487310][T28270] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 528.487336][T28270] ? __pfx_rtnl_dumpit+0x10/0x10 [ 528.487406][T28270] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 528.487434][T28270] netlink_rcv_skb+0x123/0x220 [ 528.487524][T28270] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 528.487558][T28270] rtnetlink_rcv+0x1c/0x30 [ 528.487677][T28270] netlink_unicast+0x5c0/0x690 [ 528.487765][T28270] netlink_sendmsg+0x58b/0x6b0 [ 528.487787][T28270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 528.487810][T28270] __sock_sendmsg+0x145/0x180 [ 528.487837][T28270] sock_write_iter+0x1a7/0x1f0 [ 528.487881][T28270] ? __pfx_sock_write_iter+0x10/0x10 [ 528.487906][T28270] vfs_write+0x52a/0x960 [ 528.487938][T28270] ksys_write+0xda/0x1a0 [ 528.487961][T28270] __x64_sys_write+0x40/0x50 [ 528.488024][T28270] x64_sys_call+0x2802/0x3000 [ 528.488043][T28270] do_syscall_64+0xd2/0x200 [ 528.488060][T28270] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 528.488087][T28270] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 528.488150][T28270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.488176][T28270] RIP: 0033:0x7f55393defc9 [ 528.488192][T28270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.488214][T28270] RSP: 002b:00007f5537e3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 528.488236][T28270] RAX: ffffffffffffffda RBX: 00007f5539635fa0 RCX: 00007f55393defc9 [ 528.488251][T28270] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000004 [ 528.488282][T28270] RBP: 00007f5537e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 528.488296][T28270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.488307][T28270] R13: 00007f5539636038 R14: 00007f5539635fa0 R15: 00007ffffa769a18 [ 528.488323][T28270] [ 528.869618][T28278] FAULT_INJECTION: forcing a failure. [ 528.869618][T28278] name failslab, interval 1, probability 0, space 0, times 0 [ 528.882313][T28278] CPU: 1 UID: 0 PID: 28278 Comm: syz.2.8842 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 528.882347][T28278] Tainted: [W]=WARN [ 528.882353][T28278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 528.882366][T28278] Call Trace: [ 528.882372][T28278] [ 528.882378][T28278] __dump_stack+0x1d/0x30 [ 528.882397][T28278] dump_stack_lvl+0xe8/0x140 [ 528.882414][T28278] dump_stack+0x15/0x1b [ 528.882429][T28278] should_fail_ex+0x265/0x280 [ 528.882450][T28278] should_failslab+0x8c/0xb0 [ 528.882483][T28278] kmem_cache_alloc_noprof+0x50/0x480 [ 528.882516][T28278] ? vm_area_alloc+0x2c/0xb0 [ 528.882544][T28278] vm_area_alloc+0x2c/0xb0 [ 528.882570][T28278] mmap_region+0xa99/0x1620 [ 528.882638][T28278] do_mmap+0x9b3/0xbe0 [ 528.882656][T28278] vm_mmap_pgoff+0x17a/0x2e0 [ 528.882690][T28278] ksys_mmap_pgoff+0xc2/0x310 [ 528.882710][T28278] ? __x64_sys_mmap+0x49/0x70 [ 528.882735][T28278] x64_sys_call+0x14a3/0x3000 [ 528.882754][T28278] do_syscall_64+0xd2/0x200 [ 528.882771][T28278] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 528.882797][T28278] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 528.882829][T28278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.882853][T28278] RIP: 0033:0x7fd7f8bff003 [ 528.882871][T28278] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 528.882886][T28278] RSP: 002b:00007fd7f7666e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 528.882902][T28278] RAX: ffffffffffffffda RBX: 0000000000000787 RCX: 00007fd7f8bff003 [ 528.882913][T28278] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 528.882923][T28278] RBP: 0000200000000fc2 R08: 00000000ffffffff R09: 0000000000000000 [ 528.882933][T28278] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007 [ 528.882946][T28278] R13: 00007fd7f7666ef0 R14: 00007fd7f7666eb0 R15: 0000200000000340 [ 528.882965][T28278] [ 528.980955][ T3524] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 528.984878][T14105] Bluetooth: hci0: command 0x1003 tx timeout [ 529.193964][T28287] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8846'. [ 529.578253][ T3524] Bluetooth: hci1: command 0x1003 tx timeout [ 529.584372][ T3519] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 529.593348][T28296] netlink: 'syz.2.8850': attribute type 1 has an invalid length. [ 529.636286][T28302] 9pnet_rdma: rdma_create_trans (28302): problem binding to privport: 13 [ 529.650172][T28296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.657499][T28297] netlink: 192 bytes leftover after parsing attributes in process `syz.2.8850'. [ 529.679251][T28305] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 529.685775][T28305] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 529.693247][T28305] vhci_hcd vhci_hcd.0: Device attached [ 529.712501][T28309] vhci_hcd: connection closed [ 529.712695][T10458] vhci_hcd: stop threads [ 529.721756][T10458] vhci_hcd: release socket [ 529.726195][T10458] vhci_hcd: disconnect device [ 529.755640][T28315] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 529.766867][T28315] bond1 (unregistering): Released all slaves [ 529.827658][T28321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.836213][T28321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.862365][T28323] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8859'. [ 530.008076][T28329] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8862'. [ 530.065432][T28333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8864'. [ 530.232490][T28340] FAULT_INJECTION: forcing a failure. [ 530.232490][T28340] name failslab, interval 1, probability 0, space 0, times 0 [ 530.245409][T28340] CPU: 0 UID: 0 PID: 28340 Comm: syz.4.8867 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 530.245525][T28340] Tainted: [W]=WARN [ 530.245533][T28340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 530.245549][T28340] Call Trace: [ 530.245557][T28340] [ 530.245565][T28340] __dump_stack+0x1d/0x30 [ 530.245589][T28340] dump_stack_lvl+0xe8/0x140 [ 530.245626][T28340] dump_stack+0x15/0x1b [ 530.245647][T28340] should_fail_ex+0x265/0x280 [ 530.245668][T28340] should_failslab+0x8c/0xb0 [ 530.245732][T28340] kmem_cache_alloc_noprof+0x50/0x480 [ 530.245770][T28340] ? audit_log_start+0x342/0x720 [ 530.245793][T28340] audit_log_start+0x342/0x720 [ 530.245813][T28340] ? kstrtouint+0x76/0xc0 [ 530.245910][T28340] audit_seccomp+0x48/0x100 [ 530.245947][T28340] ? __seccomp_filter+0x82d/0x1250 [ 530.245981][T28340] __seccomp_filter+0x83e/0x1250 [ 530.246065][T28340] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 530.246097][T28340] ? vfs_write+0x7e8/0x960 [ 530.246128][T28340] ? __rcu_read_unlock+0x4f/0x70 [ 530.246186][T28340] ? __fget_files+0x184/0x1c0 [ 530.246216][T28340] __secure_computing+0x82/0x150 [ 530.246249][T28340] syscall_trace_enter+0xcf/0x1e0 [ 530.246287][T28340] do_syscall_64+0xac/0x200 [ 530.246327][T28340] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 530.246371][T28340] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 530.246400][T28340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.246430][T28340] RIP: 0033:0x7f72399befc9 [ 530.246447][T28340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.246520][T28340] RSP: 002b:00007f723841f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c4 [ 530.246537][T28340] RAX: ffffffffffffffda RBX: 00007f7239c15fa0 RCX: 00007f72399befc9 [ 530.246625][T28340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 530.246639][T28340] RBP: 00007f723841f090 R08: 0000000000000000 R09: 0000000000000000 [ 530.246652][T28340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.246663][T28340] R13: 00007f7239c16038 R14: 00007f7239c15fa0 R15: 00007ffc72aed648 [ 530.246678][T28340] [ 530.494762][T10467] bond0 (unregistering): Released all slaves [ 530.500786][T10458] Bluetooth: hci0: Frame reassembly failed (-84) [ 530.508356][T28329] Bluetooth: hci0: Frame reassembly failed (-90) [ 530.532676][T28342] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 530.543718][T28342] bond1 (unregistering): Released all slaves [ 530.608867][T28359] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8875'. [ 530.682126][T28369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8880'. [ 530.789196][T28372] veth0_to_team: entered promiscuous mode [ 530.844467][T28385] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 530.856966][T28385] bond0 (unregistering): Released all slaves [ 531.119098][T28403] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 531.131568][T28403] bond1 (unregistering): Released all slaves [ 531.307938][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 531.307955][ T29] audit: type=1326 audit(2000000199.897:39932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28408 comm="syz.0.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841259efc9 code=0x7ffc0000 [ 531.346484][ T29] audit: type=1326 audit(2000000199.897:39933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28408 comm="syz.0.