last executing test programs: 3.749307951s ago: executing program 0 (id=943): socket$kcm(0x29, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xfe2a, 0x0, &(0x7f0000000d40)="fae56ac553d73f32", 0x0, 0x8009, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b80)="1b51641666a3b3d658a1b10391f43f4394b463a9b50118936740975d1e23bf9c73c40acb5367617ac21b100eed1776b26a80badcd2648c0c716cff0b913a42041acaa18cd6c70b533216179e1cfc981f071afac50e8236d5319f0b68860f9d4343c00f4bdf73d895e31f8de74e6d169a3c812190b5aac90d1eb037a3a82adaf3b6d3590541", &(0x7f0000000c40)="a25986ce069f6f79082b77914193fa4d93e981c3f4a58ba73019649e118b060ceec3e5d53b28bf351d5abab30d66f5b174e935ec9d853f9ec160075034a9286f122efa754bf085ec63de537ca23c390ba8ff14a0bf7858d5baca1eaf51543767fbc471e418014641f204ec6c423ac536e7c5dc96a48cf63d0fcab372583331c64024f1025db27c1d8a4b1fd157", 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001600)={0xfffffffe, 0x0}, 0x8) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000d80)={0x164, 0x2, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_NAT_SRC={0x9c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x3}]}}, @CTA_FILTER={0x3c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x440}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x88}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x268}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x32}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x808}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x100}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x226}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_NAT_DST={0x34, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1400}]}, 0x164}, 0x1, 0x0, 0x0, 0x4048850}, 0x4000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x22100, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xc8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001640)=r2, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="95000000000000009500000000000000b7080000000000007b8af8ff00000000b7080000810000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400010000020007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180000000300000000000000f80c0000"], &(0x7f0000000180)='syzkaller\x00', 0x401, 0x8c, &(0x7f0000000280)=""/140, 0x41100, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x3, 0xc, 0x80000001}, 0x10, r2, 0x0, 0x0, &(0x7f0000000200)=[r1, r1], 0x0, 0x10, 0xffff}, 0x94) r6 = socket$kcm(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000b40)={&(0x7f00000004c0), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000540)=""/139, 0x8b}, {&(0x7f0000000600)=""/248, 0xf8}, {&(0x7f0000000700)}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000000740)=""/152, 0x98}, {&(0x7f0000000800)}, {&(0x7f0000000840)=""/97, 0x61}, {&(0x7f00000008c0)=""/17, 0x11}, {&(0x7f0000000900)=""/72, 0x48}, {&(0x7f00000009c0)=""/98, 0x62}], 0xa, &(0x7f0000000b00)}, 0x40000100) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x40086602, &(0x7f0000001cc0)) 3.461601209s ago: executing program 1 (id=945): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0xfffe}, 0x10) 3.368144697s ago: executing program 3 (id=946): socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002200)=ANY=[@ANYBLOB="140000001000009006000000000000000100000a38000000090a00000000000d000000000000000908000a40000000000900020073797a32000000000800054000000000080004400000000114008c201bb92081a31400000084000a00009cd3ca2253e0a40f5e26880000"], 0x60}}, 0x810) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000002280)=ANY=[@ANYBLOB="2800000002030102000000000000000007000003090002000000000202000000080003400000000de95aa9bee85d9f6f14a1a2394c4f1328282b18d060a706f1cf77f3d430ac2e7c541be2877174d052fbe46b978a7103ac426dd14e13f897175cd4"], 0x28}, 0x1, 0x0, 0x0, 0x448c0}, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x1, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe, 0x1800, 0x0, 0x0, 0x0, 0x8000000000000080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f0000010000000000000000000000000000000000000000921c0000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff0000000027bd700005350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="0000984e00000000003bc500004e97482380000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r4 = getpid() r5 = perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2006, 0x0, @perf_config_ext={0x0, 0x9}, 0x80, 0x0, 0x0, 0x8, 0x3fe, 0x7bffffff}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021540000000c0a01030000000000000000070000080900020073797a31000000000900010073797a300000000028000380240000800800034000000001"], 0xd8}}, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200005245855db7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r9 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x541b, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) r10 = socket$kcm(0xa, 0x2, 0x0) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r10, 0x29, 0x17, &(0x7f0000000100)=r11, 0x4) (async) sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2, 0x3}, 0x80, 0x0}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000000204000000000000000000000a030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) 3.312553288s ago: executing program 2 (id=947): r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x554b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x5, 0x2, 0xf7fff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x2001, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x40047451, &(0x7f0000000180)) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x3000c085) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x24008854) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r8, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 3.312085641s ago: executing program 1 (id=948): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0, 0x0, 0x4000000000000000}, 0x38) 3.20571833s ago: executing program 4 (id=949): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000020300)={0x0, 0x0, &(0x7f00000102c0)={&(0x7f0000010280)={0x10020, 0x3f7, 0x200, 0x70bd2c, 0x25dfdbfb, {0xffffffffffffff41, 0xffff, './file0', './file0'}}, 0x10020}, 0x1, 0x0, 0x0, 0x44080}, 0x8044) (async) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000020300)={0x0, 0x0, &(0x7f00000102c0)={&(0x7f0000010280)={0x10020, 0x3f7, 0x200, 0x70bd2c, 0x25dfdbfb, {0xffffffffffffff41, 0xffff, './file0', './file0'}}, 0x10020}, 0x1, 0x0, 0x0, 0x44080}, 0x8044) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x4}, {0x0, 0x0, 0x80000000}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.10785182s ago: executing program 3 (id=950): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x10, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r0, 0x8001, 0x10}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 2.775756927s ago: executing program 3 (id=951): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x100, 0x4000000000001ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0xc, 0x6, 0x3, 0x0, 0x0, {0xf, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x8008000) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000002c0)={0x0, 0x58, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x14, 0x1, 0x0, 0x0, {0x1e, 0x88}}, 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x681, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x100000, 0x0, 0x100000, 0x4, 0x3fe, 0x77ffffff, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket(0x10, 0x2, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x11, &(0x7f0000000140), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001500010328bd0800fbdbdf250c0000000c0004"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000005c0)) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x1406, 0x2, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4002) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x400000}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.560493433s ago: executing program 0 (id=952): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r3}, 0x38) 2.077993814s ago: executing program 4 (id=953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x6018, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, 0x0, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x37}, @in6=@loopback, 0x4e22, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x40000000000000, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd, 0x0, 0x1c00000000}, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000003dc0)={&(0x7f0000002180)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000041}, 0x4000040) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd368a6acfbb9f167}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x50}, 0x1, 0x0, 0x0, 0x24000080}, 0x8000) 2.035757939s ago: executing program 2 (id=954): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r3, &(0x7f0000000240), &(0x7f0000000280)=""/224}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xfffffffd, 0x20000000}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x7c, 0x2, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xb00}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x110}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x9}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x44}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x7, 0x80}}]}}]}, 0x7c}}, 0x801) 2.006867491s ago: executing program 3 (id=955): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xf7fff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080005000300e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYRESOCT], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', r4, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x0) r6 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_devices(r6, &(0x7f0000000080)=ANY=[], 0xfefb) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket(0x2c, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022b7000000000000", @ANYRES32, @ANYBLOB="0000000000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r9, &(0x7f0000000140), &(0x7f0000000080)=@tcp6=r8, 0x4}, 0x20) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030001007a32000000000c00024000000000000000010900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1.875686356s ago: executing program 1 (id=956): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000a80)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 1.874367266s ago: executing program 0 (id=957): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001000000dc000000000d85ce"], 0x18}, 0xfc00) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="51060000000000000046577752000100002566000026495a"], 0x18}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socket$kcm(0x2, 0x200000000000003, 0x106) socketpair(0xa, 0x3, 0xff, &(0x7f0000000180)) socket$kcm(0x22, 0x2, 0x21) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.837808741s ago: executing program 4 (id=958): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000004000000080000000a00000000000000", @ANYRES32, @ANYBLOB="0000000280006ea611acfc2f2a06154197a3ab3cf304d227118289a970ea06b34c1b32236297b26cd1529f58e300d60a2d7fa50ed0de2361a1bb4021fe89342da7ac5033aa1279c17eb57763ba48389c69115b3fe7e6961273c2b994d7111ee70e780ad38ad216366b5548ff770c2dacc00984789eff9fcf04edea4dbb78eb7d0e1352b08d502d9c1aa5334e713b5dd6f4fcc8df088926160c28ebf33099d4fe72e8448caddb8fd1f2530f5417503cc909eac0c08956c598e9d3473de99919c96d3e10ce6b0ecd6db72c809d65b269e5a00c3cc08a1c9fe9022ecf5a21535fa22866e5bae5b23b182570cec5d80000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000200000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) close(r2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.649733684s ago: executing program 3 (id=959): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001d0000000000000000000000000000000000000000000000fe7547887b8624487df050897f47bd401ed90f6ab51399c5da3b03876ff10206e35460f989"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000001480)=ANY=[@ANYBLOB="1806000000000400000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b712000000000000850000000c000000b7079d6f8a8d5fbc37982ba5d6a4c065a12f000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000b0d89bf75f08518e18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000001440), &(0x7f0000000140)=r2}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x78, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x400, @empty, 