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841259efc9 code=0x7ffc0000 [ 531.370124][ T29] audit: type=1326 audit(2000000199.897:39934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28408 comm="syz.0.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f841259efc9 code=0x7ffc0000 [ 531.393684][ T29] audit: type=1326 audit(2000000199.897:39935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28408 comm="syz.0.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841259efc9 code=0x7ffc0000 [ 531.417357][ T29] audit: type=1326 audit(2000000199.907:39936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28408 comm="syz.0.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841259efc9 code=0x7ffc0000 [ 531.445655][T28425] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 531.458024][T28425] bond1 (unregistering): Released all slaves [ 531.467967][ T29] audit: type=1400 audit(2000000200.065:39937): avc: denied { setopt } for pid=28428 comm="syz.4.8903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 531.491362][ T29] audit: type=1400 audit(2000000200.065:39938): avc: denied { connect } for pid=28428 comm="syz.4.8903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 531.743345][ T29] audit: type=1326 audit(2000000200.349:39939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28447 comm="syz.0.8909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841259efc9 code=0x7ffc0000 [ 531.766927][ T29] audit: type=1326 audit(2000000200.349:39940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28447 comm="syz.0.8909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841259efc9 code=0x7ffc0000 [ 532.059744][T28452] siw: device registration error -23 [ 532.144536][ T29] audit: type=1326 audit(2000000200.443:39941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28447 comm="syz.0.8909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f841259efc9 code=0x7ffc0000 [ 532.189311][T28456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.197945][T28456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.482198][ T3524] Bluetooth: hci0: command 0x1003 tx timeout [ 532.488238][ T3519] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 532.527804][T28464] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 532.540787][T28464] bond1 (unregistering): Released all slaves [ 532.613569][T28472] netlink: 272 bytes leftover after parsing attributes in process `syz.4.8916'. [ 532.794820][T28488] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8924'. [ 532.811102][T10458] Bluetooth: hci0: Frame reassembly failed (-84) [ 533.071394][T28520] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8936'. [ 533.309490][ T2310] Bluetooth: hci1: Frame reassembly failed (-84) [ 533.316606][T28520] Bluetooth: hci1: Frame reassembly failed (-90) [ 533.493774][T28549] syzkaller1: entered promiscuous mode [ 533.499351][T28549] syzkaller1: entered allmulticast mode [ 534.026782][T28583] __nla_validate_parse: 1 callbacks suppressed [ 534.026798][T28583] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8960'. [ 534.231262][T28592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.239796][T28592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.400536][T28603] siw: device registration error -23 [ 534.428827][T28605] siw: device registration error -23 [ 534.456039][T28607] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8970'. [ 534.758446][ T3519] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 534.758633][T14105] Bluetooth: hci0: command 0x1003 tx timeout [ 534.777283][T28621] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8974'. [ 534.786316][T28621] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8974'. [ 535.214826][ T3524] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 535.477474][T28665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8991'. [ 535.545114][T28670] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 535.574160][T28670] bond1 (unregistering): Released all slaves [ 535.637391][T28681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8998'. [ 535.710321][T28679] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28679 comm=syz.4.8997 [ 535.886704][T28708] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 535.898730][T28708] bond0 (unregistering): Released all slaves [ 535.910909][T28687] FAULT_INJECTION: forcing a failure. [ 535.910909][T28687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.924042][T28687] CPU: 0 UID: 0 PID: 28687 Comm: syz.5.9000 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 535.924069][T28687] Tainted: [W]=WARN [ 535.924075][T28687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 535.924128][T28687] Call Trace: [ 535.924134][T28687] [ 535.924142][T28687] __dump_stack+0x1d/0x30 [ 535.924171][T28687] dump_stack_lvl+0xe8/0x140 [ 535.924243][T28687] dump_stack+0x15/0x1b [ 535.924258][T28687] should_fail_ex+0x265/0x280 [ 535.924279][T28687] should_fail+0xb/0x20 [ 535.924296][T28687] should_fail_usercopy+0x1a/0x20 [ 535.924354][T28687] _copy_from_user+0x1c/0xb0 [ 535.924377][T28687] ___sys_sendmsg+0xc1/0x1d0 [ 535.924410][T28687] __x64_sys_sendmsg+0xd4/0x160 [ 535.924482][T28687] x64_sys_call+0x191e/0x3000 [ 535.924566][T28687] do_syscall_64+0xd2/0x200 [ 535.924586][T28687] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 535.924613][T28687] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 535.924643][T28687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.924693][T28687] RIP: 0033:0x7f55393defc9 [ 535.924706][T28687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.924721][T28687] RSP: 002b:00007f5537e3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.924739][T28687] RAX: ffffffffffffffda RBX: 00007f5539635fa0 RCX: 00007f55393defc9 [ 535.924750][T28687] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000005 [ 535.924762][T28687] RBP: 00007f5537e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 535.924773][T28687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.924812][T28687] R13: 00007f5539636038 R14: 00007f5539635fa0 R15: 00007ffffa769a18 [ 535.924840][T28687] [ 536.161828][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 536.161922][ T29] audit: type=1326 audit(2000000204.991:40095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28717 comm="syz.4.9009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72399befc9 code=0x7ffc0000 [ 536.191747][ T29] audit: type=1326 audit(2000000204.991:40096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28717 comm="syz.4.9009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72399befc9 code=0x7ffc0000 [ 536.215323][ T29] audit: type=1326 audit(2000000204.991:40097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28717 comm="syz.4.9009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72399befc9 code=0x7ffc0000 [ 536.239101][ T29] audit: type=1326 audit(2000000204.991:40098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28717 comm="syz.4.9009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72399befc9 code=0x7ffc0000 [ 536.262938][ T29] audit: type=1326 audit(2000000204.991:40099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28717 comm="syz.4.9009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72399befc9 code=0x7ffc0000 [ 536.286587][ T29] audit: type=1326 audit(2000000204.991:40100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28717 comm="syz.4.9009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72399befc9 code=0x7ffc0000 [ 536.292085][T28718] syzkaller1: entered promiscuous mode [ 536.313315][ T29] audit: type=1326 audit(2000000205.033:40101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28717 comm="syz.4.9009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72399befc9 code=0x7ffc0000 [ 536.315724][T28718] syzkaller1: entered allmulticast mode [ 536.339255][ T29] audit: type=1326 audit(2000000205.033:40102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28717 comm="syz.4.9009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72399befc9 code=0x7ffc0000 [ 536.368351][ T29] audit: type=1326 audit(2000000205.127:40103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28717 comm="syz.4.9009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72399befc9 code=0x7ffc0000 [ 536.391958][ T29] audit: type=1326 audit(2000000205.127:40104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28717 comm="syz.4.9009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72399befc9 code=0x7ffc0000 [ 536.421063][T28722] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9011'. [ 536.430645][T28725] lo speed is unknown, defaulting to 1000 [ 536.446358][T28725] lo speed is unknown, defaulting to 1000 [ 536.455764][T28725] lo speed is unknown, defaulting to 1000 [ 536.462624][T28725] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 536.472787][T28725] lo speed is unknown, defaulting to 1000 [ 