0x6}}, 0x80, 0x0}, 0x0) r6 = socket$kcm(0x2, 0x2, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x84, &(0x7f0000000000), 0x90) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001280)='cpuacct.usage_sys\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x4, @perf_config_ext={0x7, 0x1}, 0x228, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x3a}, 0x0, 0xffffffffffffffff, r7, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="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", 0x239}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x4}, {0x0, 0x0, 0x20, 0x1}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000012c0)={'xfrm0\x00', @broadcast}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001200)={0xffffffffffffffff, 0x20, &(0x7f00000011c0)={&(0x7f00000001c0)=""/4096, 0x1000, 0x0, &(0x7f0000000100)=""/89, 0x59}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001240)=r9, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) 1.474473254s ago: executing program 1 (id=960): socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x5, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x6}, 0x14105, 0x2e, 0xffffebff, 0x3, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x21, 0x2, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000001000850000009b0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0xfe00) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}, 0x40000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 1.339387422s ago: executing program 4 (id=961): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x108001, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000001980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c0000000e0a05050000080000000000030000050800044000000002140000001100010000000000000000000500000a"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, r1, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff1, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x10008, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0045878, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x1, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18120000", @ANYRES32, @ANYBLOB="000000000400000000000000"], &(0x7f0000000440)='GPL\x00', 0xc9, 0x24, &(0x7f0000000480)=""/36, 0x41100, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x10, 0x4, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[r5]}, 0x94) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) (async) syz_clone(0x800000, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000007000000a0000000bf0900000000000026090600000003e704000000070000005c93000000000000b5030200000000008500000052000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/13], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0x23, 0x2, 0x0) 1.286276931s ago: executing program 0 (id=962): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb00000000000000000000000000000000ffff20000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000090000000000000008000000000000000000000000000000ff7f0000000000000000000000000000010000000000000009000000000000008000000000000000000000000000000000000000000000000001000300000000840105007f000001000000000000000000000000000004d43200000000000000ac14143b00000000000000000000000000000000000012000000000000000000000000007f000001000000000000000000000000000000002b00000000000000fe800000000000000000000000000000000000000000000000080000000000000700000020010000000000000000000000000001000004d432"], 0x23c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000040601020000000000000000020000020500010007000400"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0xd, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c5) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x80, 0x1405, 0x10, 0x70bd29, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20040884}, 0x20008015) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 993.348352ms ago: executing program 2 (id=963): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f00000008c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r3 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2, 0x5, 0x84) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x200081, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x200040c0) 912.067632ms ago: executing program 4 (id=964): r0 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast1}, 0x1, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000280)="5bbb589abec673d27f486b6b1c37bf73e00e20c4c631b2cb076e0fbb74c4f9defca03771eea280f3b875262001c78ffef02f9d0b4b665b8433b7fc4bc24dddf2ebcdc4f1441e4d6bc7908b0445da9ff292e43978e5469bf70d40352bb897854f7706a3a0e167478443cc98f86349ed40fa552ddbd0510d3b43f71c", 0x7b}, {&(0x7f0000000640)="36ddb03bb38d2891f4aaa27e04c3a8d1e2dd351b5770c347b8d0cd559f89beae494cce89b10425477f3b632613f10a9283533ef7a791542a9c6249a521693e62af717d0e152f62130c047d1319b4c6321ab004afa15d2b8a3b2c423fb55527f50beb147a64f392b198b7b9da714da6e04f4179de01dbe327d1d9081a38642c49be1b2e0be3af5121802079a98b1d3e7853f5f51991349096e87beac98be4b552d860021709cf2167c13f8284b5f74639a196c4285660da1045dd2e3a36abe1", 0xbf}, {&(0x7f0000000480)="f871a7fddfe6dbc98705639a6ffd4f145b63fcfea42e0e9cc9f22471bf67b6d3ba15ca32af44123d85cffe041113d04470b3d28daf3b9df7ca449c585a79c1cc8899fc06c14b7b0535fcb5effdba5f4ea0852a7c89d910b949dee554a6b7841b08cc39960d724d7e9434e96cd5ea5e884d556eac99b1c410339477fbb478ef", 0x7f}, {&(0x7f0000000700)="d69f4382acb859e1452fced9fc308a668015b3ec1ff0277c33d818616eb010d82f8955e0d9b74c92c3c7c4af5e7c912be133b22034d13fbbdbcd1a3c3dfbb7485a30a8bfcaf66a056217eb19b7756cb8a672ec2d6fab86920ef4969c5a30bf8cb896db8507bb4e62b19f982560947cb0ffb5516f23a62b87203e0aff5cf59aca865a7388a6b38fb7025352d4ec892656a70678c2a17427133fb0ba7479abd0b3febac517018ee5355e40a87fdb97e1dada906361101aac948a73c90bf1cce4a725c130302f556cf0659e1fe978b2fc25a4476d1dd0aebc3148773cdaad4a1c64766f9ad744d849d5e32a2f45a9170042441fdda96a5abec95f", 0xf9}, {&(0x7f0000000800)="3ad68ff1f55013e03508dccc8dda44a1b8ea3699d5a6f051bdf0b076e35eef04b7ac6c3df4a8a6a897c16e2b3fdcaafb3ea4cb6848f2d10eb0a60deb1c81750dfb2d05422f067a315c97f752ace6609e8f7cf25ed9ae5a452214", 0x5a}], 0x5, &(0x7f0000000900)=[{0x48, 0x118, 0xfe, "ecbf9f46d527b14c5edf61e9e42016b149fb03b8d895a410750ee0a49266ea27dd819dd5c61f5941d6d49ba669814561aece"}, {0x18, 0x117, 0x7, "f827f8e31a"}, {0xa0, 0x10a, 0x0, "51ad93eb57711a149280dfdeaeebaafcf824a0929e618bd0ac6aa1b6f43b07ffd1760d5d90a29c46ec92697124a423832d49e757b31fccb8758bef08ae18631b9ea9730dca6e47a391e518642cca74f464efe6ef2abdce71b5d39faa8a617fa58bb0d7004d7924e853066e408332a097f26b56f3ec6565e0184e53583296b97e81b761e09f5380e5942e16477005"}], 0x100}, 0x300000d0) socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x18801) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) close(r4) 905.48303ms ago: executing program 3 (id=965): r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x554b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x5, 0x2, 0xf7fff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x2001, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x40047451, &(0x7f0000000180)) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x3000c085) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x24008854) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r8, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 689.49548ms ago: executing program 1 (id=966): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000240), &(0x7f0000000380)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f00000006c0)}, 0x20) 563.846635ms ago: executing program 2 (id=967): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r3}, 0x38) 520.433843ms ago: executing program 0 (id=968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x6018, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, 0x0, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x37}, @in6=@loopback, 0x4e22, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x40000000000000, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd, 0x0, 0x1c00000000}, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000003dc0)={&(0x7f0000002180)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000041}, 0x4000040) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd368a6acfbb9f167}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x50}, 0x1, 0x0, 0x0, 0x24000080}, 0x8000) 418.413129ms ago: executing program 1 (id=969): socket$kcm(0x21, 0x2, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='3\x00'], 0x20) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0xb, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_LINENO={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0xc884}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = socket$kcm(0xa, 0x922000000003, 0x11) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r3}, 0x18) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3931}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r4}, 0x18) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 383.658026ms ago: executing program 4 (id=970): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0xd50, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xec, 0x5, 0xd, 0x7, 0x0, 0x7fffffff, 0x7a5d4, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_bp={0x0, 0x4}, 0x2, 0xa, 0x7, 0x0, 0x81, 0x5, 0x9, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffe4f, 0x0}, 0x40000000) perf_event_open(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x22, 0x8, 0x70bd26, 0x25dfdbfd, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40001) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4000) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d000000030006fb0a0002000a0ada1b40d80500c5000e", 0x2b}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1c0000001d008103", 0x8}], 0x1, 0x0, 0x0, 0x5865}, 0x4) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="f0"], 0xfe33) recvmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x1) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0x0, 0x0, 0x4, 0x0, 0x84, 0x84842, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_config_ext={0x14, 0x2}, 0x40, 0x20008, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0xfffffffe, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 190.284335ms ago: executing program 0 (id=971): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = getpid() socketpair(0x21, 0x6, 0xed, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x2e80000000, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) mount$bpf(0x0, &(0x7f0000011c00)='./file0\x00', 0x0, 0x0, 0x0) 104.014731ms ago: executing program 2 (id=972): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) setsockopt$sock_attach_bpf(r1, 0x29, 0x30, &(0x7f0000000100)=r0, 0x5042) 0s ago: executing program 2 (id=973): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000011c00)='./file0\x00', 0x0, 0x0, 0x0) (fail_nth: 10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts. [ 83.965901][ T5816] cgroup: Unknown subsys name 'net' [ 84.088418][ T5816] cgroup: Unknown subsys name 'cpuset' [ 84.097762][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.681644][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.538307][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.555027][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.558622][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.568209][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.570115][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.577677][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.584794][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.592952][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.598076][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.605537][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.621424][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.630059][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.638440][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.649793][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.657694][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.680876][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.694937][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.702719][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.723219][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.731237][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.762250][ T5148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.776885][ T5148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.787586][ T5148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.796155][ T5148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.804529][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.370753][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 90.416257][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 90.627304][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 90.663094][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 90.691996][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 90.741225][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.749322][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.757049][ T5831] bridge_slave_0: entered allmulticast mode [ 90.765128][ T5831] bridge_slave_0: entered promiscuous mode [ 90.791785][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.799067][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.806372][ T5827] bridge_slave_0: entered allmulticast mode [ 90.813651][ T5827] bridge_slave_0: entered promiscuous mode [ 90.833504][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.840927][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.848188][ T5831] bridge_slave_1: entered allmulticast mode [ 90.855663][ T5831] bridge_slave_1: entered promiscuous mode [ 90.884188][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.891376][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.898736][ T5827] bridge_slave_1: entered allmulticast mode [ 90.906009][ T5827] bridge_slave_1: entered promiscuous mode [ 91.059788][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.077688][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.084981][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.092133][ T5837] bridge_slave_0: entered allmulticast mode [ 91.100093][ T5837] bridge_slave_0: entered promiscuous mode [ 91.110088][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.133848][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.168082][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.175384][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.182799][ T5837] bridge_slave_1: entered allmulticast mode [ 91.190572][ T5837] bridge_slave_1: entered promiscuous mode [ 91.199550][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.226877][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.234033][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.241808][ T5832] bridge_slave_0: entered allmulticast mode [ 91.250603][ T5832] bridge_slave_0: entered promiscuous mode [ 91.282744][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.290174][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.297579][ T5840] bridge_slave_0: entered allmulticast mode [ 91.305057][ T5840] bridge_slave_0: entered promiscuous mode [ 91.337286][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.344635][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.352097][ T5832] bridge_slave_1: entered allmulticast mode [ 91.359813][ T5832] bridge_slave_1: entered promiscuous mode [ 91.379021][ T5831] team0: Port device team_slave_0 added [ 91.385573][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.392769][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.399983][ T5840] bridge_slave_1: entered allmulticast mode [ 91.407226][ T5840] bridge_slave_1: entered promiscuous mode [ 91.429153][ T5827] team0: Port device team_slave_0 added [ 91.448416][ T5831] team0: Port device team_slave_1 added [ 91.469331][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.481048][ T5827] team0: Port device team_slave_1 added [ 91.490063][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.526339][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.549018][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.572550][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.619031][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.626221][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.635388][ T5148] Bluetooth: hci1: command tx timeout [ 91.658695][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.673693][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.681164][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.709179][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.719771][ T5834] Bluetooth: hci0: command tx timeout [ 91.720031][ T5148] Bluetooth: hci2: command tx timeout [ 91.730238][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.771508][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.778593][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.806212][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.814913][ T5148] Bluetooth: hci3: command tx timeout [ 91.819777][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.829287][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.855339][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.874487][ T5148] Bluetooth: hci4: command tx timeout [ 91.901696][ T5837] team0: Port device team_slave_0 added [ 91.919908][ T5832] team0: Port device team_slave_0 added [ 91.929257][ T5832] team0: Port device team_slave_1 added [ 91.951303][ T5840] team0: Port device team_slave_0 added [ 91.959092][ T10] cfg80211: failed to load regulatory.db [ 91.963920][ T5840] team0: Port device team_slave_1 added [ 91.972430][ T5837] team0: Port device team_slave_1 added [ 92.033518][ T5831] hsr_slave_0: entered promiscuous mode [ 92.040832][ T5831] hsr_slave_1: entered promiscuous mode [ 92.082868][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.090067][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.116751][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.129570][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.136616][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.162831][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.217653][ T5827] hsr_slave_0: entered promiscuous mode [ 92.225081][ T5827] hsr_slave_1: entered promiscuous mode [ 92.231223][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 92.237771][ T5827] Cannot create hsr debugfs directory [ 92.257436][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.264593][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.290583][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.302412][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.309617][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.335601][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.348138][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.355247][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.381202][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.412491][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.419938][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.445900][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.560627][ T5832] hsr_slave_0: entered promiscuous mode [ 92.567297][ T5832] hsr_slave_1: entered promiscuous mode [ 92.573377][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 92.579803][ T5832] Cannot create hsr debugfs directory [ 92.641308][ T5837] hsr_slave_0: entered promiscuous mode [ 92.648832][ T5837] hsr_slave_1: entered promiscuous mode [ 92.655931][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 92.661679][ T5837] Cannot create hsr debugfs directory [ 92.723456][ T5840] hsr_slave_0: entered promiscuous mode [ 92.729888][ T5840] hsr_slave_1: entered promiscuous mode [ 92.736504][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 92.742337][ T5840] Cannot create hsr debugfs directory [ 93.159781][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.171759][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.187916][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.208543][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.263270][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.280360][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.291724][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.302856][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.376920][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.393621][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.409373][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.419569][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.549780][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.560127][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.570435][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.581431][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.670840][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.701203][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.720103][ T5148] Bluetooth: hci1: command tx timeout [ 93.728138][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.739518][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.753165][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.768813][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.796156][ T5834] Bluetooth: hci0: command tx timeout [ 93.803256][ T5148] Bluetooth: hci2: command tx timeout [ 93.819003][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.844435][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.851715][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.870527][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.884513][ T5148] Bluetooth: hci3: command tx timeout [ 93.895063][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.902229][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.911521][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.918751][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.956144][ T5148] Bluetooth: hci4: command tx timeout [ 93.971052][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.978356][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.068554][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.152979][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.169998][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.220963][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.228174][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.270110][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.280783][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.287983][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.338411][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.345648][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.358703][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.365918][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.437684][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.553218][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.589567][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.596807][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.622249][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.632468][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.639662][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.671874][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.853945][ T5831] veth0_vlan: entered promiscuous mode [ 94.913549][ T5827] veth0_vlan: entered promiscuous mode [ 94.958850][ T5831] veth1_vlan: entered promiscuous mode [ 94.983385][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.993814][ T5827] veth1_vlan: entered promiscuous mode [ 95.083047][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.138581][ T5831] veth0_macvtap: entered promiscuous mode [ 95.200525][ T5831] veth1_macvtap: entered promiscuous mode [ 95.222705][ T5827] veth0_macvtap: entered promiscuous mode [ 95.234161][ T5832] veth0_vlan: entered promiscuous mode [ 95.259005][ T5827] veth1_macvtap: entered promiscuous mode [ 95.280848][ T5832] veth1_vlan: entered promiscuous mode [ 95.301567][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.337384][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.355876][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.368592][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.403550][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.418093][ T1324] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.429457][ T1324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.452358][ T1324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.464058][ T1324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.516093][ T1324] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.529678][ T5832] veth0_macvtap: entered promiscuous mode [ 95.555328][ T1324] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.569046][ T5832] veth1_macvtap: entered promiscuous mode [ 95.588200][ T1324] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.598156][ T1324] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.689739][ T5840] veth0_vlan: entered promiscuous mode [ 95.720417][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.760253][ T5840] veth1_vlan: entered promiscuous mode [ 95.775111][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.788812][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.802462][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.810417][ T5148] Bluetooth: hci1: command tx timeout [ 95.824007][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.833644][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.859078][ T1324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.868489][ T1324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.878773][ T5834] Bluetooth: hci0: command tx timeout [ 95.886348][ T5148] Bluetooth: hci2: command tx timeout [ 95.910042][ T5837] veth0_vlan: entered promiscuous mode [ 95.917881][ T1324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.927375][ T1324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.943678][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.955354][ T5148] Bluetooth: hci3: command tx timeout [ 95.962615][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.990896][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.018408][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.026090][ T5837] veth1_vlan: entered promiscuous mode [ 96.036314][ T5148] Bluetooth: hci4: command tx timeout [ 96.106536][ T5840] veth0_macvtap: entered promiscuous mode [ 96.122826][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.164867][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.172748][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.175488][ T5840] veth1_macvtap: entered promiscuous mode [ 96.243392][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.288418][ T5837] veth0_macvtap: entered promiscuous mode [ 96.339634][ T5837] veth1_macvtap: entered promiscuous mode [ 96.351021][ T5946] netlink: 'syz.2.3': attribute type 3 has an invalid length. [ 96.369580][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.377176][ T5946] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3'. [ 96.403758][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.418375][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.434739][ C1] hrtimer: interrupt took 622708 ns [ 96.466331][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.505838][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.521856][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.565341][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.592845][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.627916][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.722197][ T5948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6'. [ 96.757964][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.782121][ T1324] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.791355][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.801998][ T1324] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.825833][ T1324] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.836917][ T1324] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.027646][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.047828][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.081112][ T5956] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 97.152013][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.179086][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.263145][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.365259][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.410469][ T5963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.875474][ T5148] Bluetooth: hci1: command tx timeout [ 98.007353][ T5148] Bluetooth: hci2: command tx timeout [ 98.012818][ T5148] Bluetooth: hci0: command tx timeout [ 98.034835][ T5834] Bluetooth: hci3: command tx timeout [ 98.118163][ T5834] Bluetooth: hci4: command tx timeout [ 98.361826][ T5980] warning: `syz.0.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.438015][ T5980] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 98.732703][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 98.742118][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 99.821227][ T5996] netlink: 211780 bytes leftover after parsing attributes in process `syz.0.19'. [ 100.155481][ T6002] IPv6: Can't replace route, no match found [ 100.888060][ T6002] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 100.918122][ T5999] netlink: 312 bytes leftover after parsing attributes in process `syz.0.19'. [ 101.512879][ T6015] netlink: 452 bytes leftover after parsing attributes in process `syz.3.23'. [ 102.369952][ T6028] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 102.517459][ T6032] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 102.647179][ T6036] Zero length message leads to an empty skb [ 102.733536][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 102.890737][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 102.912460][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 104.073378][ T6062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.38'. [ 104.924712][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'. [ 104.959174][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'. [ 105.166821][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'. [ 105.185221][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'. [ 105.220463][ T6082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.46'. [ 105.522753][ T6087] FAULT_INJECTION: forcing a failure. [ 105.522753][ T6087] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.565316][ T6087] CPU: 0 UID: 0 PID: 6087 Comm: syz.0.48 Not tainted syzkaller #0 PREEMPT(full) [ 105.565345][ T6087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.565366][ T6087] Call Trace: [ 105.565375][ T6087] [ 105.565385][ T6087] dump_stack_lvl+0x189/0x250 [ 105.565428][ T6087] ? irqentry_exit+0x74/0x90 [ 105.565460][ T6087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.565530][ T6087] should_fail_ex+0x414/0x560 [ 105.565569][ T6087] _copy_from_user+0x2d/0xb0 [ 105.565597][ T6087] ___sys_sendmsg+0x158/0x2a0 [ 105.565624][ T6087] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.565695][ T6087] ? __fget_files+0x2a/0x420 [ 105.565721][ T6087] ? __fget_files+0x3a0/0x420 [ 105.565755][ T6087] __x64_sys_sendmsg+0x19b/0x260 [ 105.565781][ T6087] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 105.565817][ T6087] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 105.565846][ T6087] ? do_syscall_64+0xbe/0xfa0 [ 105.565883][ T6087] do_syscall_64+0xfa/0xfa0 [ 105.565912][ T6087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.565932][ T6087] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 105.565952][ T6087] ? clear_bhb_loop+0x60/0xb0 [ 105.565978][ T6087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.565998][ T6087] RIP: 0033:0x7f086678f6c9 [ 105.566024][ T6087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.566040][ T6087] RSP: 002b:00007f08649f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.566062][ T6087] RAX: ffffffffffffffda RBX: 00007f08669e5fa0 RCX: 00007f086678f6c9 [ 105.566077][ T6087] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 105.566089][ T6087] RBP: 00007f08649f6090 R08: 0000000000000000 R09: 0000000000000000 [ 105.566101][ T6087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.566113][ T6087] R13: 00007f08669e6038 R14: 00007f08669e5fa0 R15: 00007ffd485dab68 [ 105.566152][ T6087] [ 106.411429][ T6114] netlink: 'syz.3.54': attribute type 21 has an invalid length. [ 106.431187][ T6114] netlink: 'syz.3.54': attribute type 11 has an invalid length. [ 106.463004][ T6115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.55'. [ 106.517162][ T6113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.55'. [ 106.707303][ T6117] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.869215][ T6119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.58'. [ 106.893722][ T6119] netlink: 16 bytes leftover after parsing attributes in process `syz.4.58'. [ 107.641004][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 108.200033][ T6162] netlink: 68 bytes leftover after parsing attributes in process `syz.2.70'. [ 108.337630][ T6164] netlink: 24 bytes leftover after parsing attributes in process `syz.4.71'. [ 108.358419][ T6168] netlink: 16 bytes leftover after parsing attributes in process `syz.4.71'. [ 108.805054][ T6187] netlink: 60 bytes leftover after parsing attributes in process `syz.2.78'. [ 108.822674][ T6187] netlink: 60 bytes leftover after parsing attributes in process `syz.2.78'. [ 108.856761][ T6187] netlink: 60 bytes leftover after parsing attributes in process `syz.2.78'. [ 110.132510][ T6228] lo: entered allmulticast mode [ 110.276923][ T6232] FAULT_INJECTION: forcing a failure. [ 110.276923][ T6232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.314586][ T6232] CPU: 0 UID: 0 PID: 6232 Comm: syz.1.92 Not tainted syzkaller #0 PREEMPT(full) [ 110.314613][ T6232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.314626][ T6232] Call Trace: [ 110.314639][ T6232] [ 110.314652][ T6232] dump_stack_lvl+0x189/0x250 [ 110.314695][ T6232] ? __pfx____ratelimit+0x10/0x10 [ 110.314732][ T6232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.314771][ T6232] ? __pfx__printk+0x10/0x10 [ 110.314834][ T6232] ? __might_fault+0xb0/0x130 [ 110.314904][ T6232] should_fail_ex+0x414/0x560 [ 110.314977][ T6232] _copy_from_user+0x2d/0xb0 [ 110.315017][ T6232] copy_from_sockptr+0x5e/0xa0 [ 110.315059][ T6232] packet_setsockopt+0xac1/0x12c0 [ 110.315118][ T6232] ? __pfx_packet_setsockopt+0x10/0x10 [ 110.315180][ T6232] ? perf_trace_lock+0xec/0x3b0 [ 110.315246][ T6232] ? __pfx_perf_trace_lock+0x10/0x10 [ 110.315302][ T6232] ? aa_sk_perm+0x81e/0x950 [ 110.315346][ T6232] ? __fget_files+0x2a/0x420 [ 110.315418][ T6232] ? aa_sock_opt_perm+0xff/0x1b0 [ 110.315480][ T6232] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 110.315501][ T6232] ? __pfx_packet_setsockopt+0x10/0x10 [ 110.315550][ T6232] do_sock_setsockopt+0x17c/0x1b0 [ 110.315608][ T6232] __x64_sys_setsockopt+0x13f/0x1b0 [ 110.315669][ T6232] do_syscall_64+0xfa/0xfa0 [ 110.315698][ T6232] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.315733][ T6232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.315758][ T6232] ? clear_bhb_loop+0x60/0xb0 [ 110.315798][ T6232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.315819][ T6232] RIP: 0033:0x7fd7fc78f6c9 [ 110.315841][ T6232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.315855][ T6232] RSP: 