536.480836][T28725] lo speed is unknown, defaulting to 1000 [ 536.492343][T28725] lo speed is unknown, defaulting to 1000 [ 536.498543][T28725] lo speed is unknown, defaulting to 1000 [ 536.520480][T28725] lo speed is unknown, defaulting to 1000 [ 536.526729][T28725] lo speed is unknown, defaulting to 1000 [ 536.535196][T28733] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9014'. [ 536.581654][T28738] syzkaller1: entered promiscuous mode [ 536.587585][T28738] syzkaller1: entered allmulticast mode [ 536.716983][T28746] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 536.740507][T28746] bond1 (unregistering): Released all slaves [ 536.835139][T28759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9022'. [ 536.922579][T28770] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9027'. [ 536.940906][T28770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28770 comm=syz.2.9027 [ 537.095592][T28783] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 537.128744][T28783] bond1 (unregistering): Released all slaves [ 537.347986][T28813] syzkaller1: entered promiscuous mode [ 537.353490][T28813] syzkaller1: entered allmulticast mode [ 537.471585][T28818] siw: device registration error -23 [ 537.687055][T28832] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 537.738409][T28832] bond1 (unregistering): Released all slaves [ 537.766770][T28815] Set syz1 is full, maxelem 65536 reached [ 538.223975][T28856] syzkaller0: entered promiscuous mode [ 538.229484][T28856] syzkaller0: entered allmulticast mode [ 538.496037][T28869] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 538.512757][T28869] bond1 (unregistering): Released all slaves [ 538.563754][T28867] Set syz1 is full, maxelem 65536 reached [ 538.952387][T28900] Set syz1 is full, maxelem 65536 reached [ 538.993373][T28920] __nla_validate_parse: 10 callbacks suppressed [ 538.993385][T28920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9084'. [ 539.008669][T28920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9084'. [ 539.036386][T28922] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 539.053909][T28922] bond1 (unregistering): Released all slaves [ 539.082696][T28933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9089'. [ 539.143735][T28935] siw: device registration error -23 [ 539.275396][T28948] FAULT_INJECTION: forcing a failure. [ 539.275396][T28948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.288507][T28948] CPU: 0 UID: 0 PID: 28948 Comm: syz.0.9095 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 539.288543][T28948] Tainted: [W]=WARN [ 539.288551][T28948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 539.288568][T28948] Call Trace: [ 539.288575][T28948] [ 539.288583][T28948] __dump_stack+0x1d/0x30 [ 539.288626][T28948] dump_stack_lvl+0xe8/0x140 [ 539.288644][T28948] dump_stack+0x15/0x1b [ 539.288659][T28948] should_fail_ex+0x265/0x280 [ 539.288681][T28948] should_fail+0xb/0x20 [ 539.288696][T28948] should_fail_usercopy+0x1a/0x20 [ 539.288715][T28948] _copy_from_user+0x1c/0xb0 [ 539.288785][T28948] copy_from_sockptr_offset+0x66/0xa0 [ 539.288818][T28948] do_arpt_set_ctl+0x5dd/0x9a0 [ 539.288842][T28948] ? lock_sock_nested+0x112/0x140 [ 539.288865][T28948] ? _raw_spin_unlock_bh+0x36/0x40 [ 539.288929][T28948] nf_setsockopt+0x199/0x1b0 [ 539.288954][T28948] ip_setsockopt+0x102/0x110 [ 539.288992][T28948] udp_setsockopt+0x99/0xb0 [ 539.289022][T28948] sock_common_setsockopt+0x69/0x80 [ 539.289046][T28948] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 539.289072][T28948] __sys_setsockopt+0x184/0x200 [ 539.289134][T28948] __x64_sys_setsockopt+0x64/0x80 [ 539.289183][T28948] x64_sys_call+0x20ec/0x3000 [ 539.289241][T28948] do_syscall_64+0xd2/0x200 [ 539.289326][T28948] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 539.289351][T28948] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 539.289380][T28948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.289477][T28948] RIP: 0033:0x7f841259efc9 [ 539.289491][T28948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.289508][T28948] RSP: 002b:00007f8411007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 539.289526][T28948] RAX: ffffffffffffffda RBX: 00007f84127f5fa0 RCX: 00007f841259efc9 [ 539.289537][T28948] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000006 [ 539.289613][T28948] RBP: 00007f8411007090 R08: 0000000000000418 R09: 0000000000000000 [ 539.289625][T28948] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000001 [ 539.289636][T28948] R13: 00007f84127f6038 R14: 00007f84127f5fa0 R15: 00007ffc099b26d8 [ 539.289654][T28948] [ 539.551879][T28949] netlink: 176 bytes leftover after parsing attributes in process `syz.2.9093'. [ 539.568154][T28951] syzkaller1: entered promiscuous mode [ 539.573881][T28951] syzkaller1: entered allmulticast mode [ 539.581197][T28953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9097'. [ 539.620329][T28957] netlink: 43 bytes leftover after parsing attributes in process `syz.0.9099'. [ 539.685218][T28961] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 539.709667][T28961] bond0 (unregistering): Released all slaves [ 540.124760][T28991] syzkaller1: entered promiscuous mode [ 540.130821][T28991] syzkaller1: entered allmulticast mode [ 540.187054][T28995] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 540.197832][T28995] bond0 (unregistering): Released all slaves [ 540.273138][T29005] FAULT_INJECTION: forcing a failure. [ 540.273138][T29005] name failslab, interval 1, probability 0, space 0, times 0 [ 540.285810][T29005] CPU: 1 UID: 0 PID: 29005 Comm: syz.2.9116 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 540.285850][T29005] Tainted: [W]=WARN [ 540.285857][T29005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 540.285950][T29005] Call Trace: [ 540.285958][T29005] [ 540.285966][T29005] __dump_stack+0x1d/0x30 [ 540.286011][T29005] dump_stack_lvl+0xe8/0x140 [ 540.286062][T29005] dump_stack+0x15/0x1b [ 540.286147][T29005] should_fail_ex+0x265/0x280 [ 540.286171][T29005] should_failslab+0x8c/0xb0 [ 540.286209][T29005] kmem_cache_alloc_noprof+0x50/0x480 [ 540.286246][T29005] ? dst_alloc+0xbd/0x100 [ 540.286319][T29005] ? __pfx_ip6_dst_gc+0x10/0x10 [ 540.286351][T29005] dst_alloc+0xbd/0x100 [ 540.286462][T29005] ip6_pol_route+0x6bf/0xb40 [ 540.286512][T29005] ? ip6_pol_route+0x389/0xb40 [ 540.286587][T29005] ip6_pol_route_output+0x40/0x50 [ 540.286619][T29005] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 540.286652][T29005] fib6_rule_lookup+0x112/0x470 [ 540.286674][T29005] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 540.286773][T29005] ? dev_get_by_index_rcu+0xa0/0xc0 [ 540.286851][T29005] ip6_route_output_flags+0x1e0/0x2c0 [ 540.286913][T29005] ip6_dst_lookup_tail+0xb6/0xab0 [ 540.286938][T29005] ? __account_obj_stock+0x211/0x350 [ 540.286980][T29005] ? obj_cgroup_charge_account+0x122/0x1a0 [ 540.287004][T29005] ip6_dst_lookup_flow+0x47/0xc0 [ 540.287022][T29005] rawv6_sendmsg+0xa29/0xf70 [ 540.287107][T29005] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 540.287138][T29005] inet_sendmsg+0xc5/0xd0 [ 540.287163][T29005] __sock_sendmsg+0x102/0x180 [ 540.287244][T29005] ____sys_sendmsg+0x31e/0x4e0 [ 540.287276][T29005] ___sys_sendmsg+0x17b/0x1d0 [ 540.287306][T29005] __x64_sys_sendmsg+0xd4/0x160 [ 540.287355][T29005] x64_sys_call+0x191e/0x3000 [ 540.287382][T29005] do_syscall_64+0xd2/0x200 [ 540.287403][T29005] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 540.287436][T29005] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 540.287493][T29005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.287533][T29005] RIP: 0033:0x7fd7f8bfefc9 [ 540.287547][T29005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.287562][T29005] RSP: 002b:00007fd7f7667038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 540.287581][T29005] RAX: ffffffffffffffda RBX: 00007fd7f8e55fa0 RCX: 00007fd7f8bfefc9 [ 540.287596][T29005] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 540.287610][T29005] RBP: 00007fd7f7667090 R08: 0000000000000000 R09: 0000000000000000 [ 540.287623][T29005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.287709][T29005] R13: 00007fd7f8e56038 R14: 00007fd7f8e55fa0 R15: 00007ffe61c31878 [ 540.287730][T29005] [ 540.614976][T29008] batadv_slave_1: entered promiscuous mode [ 540.625641][T29007] batadv_slave_1: left promiscuous mode [ 540.901987][T29028] syzkaller1: entered promiscuous mode [ 540.907606][T29028] syzkaller1: entered allmulticast mode [ 540.926415][T29030] siw: device registration error -23 [ 540.931921][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 540.931935][ T29] audit: type=1326 audit(2000000209.990:40627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29027 comm="syz.6.9125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93bbf8efc9 code=0x7ffc0000 [ 540.961694][ T29] audit: type=1326 