002b:00007fd7fd5f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 110.315872][ T6232] RAX: ffffffffffffffda RBX: 00007fd7fc9e5fa0 RCX: 00007fd7fc78f6c9 [ 110.315884][ T6232] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000006 [ 110.315893][ T6232] RBP: 00007fd7fd5f4090 R08: 0000000000000004 R09: 0000000000000000 [ 110.315903][ T6232] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 110.315912][ T6232] R13: 00007fd7fc9e6038 R14: 00007fd7fc9e5fa0 R15: 00007fff75bf4ca8 [ 110.316000][ T6232] [ 110.833309][ T6235] netlink: 'syz.3.94': attribute type 21 has an invalid length. [ 110.966955][ T6235] netlink: 'syz.3.94': attribute type 20 has an invalid length. [ 111.550531][ T6233] ======================================================= [ 111.550531][ T6233] WARNING: The mand mount option has been deprecated and [ 111.550531][ T6233] and is ignored by this kernel. Remove the mand [ 111.550531][ T6233] option from the mount to silence this warning. [ 111.550531][ T6233] ======================================================= [ 112.522543][ T6254] __nla_validate_parse: 2 callbacks suppressed [ 112.522565][ T6254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.98'. [ 112.731680][ T6257] netlink: 'syz.1.99': attribute type 1 has an invalid length. [ 112.767252][ T6259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.100'. [ 112.790339][ T6259] netlink: 16 bytes leftover after parsing attributes in process `syz.4.100'. [ 113.031643][ T6269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.105'. [ 113.064547][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 113.295462][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.108'. [ 113.630463][ T6282] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.839828][ T6284] netlink: 'syz.2.112': attribute type 21 has an invalid length. [ 113.874824][ T6284] netlink: 'syz.2.112': attribute type 20 has an invalid length. [ 114.707647][ T6297] netlink: 'syz.3.115': attribute type 1 has an invalid length. [ 114.803697][ T6303] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 115.335900][ T6312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.119'. [ 115.586079][ T6318] FAULT_INJECTION: forcing a failure. [ 115.586079][ T6318] name failslab, interval 1, probability 0, space 0, times 0 [ 115.619733][ T6318] CPU: 0 UID: 0 PID: 6318 Comm: syz.1.122 Not tainted syzkaller #0 PREEMPT(full) [ 115.619761][ T6318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.619773][ T6318] Call Trace: [ 115.619781][ T6318] [ 115.619790][ T6318] dump_stack_lvl+0x189/0x250 [ 115.619823][ T6318] ? __pfx____ratelimit+0x10/0x10 [ 115.619849][ T6318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.619877][ T6318] ? __pfx__printk+0x10/0x10 [ 115.619900][ T6318] ? __pfx___might_resched+0x10/0x10 [ 115.619922][ T6318] ? fs_reclaim_acquire+0x7d/0x100 [ 115.619968][ T6318] should_fail_ex+0x414/0x560 [ 115.620005][ T6318] should_failslab+0xa8/0x100 [ 115.620028][ T6318] __kvmalloc_node_noprof+0x158/0x910 [ 115.620057][ T6318] ? __nf_register_net_hook+0x232/0x930 [ 115.620078][ T6318] ? nf_hook_entries_grow+0x281/0x720 [ 115.620107][ T6318] nf_hook_entries_grow+0x281/0x720 [ 115.620145][ T6318] __nf_register_net_hook+0x2c9/0x930 [ 115.620179][ T6318] nf_register_net_hook+0xb2/0x190 [ 115.620203][ T6318] nf_register_net_hooks+0x44/0x1b0 [ 115.620229][ T6318] nf_ct_netns_do_get+0x3bf/0x5a0 [ 115.620256][ T6318] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 115.620275][ T6318] ? irqentry_exit+0x74/0x90 [ 115.620302][ T6318] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.620340][ T6318] nf_ct_netns_inet_get+0x1f/0x150 [ 115.620366][ T6318] conntrack_mt_check+0x53/0xf0 [ 115.620393][ T6318] xt_check_match+0x3d1/0xab0 [ 115.620417][ T6318] ? __pfx___flush_work+0x10/0x10 [ 115.620447][ T6318] ? __pfx_xt_check_match+0x10/0x10 [ 115.620489][ T6318] ? nft_pernet+0x23/0x240 [ 115.620522][ T6318] __nft_match_init+0x63a/0x840 [ 115.620547][ T6318] ? __pfx___nft_match_init+0x10/0x10 [ 115.620567][ T6318] ? perf_trace_preemptirq_template+0x280/0x340 [ 115.620593][ T6318] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 115.620639][ T6318] ? __pfx_nft_match_init+0x10/0x10 [ 115.620670][ T6318] ? nft_match_init+0x17/0x30 [ 115.620707][ T6318] nf_tables_newrule+0x1794/0x28a0 [ 115.620749][ T6318] ? __pfx_nf_tables_newrule+0x10/0x10 [ 115.620770][ T6318] ? irqentry_exit+0x74/0x90 [ 115.620796][ T6318] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.620833][ T6318] ? __pfx_nf_tables_newrule+0x10/0x10 [ 115.620867][ T6318] nfnetlink_rcv+0x11d9/0x2590 [ 115.620935][ T6318] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 115.621027][ T6318] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 115.621059][ T6318] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.621100][ T6318] netlink_unicast+0x82f/0x9e0 [ 115.621140][ T6318] ? __pfx_netlink_unicast+0x10/0x10 [ 115.621174][ T6318] ? netlink_sendmsg+0x642/0xb30 [ 115.621191][ T6318] ? skb_put+0x11b/0x210 [ 115.621216][ T6318] netlink_sendmsg+0x805/0xb30 [ 115.621248][ T6318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.621272][ T6318] ? irqentry_exit+0x74/0x90 [ 115.621297][ T6318] ? aa_sock_msg_perm+0xf1/0x1d0 [ 115.621330][ T6318] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 115.621350][ T6318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.621371][ T6318] __sock_sendmsg+0x21c/0x270 [ 115.621402][ T6318] ____sys_sendmsg+0x505/0x830 [ 115.621431][ T6318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.621464][ T6318] ? import_iovec+0x74/0xa0 [ 115.621496][ T6318] ___sys_sendmsg+0x21f/0x2a0 [ 115.621521][ T6318] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.621587][ T6318] ? __fget_files+0x2a/0x420 [ 115.621606][ T6318] ? __fget_files+0x3a0/0x420 [ 115.621638][ T6318] __x64_sys_sendmsg+0x19b/0x260 [ 115.621664][ T6318] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.621714][ T6318] do_syscall_64+0xfa/0xfa0 [ 115.621744][ T6318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.621763][ T6318] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 115.621784][ T6318] ? clear_bhb_loop+0x60/0xb0 [ 115.621809][ T6318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.621829][ T6318] RIP: 0033:0x7fd7fc78f6c9 [ 115.621848][ T6318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.621864][ T6318] RSP: 002b:00007fd7fd5f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.621886][ T6318] RAX: ffffffffffffffda RBX: 00007fd7fc9e5fa0 RCX: 00007fd7fc78f6c9 [ 115.621901][ T6318] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 115.621913][ T6318] RBP: 00007fd7fd5f4090 R08: 0000000000000000 R09: 0000000000000000 [ 115.621924][ T6318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 115.621936][ T6318] R13: 00007fd7fc9e6038 R14: 00007fd7fc9e5fa0 R15: 00007fff75bf4ca8 [ 115.621975][ T6318] [ 115.685248][ T6318] xt_conntrack: cannot load conntrack support for proto=1 [ 116.263325][ T6315] syz.3.121 (6315) used greatest stack depth: 18432 bytes left [ 116.813927][ T6331] openvswitch: netlink: ufid size 7776 bytes exceeds the range (1, 16) [ 117.744896][ T6343] netlink: 60 bytes leftover after parsing attributes in process `syz.1.129'. [ 118.149099][ T6348] netlink: 60 bytes leftover after parsing attributes in process `syz.1.129'. [ 118.404478][ T6343] netlink: 60 bytes leftover after parsing attributes in process `syz.1.129'. [ 118.619875][ T6357] netlink: 'syz.4.131': attribute type 21 has an invalid length. [ 118.661721][ T6357] netlink: 'syz.4.131': attribute type 20 has an invalid length. [ 118.903333][ T6364] netlink: 'syz.1.133': attribute type 10 has an invalid length. [ 118.912677][ T6364] netlink: 55 bytes leftover after parsing attributes in process `syz.1.133'. [ 118.965582][ T6361] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.132'. [ 119.044215][ T6366] syz.1.133 uses obsolete (PF_INET,SOCK_PACKET) [ 119.297890][ T6329] infiniband syz2: set down [ 119.326590][ T6329] infiniband syz2: added ipvlan0 [ 119.347191][ T6329] syz2: rxe_create_cq: returned err = -12 [ 119.353386][ T6329] infiniband syz2: Couldn't create ib_mad CQ [ 119.396469][ T6329] infiniband syz2: Couldn't open port 1 [ 119.559261][ T6329] RDS/IB: syz2: added [ 119.563882][ T6329] smc: adding ib device syz2 with port count 1 [ 119.580560][ T6379] netlink: 104 bytes leftover after parsing attributes in process `syz.3.136'. [ 119.619409][ T6329] smc: ib device syz2 port 1 has no pnetid [ 120.091783][ T6385] netlink: 'syz.4.138': attribute type 21 has an invalid length. [ 120.121851][ T6385] netlink: 'syz.4.138': attribute type 1 has an invalid length. [ 120.156617][ T6385] netlink: 144 bytes leftover after parsing attributes in process `syz.4.138'. [ 120.970419][ T6399] netlink: 60 bytes leftover after parsing attributes in process `syz.3.141'. [ 121.004458][ T6399] netlink: 60 bytes leftover after parsing attributes in process `syz.3.141'. [ 121.226281][ T6402] netlink: 182 bytes leftover after parsing attributes in process `syz.1.143'. [ 121.710909][ T6413] netlink: 'syz.3.146': attribute type 21 has an invalid length. [ 121.724300][ T6413] netlink: 'syz.3.146': attribute type 20 has an invalid length. [ 123.179828][ T6449] __nla_validate_parse: 2 callbacks suppressed [ 123.179849][ T6449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.154'. [ 124.167081][ T6459] netlink: 'syz.4.160': attribute type 1 has an invalid length. [ 124.249925][ T6464] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 124.527829][ T6466] netlink: 'syz.1.161': attribute type 21 has an invalid length. [ 124.604012][ T6475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.164'. [ 124.624694][ T6466] netlink: 'syz.1.161': attribute type 20 has an invalid length. [ 125.868802][ T6485] FAULT_INJECTION: forcing a failure. [ 125.868802][ T6485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.918092][ T6485] CPU: 1 UID: 0 PID: 6485 Comm: syz.4.167 Not tainted syzkaller #0 PREEMPT(full) [ 125.918119][ T6485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.918131][ T6485] Call Trace: [ 125.918139][ T6485] [ 125.918148][ T6485] dump_stack_lvl+0x189/0x250 [ 125.918181][ T6485] ? __pfx____ratelimit+0x10/0x10 [ 125.918207][ T6485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.918234][ T6485] ? __pfx__printk+0x10/0x10 [ 125.918267][ T6485] should_fail_ex+0x414/0x560 [ 125.918302][ T6485] _copy_to_user+0x31/0xb0 [ 125.918329][ T6485] simple_read_from_buffer+0xe1/0x170 [ 125.918362][ T6485] proc_fail_nth_read+0x1b3/0x220 [ 125.918390][ T6485] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.918416][ T6485] ? rw_verify_area+0x2a6/0x4d0 [ 125.918440][ T6485] ? __lock_acquire+0xab9/0xd20 [ 125.918456][ T6485] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.918480][ T6485] vfs_read+0x200/0xa30 [ 125.918504][ T6485] ? fdget_pos+0x247/0x320 [ 125.918526][ T6485] ? __pfx___mutex_lock+0x10/0x10 [ 125.918552][ T6485] ? __pfx_vfs_read+0x10/0x10 [ 125.918579][ T6485] ? __fget_files+0x2a/0x420 [ 125.918600][ T6485] ? __fget_files+0x3a0/0x420 [ 125.918615][ T6485] ? __fget_files+0x2a/0x420 [ 125.918641][ T6485] ksys_read+0x145/0x250 [ 125.918669][ T6485] ? __pfx_ksys_read+0x10/0x10 [ 125.918697][ T6485] ? do_syscall_64+0xbe/0xfa0 [ 125.918726][ T6485] do_syscall_64+0xfa/0xfa0 [ 125.918748][ T6485] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.918771][ T6485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.918789][ T6485] ? clear_bhb_loop+0x60/0xb0 [ 125.918811][ T6485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.918829][ T6485] RIP: 0033:0x7f5cdaf8e0dc [ 125.918845][ T6485] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 125.918867][ T6485] RSP: 002b:00007f5cdbeed030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 125.918888][ T6485] RAX: ffffffffffffffda RBX: 00007f5cdb1e5fa0 RCX: 00007f5cdaf8e0dc [ 125.918902][ T6485] RDX: 000000000000000f RSI: 00007f5cdbeed0a0 RDI: 0000000000000004 [ 125.918914][ T6485] RBP: 00007f5cdbeed090 R08: 0000000000000000 R09: 0000000000000000 [ 125.918925][ T6485] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 