audit(2000000209.990:40628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29027 comm="syz.6.9125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93bbf8efc9 code=0x7ffc0000 [ 540.985308][ T29] audit: type=1326 audit(2000000209.990:40629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29027 comm="syz.6.9125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f93bbf8efc9 code=0x7ffc0000 [ 541.008820][ T29] audit: type=1326 audit(2000000209.990:40630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29027 comm="syz.6.9125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93bbf8efc9 code=0x7ffc0000 [ 541.032381][ T29] audit: type=1326 audit(2000000209.990:40631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29027 comm="syz.6.9125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93bbf8efc9 code=0x7ffc0000 [ 541.090948][T29037] FAULT_INJECTION: forcing a failure. [ 541.090948][T29037] name failslab, interval 1, probability 0, space 0, times 0 [ 541.103747][T29037] CPU: 0 UID: 0 PID: 29037 Comm: syz.2.9128 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 541.103813][T29037] Tainted: [W]=WARN [ 541.103822][T29037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 541.103836][T29037] Call Trace: [ 541.103843][T29037] [ 541.103852][T29037] __dump_stack+0x1d/0x30 [ 541.103877][T29037] dump_stack_lvl+0xe8/0x140 [ 541.103940][T29037] dump_stack+0x15/0x1b [ 541.103961][T29037] should_fail_ex+0x265/0x280 [ 541.103984][T29037] should_failslab+0x8c/0xb0 [ 541.104018][T29037] kmem_cache_alloc_noprof+0x50/0x480 [ 541.104062][T29037] ? getname_flags+0x80/0x3b0 [ 541.104099][T29037] getname_flags+0x80/0x3b0 [ 541.104156][T29037] __x64_sys_renameat2+0x6c/0x90 [ 541.104181][T29037] x64_sys_call+0x3f9/0x3000 [ 541.104312][T29037] do_syscall_64+0xd2/0x200 [ 541.104331][T29037] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 541.104359][T29037] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 541.104396][T29037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.104423][T29037] RIP: 0033:0x7fd7f8bfefc9 [ 541.104485][T29037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.104521][T29037] RSP: 002b:00007fd7f7667038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 541.104571][T29037] RAX: ffffffffffffffda RBX: 00007fd7f8e55fa0 RCX: 00007fd7f8bfefc9 [ 541.104583][T29037] RDX: ffffffffffffff9c RSI: 0000200000000400 RDI: ffffffffffffff9c [ 541.104598][T29037] RBP: 00007fd7f7667090 R08: 0000000000000000 R09: 0000000000000000 [ 541.104612][T29037] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 541.104624][T29037] R13: 00007fd7f8e56038 R14: 00007fd7f8e55fa0 R15: 00007ffe61c31878 [ 541.104642][T29037] [ 541.119089][T29034] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 541.200985][ T29] audit: type=1326 audit(2000000210.284:40632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29045 comm="syz.2.9131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f8bfefc9 code=0x7ffc0000 [ 541.317563][ T29] audit: type=1326 audit(2000000210.284:40633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29045 comm="syz.2.9131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f8bfefc9 code=0x7ffc0000 [ 541.343530][T29034] bond1 (unregistering): Released all slaves [ 541.355163][ T29] audit: type=1326 audit(2000000210.337:40634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29045 comm="syz.2.9131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fd7f8bfefc9 code=0x7ffc0000 [ 541.378864][ T29] audit: type=1326 audit(2000000210.337:40635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29045 comm="syz.2.9131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f8bfefc9 code=0x7ffc0000 [ 541.402416][ T29] audit: type=1326 audit(2000000210.337:40636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29045 comm="syz.2.9131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f8bfefc9 code=0x7ffc0000 [ 541.466960][T29042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9130'. [ 541.557202][T29080] siw: device registration error -23 [ 541.604289][T29092] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9145'. [ 541.671883][T29096] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 541.692957][T29096] bond1 (unregistering): Released all slaves [ 542.228390][T29155] SELinux: failed to load policy [ 542.249322][T29155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9171'. [ 542.294590][T29155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9171'. [ 542.596479][T29175] hub 2-0:1.0: USB hub found [ 542.601214][T29175] hub 2-0:1.0: 8 ports detected [ 542.800781][T29198] 9pnet_fd: Insufficient options for proto=fd [ 542.899859][T29205] SELinux: failed to load policy [ 543.527464][T29292] vhci_hcd: invalid port number 96 [ 543.532629][T29292] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 543.542197][T29292] FAULT_INJECTION: forcing a failure. [ 543.542197][T29292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.555629][T29292] CPU: 0 UID: 0 PID: 29292 Comm: syz.5.9222 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 543.555709][T29292] Tainted: [W]=WARN [ 543.555718][T29292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 543.555735][T29292] Call Trace: [ 543.555809][T29292] [ 543.555819][T29292] __dump_stack+0x1d/0x30 [ 543.555850][T29292] dump_stack_lvl+0xe8/0x140 [ 543.555879][T29292] dump_stack+0x15/0x1b [ 543.555903][T29292] should_fail_ex+0x265/0x280 [ 543.556012][T29292] should_fail+0xb/0x20 [ 543.556034][T29292] should_fail_usercopy+0x1a/0x20 [ 543.556061][T29292] _copy_to_user+0x20/0xa0 [ 543.556097][T29292] simple_read_from_buffer+0xb5/0x130 [ 543.556146][T29292] proc_fail_nth_read+0x10e/0x150 [ 543.556190][T29292] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 543.556230][T29292] vfs_read+0x1a8/0x770 [ 543.556316][T29292] ? __rcu_read_unlock+0x4f/0x70 [ 543.556352][T29292] ? __fget_files+0x184/0x1c0 [ 543.556403][T29292] ksys_read+0xda/0x1a0 [ 543.556445][T29292] __x64_sys_read+0x40/0x50 [ 543.556474][T29292] x64_sys_call+0x27c0/0x3000 [ 543.556573][T29292] do_syscall_64+0xd2/0x200 [ 543.556618][T29292] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 543.556719][T29292] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 543.556758][T29292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.556784][T29292] RIP: 0033:0x7f55393dd9dc [ 543.556868][T29292] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 543.556885][T29292] RSP: 002b:00007f5537e3f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 543.556907][T29292] RAX: ffffffffffffffda RBX: 00007f5539635fa0 RCX: 00007f55393dd9dc [ 543.556923][T29292] RDX: 000000000000000f RSI: 00007f5537e3f0a0 RDI: 0000000000000006 [ 543.556937][T29292] RBP: 00007f5537e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 543.556970][T29292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.556981][T29292] R13: 00007f5539636038 R14: 00007f5539635fa0 R15: 00007ffffa769a18 [ 543.556998][T29292] [ 543.831991][T29300] vhci_hcd: invalid port number 96 [ 543.837133][T29300] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 543.885297][T10467] Bluetooth: hci0: Frame reassembly failed (-84) [ 543.896738][T29311] __nla_validate_parse: 13 callbacks suppressed [ 543.896753][T29311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9230'. [ 543.912265][T29311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9230'. [ 543.930403][T29313] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9231'. [ 544.337070][T29350] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9242'. [ 544.356195][T29332] lo speed is unknown, defaulting to 1000 [ 544.419076][T29358] siw: device registration error -23 [ 544.489796][T29332] chnl_net:caif_netlink_parms(): no params data found [ 544.512584][T29366] siw: device registration error -23 [ 544.562891][T29332] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.570033][T29332] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.577284][T29332] bridge_slave_0: entered allmulticast mode [ 544.585004][T29332] bridge_slave_0: entered promiscuous mode [ 544.592088][T29332] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.599198][T29332] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.606437][T29332] bridge_slave_1: entered allmulticast mode [ 544.616235][T29332] bridge_slave_1: entered promiscuous mode [ 544.632791][T29332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.643202][T29332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.659093][T10467] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.693471][T29332] team0: Port device team_slave_0 added [ 544.700303][T29332] team0: Port device team_slave_1 added [ 544.703170][T29383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9256'. [ 