125.918936][ T6485] R13: 00007f5cdb1e6038 R14: 00007f5cdb1e5fa0 R15: 00007ffe023b93e8 [ 125.918970][ T6485] [ 126.287047][ T6493] netlink: 72 bytes leftover after parsing attributes in process `syz.3.170'. [ 126.346352][ T6493] netlink: 72 bytes leftover after parsing attributes in process `syz.3.170'. [ 126.657221][ T6493] netlink: 72 bytes leftover after parsing attributes in process `syz.3.170'. [ 126.732763][ T6504] netlink: 'syz.4.173': attribute type 1 has an invalid length. [ 127.227957][ T6512] netlink: 'syz.4.176': attribute type 2 has an invalid length. [ 127.557152][ T6522] netlink: 'syz.0.179': attribute type 21 has an invalid length. [ 127.565112][ T6522] netlink: 'syz.0.179': attribute type 20 has an invalid length. [ 128.647728][ T6541] netlink: 'syz.0.185': attribute type 1 has an invalid length. [ 131.639833][ T6582] netlink: 104 bytes leftover after parsing attributes in process `syz.3.199'. [ 132.564396][ T6582] netlink: 740 bytes leftover after parsing attributes in process `syz.3.199'. [ 132.919634][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.927014][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.279150][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'. [ 134.865308][ T6619] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 135.701039][ T6642] netlink: 'syz.4.214': attribute type 1 has an invalid length. [ 135.781082][ T6639] netlink: 'syz.2.216': attribute type 1 has an invalid length. [ 136.132568][ T6659] netlink: 40 bytes leftover after parsing attributes in process `syz.2.221'. [ 136.165586][ T6656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.221'. [ 136.179629][ T6656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.221'. [ 136.190933][ T6661] netlink: 60 bytes leftover after parsing attributes in process `syz.0.222'. [ 136.208097][ T6661] netlink: 60 bytes leftover after parsing attributes in process `syz.0.222'. [ 136.228603][ T6658] netlink: 60 bytes leftover after parsing attributes in process `syz.0.222'. [ 136.338816][ T6666] netlink: 28 bytes leftover after parsing attributes in process `syz.3.225'. [ 136.455188][ T6668] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 136.808988][ T6677] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 137.752920][ T6688] __nla_validate_parse: 4 callbacks suppressed [ 137.752970][ T6688] netlink: 1 bytes leftover after parsing attributes in process `syz.4.232'. [ 137.796273][ T6691] netlink: 'syz.3.233': attribute type 21 has an invalid length. [ 137.826847][ T6691] netlink: 'syz.3.233': attribute type 20 has an invalid length. [ 137.901563][ T6692] netlink: 'syz.2.234': attribute type 12 has an invalid length. [ 138.072942][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.237'. [ 138.541394][ T6711] netlink: 4244 bytes leftover after parsing attributes in process `syz.0.240'. [ 138.959517][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.242'. [ 138.991793][ T6731] netlink: 'syz.2.244': attribute type 2 has an invalid length. [ 139.658561][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 139.922246][ T6757] netlink: 3084 bytes leftover after parsing attributes in process `syz.4.252'. [ 139.931722][ T6757] netlink: 191644 bytes leftover after parsing attributes in process `syz.4.252'. [ 140.348081][ T6731] 9: entered promiscuous mode [ 140.367397][ T6748] veth1_macvtap: left promiscuous mode [ 140.373069][ T6748] macsec0: entered allmulticast mode [ 140.436703][ T6759] netlink: 'syz.2.253': attribute type 10 has an invalid length. [ 140.601915][ T6767] openvswitch: netlink: ufid size 7776 bytes exceeds the range (1, 16) [ 141.129493][ T6782] netlink: 24 bytes leftover after parsing attributes in process `syz.0.260'. [ 141.147023][ T6780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.261'. [ 141.165579][ T6782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.260'. [ 141.751210][ T6805] sch_tbf: peakrate 4 is lower than or equals to rate 5 ! [ 141.824587][ T6798] syz.3.266 (6798) used greatest stack depth: 17536 bytes left [ 142.611118][ T6826] FAULT_INJECTION: forcing a failure. [ 142.611118][ T6826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.650216][ T6826] CPU: 0 UID: 0 PID: 6826 Comm: syz.2.274 Not tainted syzkaller #0 PREEMPT(full) [ 142.650246][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.650259][ T6826] Call Trace: [ 142.650266][ T6826] [ 142.650275][ T6826] dump_stack_lvl+0x189/0x250 [ 142.650310][ T6826] ? __pfx____ratelimit+0x10/0x10 [ 142.650336][ T6826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.650370][ T6826] ? __pfx__printk+0x10/0x10 [ 142.650391][ T6826] ? __might_fault+0xb0/0x130 [ 142.650433][ T6826] should_fail_ex+0x414/0x560 [ 142.650474][ T6826] _copy_from_user+0x2d/0xb0 [ 142.650502][ T6826] generic_map_update_batch+0x57c/0x7f0 [ 142.650543][ T6826] ? __pfx_generic_map_update_batch+0x10/0x10 [ 142.650571][ T6826] ? __fget_files+0x2a/0x420 [ 142.650599][ T6826] ? __pfx_generic_map_update_batch+0x10/0x10 [ 142.650625][ T6826] bpf_map_do_batch+0x39b/0x630 [ 142.650654][ T6826] __sys_bpf+0x690/0x860 [ 142.650676][ T6826] ? __pfx___sys_bpf+0x10/0x10 [ 142.650712][ T6826] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 142.650735][ T6826] ? irqentry_exit_to_user_mode+0xce/0x110 [ 142.650765][ T6826] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 142.650795][ T6826] __x64_sys_bpf+0x7c/0x90 [ 142.650826][ T6826] do_syscall_64+0xfa/0xfa0 [ 142.650855][ T6826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.650875][ T6826] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 142.650895][ T6826] ? clear_bhb_loop+0x60/0xb0 [ 142.650920][ T6826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.650939][ T6826] RIP: 0033:0x7f941518f6c9 [ 142.650956][ T6826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.650973][ T6826] RSP: 002b:00007f9415fdb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.650994][ T6826] RAX: ffffffffffffffda RBX: 00007f94153e5fa0 RCX: 00007f941518f6c9 [ 142.651008][ T6826] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 142.651020][ T6826] RBP: 00007f9415fdb090 R08: 0000000000000000 R09: 0000000000000000 [ 142.651032][ T6826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.651043][ T6826] R13: 00007f94153e6038 R14: 00007f94153e5fa0 R15: 00007fff11959268 [ 142.651076][ T6826] [ 142.883107][ T6827] netlink: 'syz.1.273': attribute type 1 has an invalid length. [ 143.162437][ T6840] __nla_validate_parse: 5 callbacks suppressed [ 143.162457][ T6840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.278'. [ 143.268147][ T6829] netlink: 211780 bytes leftover after parsing attributes in process `syz.4.276'. [ 143.296422][ T6843] netlink: 'syz.3.280': attribute type 22 has an invalid length. [ 143.332926][ T6829] netlink: 312 bytes leftover after parsing attributes in process `syz.4.276'. [ 143.745432][ T6847] netlink: 211780 bytes leftover after parsing attributes in process `syz.2.282'. [ 143.773433][ T6847] netlink: 312 bytes leftover after parsing attributes in process `syz.2.282'. [ 143.797990][ T6857] Illegal XDP return value 1448925888 on prog (id 260) dev N/A, expect packet loss! [ 144.948557][ T6873] bridge_slave_1: left allmulticast mode [ 144.981224][ T6873] bridge_slave_1: left promiscuous mode [ 144.996799][ T6873] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.060611][ T6873] bridge_slave_0: left allmulticast mode [ 145.063367][ T6872] netlink: 'syz.2.289': attribute type 21 has an invalid length. [ 145.066810][ T6873] bridge_slave_0: left promiscuous mode [ 145.080878][ T6873] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.464016][ T6884] FAULT_INJECTION: forcing a failure. [ 145.464016][ T6884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.495676][ T6884] CPU: 1 UID: 0 PID: 6884 Comm: syz.3.293 Not tainted syzkaller #0 PREEMPT(full) [ 145.495704][ T6884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.495717][ T6884] Call Trace: [ 145.495725][ T6884] [ 145.495734][ T6884] dump_stack_lvl+0x189/0x250 [ 145.495768][ T6884] ? __pfx____ratelimit+0x10/0x10 [ 145.495796][ T6884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.495825][ T6884] ? __pfx__printk+0x10/0x10 [ 145.495846][ T6884] ? __might_fault+0xb0/0x130 [ 145.495889][ T6884] ? __might_fault+0xb0/0x130 [ 145.495926][ T6884] should_fail_ex+0x414/0x560 [ 145.495964][ T6884] _copy_from_iter+0x1de/0x1790 [ 145.495997][ T6884] ? rcu_is_watching+0x15/0xb0 [ 145.496026][ T6884] ? kmalloc_reserve+0xbd/0x290 [ 145.496046][ T6884] ? __pfx__copy_from_iter+0x10/0x10 [ 145.496073][ T6884] ? __build_skb_around+0x262/0x3f0 [ 145.496109][ T6884] ? netlink_sendmsg+0x642/0xb30 [ 145.496128][ T6884] ? skb_put+0x11b/0x210 [ 145.496153][ T6884] netlink_sendmsg+0x6b2/0xb30 [ 145.496186][ T6884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.496211][ T6884] ? aa_sock_msg_perm+0xf1/0x1d0 [ 145.496245][ T6884] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 145.496265][ T6884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.496287][ T6884] __sock_sendmsg+0x21c/0x270 [ 145.496320][ T6884] ____sys_sendmsg+0x505/0x830 [ 145.496350][ T6884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.496385][ T6884] ? import_iovec+0x74/0xa0 [ 145.496416][ T6884] ___sys_sendmsg+0x21f/0x2a0 [ 145.496443][ T6884] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.496493][ T6884] ? __fget_files+0x2a/0x420 [ 145.496531][ T6884] ? __fget_files+0x2a/0x420 [ 145.496549][ T6884] ? __fget_files+0x3a0/0x420 [ 145.496586][ T6884] __x64_sys_sendmsg+0x19b/0x260 [ 145.496612][ T6884] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 145.496648][ T6884] ? __pfx_ksys_write+0x10/0x10 [ 145.496681][ T6884] ? do_syscall_64+0xbe/0xfa0 [ 145.496715][ T6884] do_syscall_64+0xfa/0xfa0 [ 145.496741][ T6884] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.496767][ T6884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.496792][ T6884] ? clear_bhb_loop+0x60/0xb0 [ 145.496819][ T6884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.496838][ T6884] RIP: 0033:0x7fdbd578f6c9 [ 145.496857][ T6884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.496880][ T6884] RSP: 002b:00007fdbd65e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.496902][ T6884] RAX: ffffffffffffffda RBX: 00007fdbd59e5fa0 RCX: 00007fdbd578f6c9 [ 145.496915][ T6884] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000006 [ 145.496928][ T6884] RBP: 00007fdbd65e7090 R08: 0000000000000000 R09: 0000000000000000 [ 145.496939][ T6884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.496958][ T6884] R13: 00007fdbd59e6038 R14: 00007fdbd59e5fa0 R15: 00007ffd41946188 [ 145.496993][ T6884] [ 146.022118][ T6888] netlink: 'syz.2.294': attribute type 1 has an invalid length. [ 146.986717][ T6907] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 147.181929][ T6916] netlink: 'syz.2.305': attribute type 11 has an invalid length. [ 147.337405][ T6920] openvswitch: netlink: ufid size 7776 bytes exceeds the range (1, 16) [ 147.522551][ T6926] netlink: 'syz.3.309': attribute type 1 has an invalid length. [ 147.708747][ T6930] netlink: 132 bytes leftover after parsing attributes in process `syz.1.312'. [ 147.777855][ T6936] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.313'. [ 147.892223][ T6932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.311'. [ 147.989483][ T6943] bridge_slave_1: left allmulticast mode [ 147.995279][ T6943] bridge_slave_1: left promiscuous mode [ 148.034944][ T6943] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.112298][ T6947] netlink: 40 bytes leftover after parsing attributes in process `syz.1.317'. [ 148.125669][ T6943] bridge_slave_0: left allmulticast mode [ 148.131381][ T6943] bridge_slave_0: left promiscuous mode [ 148.151800][ T6947] netlink: 32 bytes leftover after parsing attributes in process `syz.1.317'. [ 148.181522][ T6943] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.423710][ T6952] openvswitch: netlink: ufid size 7776 bytes exceeds the range (1, 16) [ 148.549959][ T6957] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 148.785523][ T6964] netlink: 