544.727585][T29332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.734523][T29332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.760524][T29332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.778953][T10467] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.813360][T29332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.820314][T29332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.846270][T29332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.941884][T10467] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.986008][T29332] hsr_slave_0: entered promiscuous mode [ 544.992207][T29332] hsr_slave_1: entered promiscuous mode [ 544.998183][T29332] debugfs: 'hsr0' already exists in 'hsr' [ 545.003989][T29332] Cannot create hsr debugfs directory [ 545.011592][T10467] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.121694][T29395] pim6reg1: entered promiscuous mode [ 545.127160][T29395] pim6reg1: entered allmulticast mode [ 545.154305][T10467] bridge_slave_1: left allmulticast mode [ 545.160004][T10467] bridge_slave_1: left promiscuous mode [ 545.165750][T10467] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.186434][T10467] bridge_slave_0: left allmulticast mode [ 545.192156][T10467] bridge_slave_0: left promiscuous mode [ 545.197839][T10467] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.461014][T10467] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.469700][T10467] bond_slave_0: left promiscuous mode [ 545.476076][T10467] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.484816][T10467] bond_slave_1: left promiscuous mode [ 545.491226][T10467] $Hÿ (unregistering): (slave dummy0): Releasing backup interface [ 545.499761][T10467] dummy0: left promiscuous mode [ 545.505428][T10467] $Hÿ (unregistering): Released all slaves [ 545.562589][T10467] hsr_slave_0: left promiscuous mode [ 545.568404][T10467] hsr_slave_1: left promiscuous mode [ 545.574137][T10467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.581586][T10467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.598163][T10467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.605586][T10467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.647725][T10467] veth1_macvtap: left promiscuous mode [ 545.653993][T10467] veth0_macvtap: left promiscuous mode [ 545.659621][T10467] veth1_vlan: left promiscuous mode [ 545.664904][T10467] veth0_vlan: left promiscuous mode [ 545.699633][T29411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9266'. [ 545.772517][T10467] team0 (unregistering): Port device team_slave_1 removed [ 545.785127][T10467] team0 (unregistering): Port device team_slave_0 removed [ 545.802758][ T3519] Bluetooth: hci0: command 0x1003 tx timeout [ 545.808762][ T3524] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 545.843539][ T36] infiniband syz1: ib_query_port failed (-19) [ 545.926202][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 545.926220][ T29] audit: type=1326 audit(2000000215.252:40802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29427 comm="syz.5.9272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55393defc9 code=0x7ffc0000 [ 545.961524][ T29] audit: type=1326 audit(2000000215.252:40803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29427 comm="syz.5.9272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55393defc9 code=0x7ffc0000 [ 545.985291][ T29] audit: type=1326 audit(2000000215.252:40804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29427 comm="syz.5.9272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f55393defc9 code=0x7ffc0000 [ 546.008932][ T29] audit: type=1326 audit(2000000215.284:40805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29427 comm="syz.5.9272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55393defc9 code=0x7ffc0000 [ 546.032546][ T29] audit: type=1326 audit(2000000215.284:40806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29427 comm="syz.5.9272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55393defc9 code=0x7ffc0000 [ 546.050873][T29439] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9277'. [ 546.084784][T10458] Bluetooth: hci0: Frame reassembly failed (-84) [ 546.087166][T29443] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9279'. [ 546.129664][T29332] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 546.138447][T29332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 546.147207][T29332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 546.156110][T29332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 546.189208][T29332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.201001][T29332] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.209942][T10455] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.217016][T10455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.227316][T10458] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.234397][T10458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.292273][T29332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.346797][ T270] Bluetooth: hci1: Frame reassembly failed (-84) [ 546.354017][T29443] Bluetooth: hci1: Frame reassembly failed (-90) [ 546.401730][T29332] veth0_vlan: entered promiscuous mode [ 546.409557][T29332] veth1_vlan: entered promiscuous mode [ 546.423460][T29332] veth0_macvtap: entered promiscuous mode [ 546.430460][T29332] veth1_macvtap: entered promiscuous mode [ 546.440369][T29332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.450939][T29332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.460930][T10455] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.469945][T10455] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.479046][T10455] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.488583][T10455] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.586387][T29469] siw: device registration error -23 [ 546.816391][ T29] audit: type=1326 audit(2000000216.187:40807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29476 comm="syz.2.9282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f8bfefc9 code=0x7ffc0000 [ 546.840031][ T29] audit: type=1326 audit(2000000216.187:40808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29476 comm="syz.2.9282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fd7f8bfefc9 code=0x7ffc0000 [ 546.863597][ T29] audit: type=1326 audit(2000000216.187:40809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29476 comm="syz.2.9282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f8bfefc9 code=0x7ffc0000 [ 546.887175][ T29] audit: type=1326 audit(2000000216.187:40810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29476 comm="syz.2.9282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd7f8bfefc9 code=0x7ffc0000 [ 546.913360][ T29] audit: type=1326 audit(2000000216.219:40811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29476 comm="syz.2.9282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f8bfefc9 code=0x7ffc0000 [ 547.183279][T29491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9287'. [ 547.211540][T29493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9288'. [ 547.488667][T29507] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 547.551509][T29509] Cannot find del_set index 3 as target [ 548.011031][T14105] Bluetooth: hci0: command 0x1003 tx timeout [ 548.011050][ T3524] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 548.213028][T29550] FAULT_INJECTION: forcing a failure. [ 548.213028][T29550] name failslab, interval 1, probability 0, space 0, times 0 [ 548.225789][T29550] CPU: 1 UID: 0 PID: 29550 Comm: syz.5.9308 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 548.225822][T29550] Tainted: [W]=WARN [ 548.225828][T29550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 548.225845][T29550] Call Trace: [ 548.225850][T29550] [ 548.225857][T29550] __dump_stack+0x1d/0x30 [ 548.225884][T29550] dump_stack_lvl+0xe8/0x140 [ 548.225997][T29550] dump_stack+0x15/0x1b [ 548.226015][T29550] should_fail_ex+0x265/0x280 [ 548.226035][T29550] should_failslab+0x8c/0xb0 [ 548.226072][T29550] kmem_cache_alloc_noprof+0x50/0x480 [ 548.226196][T29550] ? audit_log_start+0x342/0x720 [ 548.226226][T29550] audit_log_start+0x342/0x720 [ 548.226249][T29550] ? kstrtouint+0x76/0xc0 [ 548.226281][T29550] audit_seccomp+0x48/0x100 [ 548.226380][T29550] ? __seccomp_filter+0x82d/0x1250 [ 548.226428][T29550] __seccomp_filter+0x83e/0x1250 [ 548.226462][T29550] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 548.226517][T29550] ? vfs_write+0x7e8/0x960 [ 548.226545][T29550] __secure_computing+0x82/0x150 [ 548.226574][T29550] syscall_trace_enter+0xcf/0x1e0 [ 548.226605][T29550] do_syscall_64+0xac/0x200 [ 548.226695][T29550] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 548.226724][T29550] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 548.226756][T29550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.226777][T29550] RIP: 0033:0x7f55393defc9 [ 548.226827][T29550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.226849][T29550] RSP: 002b:00007f5537e3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 