24 bytes leftover after parsing attributes in process `syz.0.324'. [ 148.825905][ T6967] netlink: 352 bytes leftover after parsing attributes in process `syz.1.325'. [ 149.300942][ T6986] openvswitch: netlink: ufid size 7776 bytes exceeds the range (1, 16) [ 149.451449][ T6985] netlink: 60 bytes leftover after parsing attributes in process `syz.1.332'. [ 149.654559][ T6987] netlink: 60 bytes leftover after parsing attributes in process `syz.1.332'. [ 150.166587][ T7010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.339'. [ 150.461812][ T7023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.343'. [ 150.578949][ T7026] netlink: 596 bytes leftover after parsing attributes in process `syz.4.343'. [ 151.684918][ T7019] netlink: 9444 bytes leftover after parsing attributes in process `syz.2.341'. [ 151.705873][ T7023] netlink: 'syz.4.343': attribute type 29 has an invalid length. [ 152.294573][ T7032] netlink: 211780 bytes leftover after parsing attributes in process `syz.1.344'. [ 152.340060][ T7047] netlink: 312 bytes leftover after parsing attributes in process `syz.1.344'. [ 153.725572][ T5834] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 154.296717][ T7103] FAULT_INJECTION: forcing a failure. [ 154.296717][ T7103] name failslab, interval 1, probability 0, space 0, times 0 [ 154.415875][ T7103] CPU: 1 UID: 0 PID: 7103 Comm: syz.1.369 Not tainted syzkaller #0 PREEMPT(full) [ 154.415904][ T7103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 154.415916][ T7103] Call Trace: [ 154.415927][ T7103] [ 154.415939][ T7103] dump_stack_lvl+0x189/0x250 [ 154.415981][ T7103] ? __pfx____ratelimit+0x10/0x10 [ 154.416024][ T7103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.416062][ T7103] ? __pfx__printk+0x10/0x10 [ 154.416124][ T7103] ? __pfx___might_resched+0x10/0x10 [ 154.416186][ T7103] should_fail_ex+0x414/0x560 [ 154.416262][ T7103] should_failslab+0xa8/0x100 [ 154.416297][ T7103] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 154.416331][ T7103] ? __request_module+0x2d1/0x5e0 [ 154.416356][ T7103] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 154.416408][ T7103] kstrdup+0x42/0x100 [ 154.416448][ T7103] __request_module+0x2d1/0x5e0 [ 154.416504][ T7103] ? __pfx___request_module+0x10/0x10 [ 154.416548][ T7103] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 154.416655][ T7103] ? xfrm_set_type_offload+0x181/0x430 [ 154.416695][ T7103] ? xfrm_set_type_offload+0x181/0x430 [ 154.416739][ T7103] xfrm_set_type_offload+0x1e5/0x430 [ 154.416802][ T7103] xfrm_add_sa+0x3451/0x41d0 [ 154.416883][ T7103] ? __pfx_xfrm_add_sa+0x10/0x10 [ 154.416903][ T7103] ? apparmor_capable+0x137/0x1b0 [ 154.416965][ T7103] ? __nla_parse+0x40/0x60 [ 154.417027][ T7103] xfrm_user_rcv_msg+0x7a3/0xab0 [ 154.417091][ T7103] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 154.417303][ T7103] ? __pfx___mutex_trylock_common+0x10/0x10 [ 154.417361][ T7103] ? rcu_is_watching+0x15/0xb0 [ 154.417395][ T7103] ? trace_contention_end+0x39/0x120 [ 154.417430][ T7103] ? __mutex_lock+0x335/0x1350 [ 154.417502][ T7103] netlink_rcv_skb+0x208/0x470 [ 154.417551][ T7103] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 154.417593][ T7103] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 154.417712][ T7103] ? netlink_deliver_tap+0x2e/0x1b0 [ 154.417737][ T7103] ? netlink_deliver_tap+0x2e/0x1b0 [ 154.417779][ T7103] xfrm_netlink_rcv+0x79/0x90 [ 154.417814][ T7103] netlink_unicast+0x82f/0x9e0 [ 154.417909][ T7103] ? __pfx_netlink_unicast+0x10/0x10 [ 154.417956][ T7103] ? netlink_sendmsg+0x642/0xb30 [ 154.417972][ T7103] ? skb_put+0x11b/0x210 [ 154.418046][ T7103] netlink_sendmsg+0x805/0xb30 [ 154.418124][ T7103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.418162][ T7103] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 154.418197][ T7103] ? aa_sock_msg_perm+0xf1/0x1d0 [ 154.418244][ T7103] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 154.418267][ T7103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.418302][ T7103] __sock_sendmsg+0x21c/0x270 [ 154.418357][ T7103] ____sys_sendmsg+0x505/0x830 [ 154.418419][ T7103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.418500][ T7103] ? import_iovec+0x74/0xa0 [ 154.418556][ T7103] ___sys_sendmsg+0x21f/0x2a0 [ 154.418602][ T7103] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.418744][ T7103] ? __fget_files+0x2a/0x420 [ 154.418836][ T7103] ? __fget_files+0x2a/0x420 [ 154.418856][ T7103] ? __fget_files+0x3a0/0x420 [ 154.418938][ T7103] __x64_sys_sendmsg+0x19b/0x260 [ 154.418984][ T7103] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.419043][ T7103] ? perf_trace_preemptirq_template+0xa3/0x340 [ 154.419118][ T7103] ? __pfx_ksys_write+0x10/0x10 [ 154.419178][ T7103] ? do_syscall_64+0xbe/0xfa0 [ 154.419231][ T7103] do_syscall_64+0xfa/0xfa0 [ 154.419258][ T7103] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.419292][ T7103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.419325][ T7103] ? clear_bhb_loop+0x60/0xb0 [ 154.419366][ T7103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.419386][ T7103] RIP: 0033:0x7fd7fc78f6c9 [ 154.419409][ T7103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.419424][ T7103] RSP: 002b:00007fd7fd5f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.419444][ T7103] RAX: ffffffffffffffda RBX: 00007fd7fc9e5fa0 RCX: 00007fd7fc78f6c9 [ 154.419457][ T7103] RDX: 0000000000004810 RSI: 00002000000035c0 RDI: 0000000000000003 [ 154.419468][ T7103] RBP: 00007fd7fd5f4090 R08: 0000000000000000 R09: 0000000000000000 [ 154.419479][ T7103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.419488][ T7103] R13: 00007fd7fc9e6038 R14: 00007fd7fc9e5fa0 R15: 00007fff75bf4ca8 [ 154.419585][ T7103] [ 155.578437][ T7127] netlink: 'syz.1.375': attribute type 64 has an invalid length. [ 155.695219][ T7133] __nla_validate_parse: 4 callbacks suppressed [ 155.695239][ T7133] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.378'. [ 156.118886][ T7143] netlink: 16 bytes leftover after parsing attributes in process `syz.4.382'. [ 156.147093][ T7141] netlink: 'syz.0.381': attribute type 3 has an invalid length. [ 156.166385][ T7141] netlink: 'syz.0.381': attribute type 1 has an invalid length. [ 156.195284][ T7141] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.381'. [ 156.219540][ T7144] netlink: 'syz.0.381': attribute type 22 has an invalid length. [ 156.316893][ T7149] netlink: 24 bytes leftover after parsing attributes in process `syz.2.384'. [ 156.342161][ T7149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.384'. [ 156.925913][ T7165] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.390'. [ 157.551695][ T7190] netlink: 60 bytes leftover after parsing attributes in process `syz.0.398'. [ 157.563228][ T7190] netlink: 60 bytes leftover after parsing attributes in process `syz.0.398'. [ 157.594039][ T7190] netlink: 60 bytes leftover after parsing attributes in process `syz.0.398'. [ 157.724055][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 157.894987][ T7201] netlink: 'syz.1.403': attribute type 10 has an invalid length. [ 157.949932][ T7203] macvlan1: entered promiscuous mode [ 157.962475][ T7203] macvlan1: entered allmulticast mode [ 158.012571][ T7207] veth1_vlan: entered allmulticast mode [ 158.047894][ T7205] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 158.431246][ T7214] netlink: 'syz.0.409': attribute type 1 has an invalid length. [ 158.925635][ T7225] lo: entered allmulticast mode [ 162.772921][ T7255] netlink: 'syz.0.422': attribute type 13 has an invalid length. [ 162.781254][ T7255] __nla_validate_parse: 3 callbacks suppressed [ 162.781284][ T7255] netlink: 152 bytes leftover after parsing attributes in process `syz.0.422'. [ 163.582857][ T7249] netlink: 132 bytes leftover after parsing attributes in process `syz.4.420'. [ 163.594471][ T7252] bridge_slave_1: left allmulticast mode [ 163.600169][ T7252] bridge_slave_1: left promiscuous mode [ 163.624807][ T7252] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.707583][ T7252] bridge_slave_0: left allmulticast mode [ 163.729090][ T7252] bridge_slave_0: left promiscuous mode [ 163.745811][ T7252] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.883347][ T7255] : renamed from syz_tun (while UP) [ 163.893481][ T7255] : refused to change device tx_queue_len [ 163.900554][ T7255] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 164.064706][ T7274] netlink: 18187 bytes leftover after parsing attributes in process `syz.2.431'. [ 164.147967][ T7280] netlink: 'syz.4.432': attribute type 1 has an invalid length. [ 164.674499][ T5834] Bluetooth: hci2: ISO packet for unknown connection handle 3870 [ 164.966382][ T7305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.443'. [ 164.992473][ T7305] netlink: 16 bytes leftover after parsing attributes in process `syz.4.443'. [ 165.087308][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.444'. [ 165.645168][ T7324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.446'. [ 165.900809][ T7329] netlink: 'syz.0.448': attribute type 10 has an invalid length. [ 165.933662][ T7329] netlink: 40 bytes leftover after parsing attributes in process `syz.0.448'. [ 165.981757][ T7329] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 166.074962][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.449'. [ 166.259953][ T7334] netlink: 24 bytes leftover after parsing attributes in process `syz.3.450'. [ 167.904859][ T7364] netlink: 'syz.0.459': attribute type 10 has an invalid length. [ 167.928120][ T7364] __nla_validate_parse: 3 callbacks suppressed [ 167.928139][ T7364] netlink: 55 bytes leftover after parsing attributes in process `syz.0.459'. [ 167.975683][ T7366] FAULT_INJECTION: forcing a failure. [ 167.975683][ T7366] name failslab, interval 1, probability 0, space 0, times 0 [ 168.034484][ T7366] CPU: 1 UID: 0 PID: 7366 Comm: syz.1.458 Not tainted syzkaller #0 PREEMPT(full) [ 168.034513][ T7366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.034526][ T7366] Call Trace: [ 168.034535][ T7366] [ 168.034544][ T7366] dump_stack_lvl+0x189/0x250 [ 168.034580][ T7366] ? __pfx____ratelimit+0x10/0x10 [ 168.034609][ T7366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.034638][ T7366] ? __pfx__printk+0x10/0x10 [ 168.034664][ T7366] ? __pfx_perf_trace_lock+0x10/0x10 [ 168.034699][ T7366] should_fail_ex+0x414/0x560 [ 168.034739][ T7366] should_failslab+0xa8/0x100 [ 168.034764][ T7366] __kmalloc_cache_noprof+0x6f/0x6f0 [ 168.034796][ T7366] ? proc_self_get_link+0xe6/0x180 [ 168.034824][ T7366] ? __task_pid_nr_ns+0x3ac/0x490 [ 168.034859][ T7366] proc_self_get_link+0xe6/0x180 [ 168.034887][ T7366] ? __pfx_proc_self_get_link+0x10/0x10 [ 168.034915][ T7366] pick_link+0x67c/0xe80 [ 168.034950][ T7366] step_into+0xbc9/0xe80 [ 168.034975][ T7366] ? read_word_at_a_time+0x16/0x20 [ 168.035014][ T7366] ? __pfx_step_into+0x10/0x10 [ 168.035036][ T7366] ? lookup_fast+0x168/0x5b0 [ 168.035069][ T7366] ? inode_permission+0x149/0x470 [ 168.035089][ T7366] ? __asan_memcpy+0x40/0x70 [ 168.035122][ T7366] link_path_walk+0x77b/0xea0 [ 168.035168][ T7366] path_openat+0x28c/0x3830 [ 168.035243][ T7366] ? __pfx_path_openat+0x10/0x10 [ 168.035297][ T7366] do_filp_open+0x1fa/0x410 [ 168.035329][ T7366] ? __pfx_do_filp_open+0x10/0x10 [ 168.035387][ T7366] ? _raw_spin_unlock+0x28/0x50 [ 168.035411][ T7366] ? alloc_fd+0x64c/0x6c0 [ 168.035459][ T7366] do_sys_openat2+0x121/0x1c0 [ 168.035486][ T7366] ? atomic_notifier_call_chain+0x26/0x180 [ 168.035516][ T7366] ? __pfx_do_sys_openat2+0x10/0x10 [ 168.035546][ T7366] ? notify_die+0x130/0x180 [ 168.035576][ T7366] ? __pfx_notify_die+0x10/0x10 [ 168.035618][ T7366] __x64_sys_openat+0x138/0x170 [ 168.035649][ T7366] do_syscall_64+0xfa/0xfa0 [ 168.035676][ T7366] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.035703][ T7366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.035724][ T7366] ? clear_bhb_loop+0x60/0xb0 [ 168.035750][ T7366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.035769][ T7366] RIP: 0033:0x7fd7fc78df10 [ 168.035787][ T7366] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 