548.226870][T29550] RAX: ffffffffffffffda RBX: 00007f5539635fa0 RCX: 00007f55393defc9 [ 548.226881][T29550] RDX: 0000000000000000 RSI: 000000000008fff5 RDI: 0000200000000180 [ 548.226892][T29550] RBP: 00007f5537e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 548.226903][T29550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.226915][T29550] R13: 00007f5539636038 R14: 00007f5539635fa0 R15: 00007ffffa769a18 [ 548.227010][T29550] [ 548.438203][ T3519] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 548.458066][ T3524] Bluetooth: hci1: command 0x1003 tx timeout [ 548.510375][T29558] netlink: 'syz.0.9311': attribute type 1 has an invalid length. [ 548.649353][T29576] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 548.662463][T29576] bond1 (unregistering): Released all slaves [ 548.694210][T29585] __nla_validate_parse: 9 callbacks suppressed [ 548.694222][T29585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9323'. [ 548.994854][T29610] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9333'. [ 549.019970][T29615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9335'. [ 549.088695][T29617] SELinux: failed to load policy [ 549.153852][T29628] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9341'. [ 549.175859][T29622] siw: device registration error -23 [ 549.270201][T29644] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9347'. [ 549.279271][T29644] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9347'. [ 549.313538][T29650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9349'. [ 549.497469][T10458] Bluetooth: hci0: Frame reassembly failed (-84) [ 549.516646][T29665] Bluetooth: hci0: Frame reassembly failed (-90) [ 549.524037][T29628] Bluetooth: hci1: Frame reassembly failed (-90) [ 549.543988][T29674] Bluetooth: hci2: Frame reassembly failed (-90) [ 549.553402][T10458] Bluetooth: hci1: Frame reassembly failed (-84) [ 549.559770][T29674] FAULT_INJECTION: forcing a failure. [ 549.559770][T29674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.560905][T10451] Bluetooth: hci2: Frame reassembly failed (-84) [ 549.572911][T29674] CPU: 1 UID: 0 PID: 29674 Comm: syz.6.9358 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 549.572945][T29674] Tainted: [W]=WARN [ 549.572954][T29674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 549.572970][T29674] Call Trace: [ 549.573006][T29674] [ 549.573020][T29674] __dump_stack+0x1d/0x30 [ 549.573052][T29674] dump_stack_lvl+0xe8/0x140 [ 549.573077][T29674] dump_stack+0x15/0x1b [ 549.573099][T29674] should_fail_ex+0x265/0x280 [ 549.573124][T29674] should_fail+0xb/0x20 [ 549.573163][T29674] should_fail_usercopy+0x1a/0x20 [ 549.573228][T29674] _copy_to_user+0x20/0xa0 [ 549.573262][T29674] simple_read_from_buffer+0xb5/0x130 [ 549.573293][T29674] proc_fail_nth_read+0x10e/0x150 [ 549.573397][T29674] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 549.573436][T29674] vfs_read+0x1a8/0x770 [ 549.573464][T29674] ? __rcu_read_unlock+0x4f/0x70 [ 549.573534][T29674] ? __fget_files+0x184/0x1c0 [ 549.573567][T29674] ? tiocsti+0x19b/0x1d0 [ 549.573700][T29674] ksys_read+0xda/0x1a0 [ 549.573732][T29674] __x64_sys_read+0x40/0x50 [ 549.573763][T29674] x64_sys_call+0x27c0/0x3000 [ 549.573796][T29674] do_syscall_64+0xd2/0x200 [ 549.573880][T29674] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 549.573915][T29674] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 549.573990][T29674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.574018][T29674] RIP: 0033:0x7f93bbf8d9dc [ 549.574036][T29674] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 549.574068][T29674] RSP: 002b:00007f93ba9ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 549.574091][T29674] RAX: ffffffffffffffda RBX: 00007f93bc1e5fa0 RCX: 00007f93bbf8d9dc [ 549.574107][T29674] RDX: 000000000000000f RSI: 00007f93ba9ef0a0 RDI: 0000000000000005 [ 549.574122][T29674] RBP: 00007f93ba9ef090 R08: 0000000000000000 R09: 0000000000000000 [ 549.574217][T29674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.574231][T29674] R13: 00007f93bc1e6038 R14: 00007f93bc1e5fa0 R15: 00007fff6d073a58 [ 549.574255][T29674] [ 551.110142][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 551.110159][ T29] audit: type=1326 audit(2000000220.693:40927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29711 comm="syz.2.9370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f8bfefc9 code=0x7ffc0000 [ 551.142885][T29712] FAULT_INJECTION: forcing a failure. [ 551.142885][T29712] name failslab, interval 1, probability 0, space 0, times 0 [ 551.144038][ T29] audit: type=1326 audit(2000000220.693:40928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29711 comm="syz.2.9370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f8bfefc9 code=0x7ffc0000 [ 551.155541][T29712] CPU: 0 UID: 0 PID: 29712 Comm: syz.2.9370 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 551.155614][T29712] Tainted: [W]=WARN [ 551.155698][T29712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 551.155725][T29712] Call Trace: [ 551.155734][T29712] [ 551.155751][T29712] __dump_stack+0x1d/0x30 [ 551.155782][T29712] dump_stack_lvl+0xe8/0x140 [ 551.155849][T29712] dump_stack+0x15/0x1b [ 551.155911][T29712] should_fail_ex+0x265/0x280 [ 551.155938][T29712] should_failslab+0x8c/0xb0 [ 551.156030][T29712] kmem_cache_alloc_noprof+0x50/0x480 [ 551.156071][T29712] ? audit_log_start+0x342/0x720 [ 551.156103][T29712] audit_log_start+0x342/0x720 [ 551.156133][T29712] ? kstrtouint+0x76/0xc0 [ 551.156252][T29712] audit_seccomp+0x48/0x100 [ 551.156297][T29712] ? __seccomp_filter+0x82d/0x1250 [ 551.156398][T29712] __seccomp_filter+0x83e/0x1250 [ 551.156449][T29712] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 551.156488][T29712] ? vfs_write+0x7e8/0x960 [ 551.156527][T29712] ? __rcu_read_unlock+0x4f/0x70 [ 551.156631][T29712] ? __fget_files+0x184/0x1c0 [ 551.156657][T29712] __secure_computing+0x82/0x150 [ 551.156706][T29712] syscall_trace_enter+0xcf/0x1e0 [ 551.156777][T29712] do_syscall_64+0xac/0x200 [ 551.156801][T29712] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 551.156835][T29712] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 551.156874][T29712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.156981][T29712] RIP: 0033:0x7fd7f8bfefc9 [ 551.157000][T29712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.157085][T29712] RSP: 002b:00007fd7f7667038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.157110][T29712] RAX: ffffffffffffffda RBX: 00007fd7f8e55fa0 RCX: 00007fd7f8bfefc9 [ 551.157154][T29712] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000005 [ 551.157169][T29712] RBP: 00007fd7f7667090 R08: 0000000000000000 R09: 0000000000000000 [ 551.157209][T29712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.157224][T29712] R13: 00007fd7f8e56038 R14: 00007fd7f8e55fa0 R15: 00007ffe61c31878 [ 551.157247][T29712] [ 551.157255][T29712] audit: audit_lost=24 audit_rate_limit=0 audit_backlog_limit=64 [ 551.179094][ T29] audit: type=1326 audit(2000000220.703:40929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29711 comm="syz.2.9370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7f8bfefc9 code=0x7ffc0000 [ 551.190481][T29712] audit: out of memory in audit_log_start [ 551.432244][ T29] audit: type=1326 audit(2000000220.703:40930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29711 comm="syz.2.9370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f8bfefc9 code=0x7ffc0000 [ 551.455831][ T4245] Bluetooth: hci1: command 0x1003 tx timeout [ 551.455854][ T4245] Bluetooth: hci0: command 0x1003 tx timeout [ 551.455880][ T3524] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 551.455915][ T3519] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 551.461930][ T29] audit: type=1326 audit(2000000220.703:40931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29711 comm="syz.2.9370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f8bfefc9 code=0x7ffc0000 [ 551.503558][ T29] audit: type=1326 audit(2000000220.703:40932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29711 comm="syz.2.9370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7f8bfefc9 code=0x7ffc0000 [ 551.527168][ T3519] Bluetooth: hci2: command 0x1003 tx timeout [ 551.533539][ T29] audit: type=1326 audit(2000000220.703:40933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29711 comm="syz.2.9370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f8bfefc9 code=0x7ffc0000 [ 551.534727][T14105] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 551.557189][ T29] audit: type=1326 audit(2000000220.703:40934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29711 comm="syz.2.9370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7f8bfefc9 code=0x7ffc0000 [ 551.700671][T29731] FAULT_INJECTION: forcing a failure. [ 551.700671][T29731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.713748][T29731] CPU: 0 UID: 0 PID: 29731 Comm: syz.6.9377 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 551.713778][T29731] Tainted: [W]=WARN [ 551.713784][T29731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 551.713795][T29731] Call Trace: [ 551.713801][T29731] [ 551.713862][T29731] __dump_stack+0x1d/0x30 [ 551.713930][T29731] dump_stack_lvl+0xe8/0x140 [ 551.713955][T29731] dump_stack+0x15/0x1b [ 551.713976][T29731] should_fail_ex+0x265/0x280 [ 551.713999][T29731] should_fail+0xb/0x20 [ 551.714051][T29731] should_fail_usercopy+0x1a/0x20 [ 551.714069][T29731] _copy_to_user+0x20/0xa0 [ 551.714094][T29731] simple_read_from_buffer+0xb5/0x130 [ 551.714117][T29731] proc_fail_nth_read+0x10e/0x150 [ 551.714190][T29731] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 551.714225][T29731] vfs_read+0x1a8/0x770 [ 551.714252][T29731] ? __rcu_read_unlock+0x4f/0x70 [ 551.714281][T29731] ? __fget_files+0x184/0x1c0 [ 551.714370][T29731] ksys_read+0xda/0x1a0 [ 551.714446][T29731] __x64_sys_read+0x40/0x50 [ 551.714470][T29731] x64_sys_call+0x27c0/0x3000 [ 551.714490][T29731] do_syscall_64+0xd2/0x200 [ 551.714574][T29731] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 551.714611][T29731] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 551.714646][T29731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.714670][T29731] RIP: 0033:0x7f93bbf8d9dc [ 551.714688][T29731] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 551.714730][T29731] RSP: 002b:00007f93ba9ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 551.714778][T29731] RAX: ffffffffffffffda RBX: 00007f93bc1e5fa0 RCX: 00007f93bbf8d9dc [ 551.714789][T29731] RDX: 000000000000000f RSI: 00007f93ba9ef0a0 RDI: 0000000000000003 [ 551.714799][T29731] RBP: 00007f93ba9ef090 R08: 0000000000000000 R09: 0000000000000000 [ 551.714810][T29731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 551.714821][T29731] R13: 00007f93bc1e6038 R14: 00007f93bc1e5fa0 R15: 00007fff6d073a58 [ 551.714837][T29731] [ 552.200767][T10451] Bluetooth: hci0: Frame reassembly failed (-84) [ 552.318192][T29764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9391'. [ 552.367880][T29761] FAULT_INJECTION: forcing a failure. [ 552.367880][T29761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.381010][T29761] CPU: 0 UID: 0 PID: 29761 Comm: syz.4.9390 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 552.381044][T29761] Tainted: [W]=WARN [ 552.381050][T29761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 552.381064][T29761] Call Trace: [ 552.381071][T29761] [ 552.381079][T29761] __dump_stack+0x1d/0x30 [ 552.381179][T29761] dump_stack_lvl+0xe8/0x140 [ 552.381197][T29761] dump_stack+0x15/0x1b [ 552.381218][T29761] should_fail_ex+0x265/0x280 [ 552.381241][T29761] should_fail+0xb/0x20 [ 552.381341][T29761] should_fail_usercopy+0x1a/0x20 [ 552.381366][T29761] _copy_to_user+0x20/0xa0 [ 552.381403][T29761] simple_read_from_buffer+0xb5/0x130 [ 552.381426][T29761] proc_fail_nth_read+0x10e/0x150 [ 552.381485][T29761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.381522][T29761] vfs_read+0x1a8/0x770 [ 552.381543][T29761] ? __rcu_read_unlock+0x4f/0x70 [ 552.381568][T29761] ? __fget_files+0x184/0x1c0 [ 552.381597][T29761] ksys_read+0xda/0x1a0 [ 552.381621][T29761] __x64_sys_read+0x40/0x50 [ 552.381643][T29761] x64_sys_call+0x27c0/0x3000 [ 552.381664][T29761] do_syscall_64+0xd2/0x200 [ 552.381681][T29761] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 552.381761][T29761] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 552.381855][T29761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.381948][T29761] RIP: 0033:0x7f2c1ce3d9dc [ 552.381961][T29761] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 552.381977][T29761] RSP: 002b:00007f2c1b89f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 552.381994][T29761] RAX: ffffffffffffffda RBX: 00007f2c1d095fa0 RCX: 00007f2c1ce3d9dc [ 552.382005][T29761] RDX: 000000000000000f RSI: 00007f2c1b89f0a0 RDI: 0000000000000005 [ 552.382048][T29761] RBP: 00007f2c1b89f090 R08: 0000000000000000 R09: 0000000000000000 [ 552.382058][T29761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.382069][T29761] R13: 00007f2c1d096038 R14: 00007f2c1d095fa0 R15: 00007fffe251bfd8 [ 552.382086][T29761] [ 552.640660][T10467] Bluetooth: hci1: Frame reassembly failed (-84) [ 552.647761][T29764] Bluetooth: hci1: Frame reassembly failed (-90) [ 552.815182][T29788] syzkaller1: entered promiscuous mode [ 552.820761][T29788] syzkaller1: entered allmulticast mode [ 552.972047][T29804] FAULT_INJECTION: forcing a failure. [ 552.972047][T29804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.985259][T29804] CPU: 1 UID: 0 PID: 29804 Comm: syz.2.9408 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 552.985307][T29804] Tainted: [W]=WARN [ 552.985314][T29804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 552.985327][T29804] Call Trace: [ 552.985333][T29804] [ 552.985340][T29804] __dump_stack+0x1d/0x30 [ 552.985363][T29804] dump_stack_lvl+0xe8/0x140 [ 552.985390][T29804] dump_stack+0x15/0x1b [ 552.985484][T29804] should_fail_ex+0x265/0x280 [ 552.985503][T29804] should_fail+0xb/0x20 [ 552.985519][T29804] should_fail_usercopy+0x1a/0x20 [ 552.985621][T29804] _copy_from_iter+0xd2/0xe80 [ 552.985645][T29804] ? alloc_pages_mpol+0x217/0x260 [ 552.985670][T29804] copy_page_from_iter+0x178/0x2a0 [ 552.985695][T29804] tun_get_user+0x679/0x26e0 [ 552.985764][T29804] ? ref_tracker_alloc+0x1f2/0x2f0 [ 552.985803][T29804] tun_chr_write_iter+0x15e/0x210 [ 552.985831][T29804] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 552.985937][T29804] vfs_write+0x52a/0x960 [ 552.985967][T29804] ksys_write+0xda/0x1a0 [ 552.985993][T29804] __x64_sys_write+0x40/0x50 [ 552.986063][T29804] x64_sys_call+0x2802/0x3000 [ 552.986086][T29804] do_syscall_64+0xd2/0x200 [ 552.986104][T29804] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 552.986206][T29804] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 552.986238][T29804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.986258][T29804] RIP: 0033:0x7fd7f8bfda7f [ 552.986273][T29804] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 552.986314][T29804] RSP: 002b:00007fd7f7667000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 552.986332][T29804] RAX: ffffffffffffffda RBX: 00007fd7f8e55fa0 RCX: 00007fd7f8bfda7f [ 552.986345][T29804] RDX: 000000000000004a RSI: 0000200000000040 RDI: 00000000000000c8 [ 552.986357][T29804] RBP: 00007fd7f7667090 R08: 0000000000000000 R09: 0000000000000000 [ 552.986369][T29804] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 552.986381][T29804] R13: 00007fd7f8e56038 R14: 00007fd7f8e55fa0 R15: 00007ffe61c31878 [ 552.986416][T29804] [ 553.307200][T29819] FAULT_INJECTION: forcing a failure. [ 553.307200][T29819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.320359][T29819] CPU: 1 UID: 0 PID: 29819 Comm: syz.6.9414 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 553.320385][T29819] Tainted: [W]=WARN [ 553.320390][T29819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 553.320401][T29819] Call Trace: [ 553.320405][T29819] [ 553.320411][T29819] __dump_stack+0x1d/0x30 [ 553.320461][T29819] dump_stack_lvl+0xe8/0x140 [ 553.320538][T29819] dump_stack+0x15/0x1b [ 553.320552][T29819] should_fail_ex+0x265/0x280 [ 553.320594][T29819] should_fail+0xb/0x20 [ 553.320607][T29819] should_fail_usercopy+0x1a/0x20 [ 553.320624][T29819] _copy_from_user+0x1c/0xb0 [ 553.320685][T29819] do_seccomp+0x118/0xa40 [ 553.320706][T29819] ? fput+0x8f/0xc0 [ 553.320720][T29819] ? ksys_write+0x192/0x1a0 [ 553.320748][T29819] __x64_sys_seccomp+0x40/0x50 [ 553.320770][T29819] x64_sys_call+0x2ad8/0x3000 [ 553.320788][T29819] do_syscall_64+0xd2/0x200 [ 553.320871][T29819] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 553.320901][T29819] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 553.320937][T29819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.320955][T29819] RIP: 0033:0x7f93bbf8efc9 [ 553.320966][T29819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.320980][T29819] RSP: 002b:00007f93ba9ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 553.321027][T29819] RAX: ffffffffffffffda RBX: 00007f93bc1e5fa0 RCX: 00007f93bbf8efc9 [ 553.321037][T29819] RDX: 0000200000000000 RSI: 000000000000000c RDI: 0000000000000001 [ 553.321047][T29819] RBP: 00007f93ba9ef090 R08: 0000000000000000 R09: 0000000000000000 [ 553.321056][T29819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.321080][T29819] R13: 00007f93bc1e6038 R14: 00007f93bc1e5fa0 R15: 00007fff6d073a58 [ 553.321096][T29819] [ 553.538072][T10467] Bluetooth: hci2: Frame reassembly failed (-84) [ 553.542829][T29823] syzkaller1: entered promiscuous mode [ 553.549902][T29823] syzkaller1: entered allmulticast mode [ 553.551906][T29815] Bluetooth: hci2: Frame reassembly failed (-90) [ 553.694480][T10467] Bluetooth: hci3: Frame reassembly failed (-84) [ 553.868605][T29837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9423'. [ 553.878026][T29837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9423'. [ 553.888031][T29837] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9423'. [ 554.180698][T14105] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 554.561864][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 554.561905][ T4245] Bluetooth: hci1: command 0x1003 tx timeout [ 554.599187][T29882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9436'. [ 554.608157][T29882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9436'. [ 554.740148][T10467] Bluetooth: hci0: Frame reassembly failed (-84) [ 554.832468][T29893] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9440'. [ 554.841450][T29893] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9440'. [ 555.274001][T29914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9447'. [ 555.476094][ T3524] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 555.627834][ T3519] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 555.627840][ T3524] Bluetooth: hci3: command 0x1003 tx timeout [ 555.852380][T29923] lo speed is unknown, defaulting to 1000 [ 556.000343][ T29] kauditd_printk_skb: 445 callbacks suppressed [ 556.000356][ T29] audit: type=1326 audit(2000000225.829:41380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29937 comm="syz.0.9456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841259efc9 code=0x7ffc0000 [ 556.033878][ T29] audit: type=1326 audit(2000000225.829:41381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29937 comm="syz.0.9456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841259efc9 code=0x7ffc0000 [ 556.057590][ T29] audit: type=1326 audit(2000000225.829:41382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29937 comm="syz.0.9456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f841259efc9 code=0x7ffc0000 [ 556.081068][ T29] audit: type=1326 audit(2000000225.829:41383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29937 comm="syz.0.9456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841259efc9 code=0x7ffc0000 [ 556.104790][ T29] audit: type=1326 audit(2000000225.829:41384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29937 comm="syz.0.9456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841259efc9 code=0x7ffc0000 [ 556.128552][ T29] audit: type=1326 audit(2000000225.829:41385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29937 comm="syz.0.9456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f841259efc9 code=0x7ffc0000 [ 556.152044][ T29] audit: type=1326 audit(2000000225.829:41386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29937 comm="syz.0.9456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841259efc9 code=0x7ffc0000 [ 556.175613][ T29] audit: type=1326 audit(2000000225.829:41387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29937 comm="syz.0.9456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841259efc9 code=0x7ffc0000 [ 556.199206][ T29] audit: type=1326 audit(2000000225.829:41388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29937 comm="syz.0.9456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841259efc9 code=0x7ffc0000 [ 556.222876][ T29] audit: type=1326 audit(2000000225.829:41389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29937 comm="syz.0.9456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841259efc9 code=0x7ffc0000 [ 556.299184][ T270] Bluetooth: hci1: Frame reassembly failed (-84) [ 556.307295][T29938] Bluetooth: hci1: Frame reassembly failed (-90) [ 556.695081][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 556.851449][T29991] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9479'. [ 556.904311][ T2310] Bluetooth: hci0: Frame reassembly failed (-84) [ 557.699023][T30031] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9494'. [ 558.217564][ T3524] Bluetooth: hci1: command 0x1003 tx timeout [ 558.223691][ T3519] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 558.699692][T30060] __nla_validate_parse: 1 callbacks suppressed [ 558.699709][T30060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9504'. [ 558.714909][T30060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9504'. [ 558.760265][T30065] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9506'. [ 558.827639][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 558.934166][T30074] block device autoloading is deprecated and will be removed. [ 559.181846][T30094] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9514'. [ 559.628270][T30123] binfmt_misc: register: failed to install interpreter file ./file0 [ 559.768933][T30136] ================================================================== [ 559.777128][T30136] BUG: KCSAN: data-race in init_file / prepare_creds [ 559.783892][T30136] [ 559.786210][T30136] write to 0xffff8881470b1ca8 of 4 bytes by task 30137 on cpu 1: [ 559.793925][T30136] init_file+0x2e/0x1d0 [ 559.798073][T30136] alloc_empty_file+0x8b/0x200 [ 559.802835][T30136] alloc_file_pseudo+0xc6/0x160 [ 559.807684][T30136] sock_alloc_file+0x9c/0x1e0 [ 559.812358][T30136] __sys_socket+0x116/0x180 [ 559.816864][T30136] __x64_sys_socket+0x3f/0x50 [ 559.821556][T30136] x64_sys_call+0x1147/0x3000 [ 559.826234][T30136] do_syscall_64+0xd2/0x200 [ 559.830738][T30136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.836628][T30136] [ 559.838944][T30136] read to 0xffff8881470b1c00 of 184 bytes by task 30136 on cpu 0: [ 559.846738][T30136] prepare_creds+0x6c/0x4c0 [ 559.851247][T30136] __se_sys_capset+0x2a3/0x450 [ 559.856010][T30136] __x64_sys_capset+0x31/0x40 [ 559.860691][T30136] x64_sys_call+0x2823/0x3000 [ 559.865372][T30136] do_syscall_64+0xd2/0x200 [ 559.869880][T30136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.875770][T30136] [ 559.878094][T30136] Reported by Kernel Concurrency Sanitizer on: [ 559.884240][T30136] CPU: 0 UID: 0 PID: 30136 Comm: syz.4.9533 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 559.895613][T30136] Tainted: [W]=WARN [ 559.899410][T30136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 559.909462][T30136] ================================================================== [ 559.926866][T30137] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9533'. [ 559.935872][T30137] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9533'. [ 559.961647][T30141] IPv6: Can't replace route, no match found [ 559.975119][T30141] bridge0: entered promiscuous mode [ 559.980526][T30141] macsec1: entered promiscuous mode [ 559.986842][T30141] bridge0: port 3(macsec1) entered blocking state [ 559.993457][T30141] bridge0: port 3(macsec1) entered disabled state [ 560.000088][T30141] macsec1: entered allmulticast mode [ 560.005426][T30141] bridge0: entered allmulticast mode [ 560.017379][T30141] macsec1: left allmulticast mode [ 560.022418][T30141] bridge0: left allmulticast mode [ 560.034312][T30141] bridge0: left promiscuous mode [ 566.015737][T15641] unregister_netdevice: waiting for syz_tun to become free. Usage count = 3 [ 566.024860][T15641] ref_tracker: netdev@ffff88812f870558 has 1/2 users at [ 566.024860][T15641] dst_init+0x97/0x240 [ 566.024860][T15641] dst_alloc+0xe0/0x100 [ 566.024860][T15641] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 566.024860][T15641] ip_route_output_flow+0x65/0x110 [ 566.024860][T15641] geneve_link_config+0xdc/0x270 [ 566.024860][T15641] geneve_newlink+0x12a/0x160 [ 566.024860][T15641] rtnl_newlink_create+0x1bc/0x620 [ 566.024860][T15641] rtnl_newlink+0xf29/0x12d0 [ 566.024860][T15641] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 566.024860][T15641] netlink_rcv_skb+0x123/0x220 [ 566.024860][T15641] rtnetlink_rcv+0x1c/0x30 [ 566.024860][T15641] netlink_unicast+0x5c0/0x690 [ 566.024860][T15641] netlink_sendmsg+0x58b/0x6b0 [ 566.024860][T15641] __sock_sendmsg+0x145/0x180 [ 566.024860][T15641] __sys_sendto+0x268/0x330 [ 566.024860][T15641] __x64_sys_sendto+0x76/0x90 [ 566.024860][T15641] [ 566.113541][T15641] ref_tracker: netdev@ffff88812f870558 has 1/2 users at [ 566.113541][T15641] fib_check_nh+0x5be/0xbe0 [ 566.113541][T15641] fib_create_info+0x126b/0x1980 [ 566.113541][T15641] fib_table_insert+0x60/0xeb0 [ 566.113541][T15641] fib_magic+0x19a/0x1f0 [ 566.113541][T15641] fib_add_ifaddr+0x279/0x320 [ 566.113541][T15641] fib_netdev_event+0x355/0x430 [ 566.113541][T15641] raw_notifier_call_chain+0x6f/0x1b0 [ 566.113541][T15641] call_netdevice_notifiers_info+0xae/0x100 [ 566.113541][T15641] __dev_notify_flags+0xff/0x1a0 [ 566.113541][T15641] netif_change_flags+0xac/0xd0 [ 566.113541][T15641] do_setlink+0x9d2/0x2810 [ 566.113541][T15641] rtnl_newlink+0xe75/0x12d0 [ 566.113541][T15641] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 566.113541][T15641] netlink_rcv_skb+0x123/0x220 [ 566.113541][T15641] rtnetlink_rcv+0x1c/0x30 [ 566.113541][T15641] netlink_unicast+0x5c0/0x690 [ 566.113541][T15641]