168.035803][ T7366] RSP: 002b:00007fd7fd5f3f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 168.035823][ T7366] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd7fc78df10 [ 168.035838][ T7366] RDX: 0000000000000000 RSI: 00007fd7fd5f3fa0 RDI: 00000000ffffff9c [ 168.035850][ T7366] RBP: 00007fd7fd5f3fa0 R08: 0000000000000000 R09: 0000000000000000 [ 168.035862][ T7366] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 168.035873][ T7366] R13: 00007fd7fc9e6038 R14: 00007fd7fc9e5fa0 R15: 00007fff75bf4ca8 [ 168.035912][ T7366] [ 168.833718][ T7378] netlink: 'syz.1.462': attribute type 21 has an invalid length. [ 168.882370][ T7378] netlink: 'syz.1.462': attribute type 20 has an invalid length. [ 169.611055][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 170.228126][ T7406] netlink: 'syz.0.468': attribute type 1 has an invalid length. [ 170.438633][ T7415] bridge_slave_1: left allmulticast mode [ 170.444770][ T7415] bridge_slave_1: left promiscuous mode [ 170.464533][ T7415] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.497623][ T7415] bridge_slave_0: left allmulticast mode [ 170.511738][ T7415] bridge_slave_0: left promiscuous mode [ 170.519043][ T7415] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.539592][ T7417] netlink: 211780 bytes leftover after parsing attributes in process `syz.2.471'. [ 171.358156][ T7440] netlink: 'syz.3.479': attribute type 7 has an invalid length. [ 171.428947][ T7442] netlink: 48 bytes leftover after parsing attributes in process `syz.0.481'. [ 171.431281][ T7443] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.479'. [ 172.039994][ T7450] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 172.417947][ T7466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.488'. [ 173.276760][ T7485] FAULT_INJECTION: forcing a failure. [ 173.276760][ T7485] name failslab, interval 1, probability 0, space 0, times 0 [ 173.357502][ T7485] CPU: 1 UID: 0 PID: 7485 Comm: syz.3.494 Not tainted syzkaller #0 PREEMPT(full) [ 173.357530][ T7485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.357542][ T7485] Call Trace: [ 173.357549][ T7485] [ 173.357558][ T7485] dump_stack_lvl+0x189/0x250 [ 173.357590][ T7485] ? __pfx____ratelimit+0x10/0x10 [ 173.357616][ T7485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.357643][ T7485] ? __pfx__printk+0x10/0x10 [ 173.357669][ T7485] ? __pfx___might_resched+0x10/0x10 [ 173.357690][ T7485] ? fs_reclaim_acquire+0x7d/0x100 [ 173.357727][ T7485] should_fail_ex+0x414/0x560 [ 173.357764][ T7485] should_failslab+0xa8/0x100 [ 173.357786][ T7485] __kmalloc_noprof+0xcb/0x7f0 [ 173.357813][ T7485] ? tcf_idr_create+0x5d/0x6b0 [ 173.357834][ T7485] ? tcf_idr_check_alloc+0x637/0x7b0 [ 173.357863][ T7485] tcf_idr_create+0x5d/0x6b0 [ 173.357888][ T7485] ? __nla_parse+0x40/0x60 [ 173.357914][ T7485] tcf_ife_init+0x535/0xd60 [ 173.357947][ T7485] ? __pfx_tcf_ife_init+0x10/0x10 [ 173.357991][ T7485] ? __kasan_kmalloc+0x93/0xb0 [ 173.358021][ T7485] ? nla_memcpy+0x5b/0xc0 [ 173.358052][ T7485] tcf_action_init_1+0x463/0x6d0 [ 173.358087][ T7485] ? __pfx_tcf_action_init_1+0x10/0x10 [ 173.358113][ T7485] ? _raw_read_unlock+0x28/0x50 [ 173.358137][ T7485] ? tc_action_load_ops+0x214/0x4e0 [ 173.358180][ T7485] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 173.358210][ T7485] ? __nla_parse+0x40/0x60 [ 173.358234][ T7485] tcf_action_init+0x2cf/0xab0 [ 173.358272][ T7485] ? __pfx_tcf_action_init+0x10/0x10 [ 173.358331][ T7485] ? __pfx___nla_validate_parse+0x10/0x10 [ 173.358393][ T7485] tc_ctl_action+0x430/0xbd0 [ 173.358430][ T7485] ? __pfx_tc_ctl_action+0x10/0x10 [ 173.358462][ T7485] ? rcu_is_watching+0x15/0xb0 [ 173.358490][ T7485] ? trace_contention_end+0x39/0x120 [ 173.358561][ T7485] ? __pfx_tc_ctl_action+0x10/0x10 [ 173.358588][ T7485] rtnetlink_rcv_msg+0x77c/0xb70 [ 173.358624][ T7485] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 173.358653][ T7485] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 173.358680][ T7485] ? ref_tracker_free+0x63a/0x7d0 [ 173.358699][ T7485] ? __asan_memcpy+0x40/0x70 [ 173.358723][ T7485] ? __pfx_ref_tracker_free+0x10/0x10 [ 173.358739][ T7485] ? __skb_clone+0x63/0x7a0 [ 173.358770][ T7485] netlink_rcv_skb+0x208/0x470 [ 173.358804][ T7485] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 173.358835][ T7485] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 173.358879][ T7485] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.358906][ T7485] netlink_unicast+0x82f/0x9e0 [ 173.358944][ T7485] ? __pfx_netlink_unicast+0x10/0x10 [ 173.358980][ T7485] ? netlink_sendmsg+0x642/0xb30 [ 173.358998][ T7485] ? skb_put+0x11b/0x210 [ 173.359020][ T7485] netlink_sendmsg+0x805/0xb30 [ 173.359050][ T7485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.359073][ T7485] ? aa_sock_msg_perm+0xf1/0x1d0 [ 173.359104][ T7485] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 173.359123][ T7485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.359144][ T7485] __sock_sendmsg+0x21c/0x270 [ 173.359174][ T7485] ____sys_sendmsg+0x505/0x830 [ 173.359202][ T7485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.359233][ T7485] ? import_iovec+0x74/0xa0 [ 173.359263][ T7485] ___sys_sendmsg+0x21f/0x2a0 [ 173.359286][ T7485] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.359346][ T7485] ? __fget_files+0x2a/0x420 [ 173.359365][ T7485] ? __fget_files+0x3a0/0x420 [ 173.359395][ T7485] __x64_sys_sendmsg+0x19b/0x260 [ 173.359419][ T7485] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.359437][ T7485] ? perf_trace_preemptirq_template+0xa3/0x340 [ 173.359469][ T7485] ? __pfx_ksys_write+0x10/0x10 [ 173.359501][ T7485] ? do_syscall_64+0xbe/0xfa0 [ 173.359532][ T7485] do_syscall_64+0xfa/0xfa0 [ 173.359556][ T7485] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.359582][ T7485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.359603][ T7485] ? clear_bhb_loop+0x60/0xb0 [ 173.359627][ T7485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.359647][ T7485] RIP: 0033:0x7fdbd578f6c9 [ 173.359665][ T7485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.359681][ T7485] RSP: 002b:00007fdbd65e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.359702][ T7485] RAX: ffffffffffffffda RBX: 00007fdbd59e5fa0 RCX: 00007fdbd578f6c9 [ 173.359716][ T7485] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 173.359727][ T7485] RBP: 00007fdbd65e7090 R08: 0000000000000000 R09: 0000000000000000 [ 173.359738][ T7485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.359749][ T7485] R13: 00007fdbd59e6038 R14: 00007fdbd59e5fa0 R15: 00007ffd41946188 [ 173.359783][ T7485] [ 173.929210][ T7491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.497'. [ 173.942475][ T7491] netlink: 16 bytes leftover after parsing attributes in process `syz.3.497'. [ 174.742043][ T7509] netlink: 112 bytes leftover after parsing attributes in process `syz.4.504'. [ 174.815974][ T7521] netlink: 76 bytes leftover after parsing attributes in process `syz.3.506'. [ 175.048712][ T7534] netlink: 'syz.4.511': attribute type 21 has an invalid length. [ 175.571519][ T7555] netlink: 'syz.1.521': attribute type 10 has an invalid length. [ 175.592542][ T7555] netlink: 55 bytes leftover after parsing attributes in process `syz.1.521'. [ 175.610111][ T7556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.638697][ T7556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.677414][ T7556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.687758][ T7556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.768386][ T7563] netlink: 'syz.0.523': attribute type 1 has an invalid length. [ 175.777259][ T7563] netlink: 'syz.0.523': attribute type 2 has an invalid length. [ 176.071698][ T7569] netlink: 'syz.1.526': attribute type 21 has an invalid length. [ 176.090785][ T7569] netlink: 'syz.1.526': attribute type 20 has an invalid length. [ 177.143642][ T7597] FAULT_INJECTION: forcing a failure. [ 177.143642][ T7597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.190118][ T7597] CPU: 1 UID: 0 PID: 7597 Comm: syz.0.535 Not tainted syzkaller #0 PREEMPT(full) [ 177.190145][ T7597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.190157][ T7597] Call Trace: [ 177.190165][ T7597] [ 177.190174][ T7597] dump_stack_lvl+0x189/0x250 [ 177.190207][ T7597] ? __pfx____ratelimit+0x10/0x10 [ 177.190234][ T7597] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.190262][ T7597] ? __pfx__printk+0x10/0x10 [ 177.190283][ T7597] ? __might_fault+0xb0/0x130 [ 177.190322][ T7597] should_fail_ex+0x414/0x560 [ 177.190358][ T7597] _copy_from_user+0x2d/0xb0 [ 177.190395][ T7597] do_tcp_setsockopt+0x47d/0x1f20 [ 177.190426][ T7597] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 177.190446][ T7597] ? aa_sk_perm+0x81e/0x950 [ 177.190481][ T7597] ? __pfx_aa_sk_perm+0x10/0x10 [ 177.190511][ T7597] ? aa_sock_opt_perm+0xff/0x1b0 [ 177.190544][ T7597] ? sock_common_setsockopt+0x36/0xc0 [ 177.190571][ T7597] ? tcp_setsockopt+0x3d/0xe0 [ 177.190591][ T7597] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 177.190622][ T7597] do_sock_setsockopt+0x17c/0x1b0 [ 177.190649][ T7597] __x64_sys_setsockopt+0x13f/0x1b0 [ 177.190676][ T7597] do_syscall_64+0xfa/0xfa0 [ 177.190703][ T7597] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.190731][ T7597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.190752][ T7597] ? clear_bhb_loop+0x60/0xb0 [ 177.190776][ T7597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.190796][ T7597] RIP: 0033:0x7f086678f6c9 [ 177.190814][ T7597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.190830][ T7597] RSP: 002b:00007f08649f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 177.190852][ T7597] RAX: ffffffffffffffda RBX: 00007f08669e5fa0 RCX: 00007f086678f6c9 [ 177.190866][ T7597] RDX: 0000000000000011 RSI: 0000000000000006 RDI: 0000000000000003 [ 177.190877][ T7597] RBP: 00007f08649f6090 R08: 0000000000000004 R09: 0000000000000000 [ 177.190889][ T7597] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 177.190901][ T7597] R13: 00007f08669e6038 R14: 00007f08669e5fa0 R15: 00007ffd485dab68 [ 177.190934][ T7597] [ 177.601627][ T7608] netlink: 'syz.4.536': attribute type 10 has an invalid length. [ 177.680530][ T7608] netlink: 40 bytes leftover after parsing attributes in process `syz.4.536'. [ 177.697143][ T7608] batman_adv: batadv0: Adding interface: virt_wifi0 [ 177.723850][ T7608] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.749950][ T7608] batman_adv: batadv0: Interface activated: virt_wifi0 [ 178.113398][ T7618] netlink: 44 bytes leftover after parsing attributes in process `syz.3.540'. [ 178.139117][ T7618] tc_dump_action: action bad kind [ 179.425179][ T7649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.551'. [ 179.458129][ T7649] netlink: 'syz.1.551': attribute type 39 has an invalid length. [ 179.780601][ T7658] sit0: entered allmulticast mode [ 179.803545][ T7661] netlink: 'syz.3.552': attribute type 21 has an invalid length. [ 180.603799][ T7673] netlink: 'syz.1.558': attribute type 3 has an invalid length. [ 180.632612][ T7673] netlink: 132 bytes leftover after parsing attributes in process `syz.1.558'. [ 180.683042][ T7675] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.557'. [ 182.354008][ T7704] netlink: 'syz.4.564': attribute type 1 has an invalid length. [ 182.375170][ T7704] netlink: 'syz.4.564': attribute type 2 has an invalid length. [ 182.771573][ T7722] netlink: 'syz.0.570': attribute type 1 has an invalid length. [ 182.826696][ T7722] netlink: 'syz.0.570': attribute type 4 has an invalid length. [ 182.873746][ T7726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.571'. [ 182.876806][ T7722] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.570'. [ 182.893126][ T7726] netlink: 16 bytes leftover after parsing attributes in process `syz.3.571'. [ 183.149589][ T7728] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.572'. [ 183.180000][ T7732] pimreg1: tun_chr_ioctl cmd 21731 [ 183.724688][ T7751] netlink: 'syz.0.578': attribute type 2 has an invalid length. [ 184.121412][ T7773] FAULT_INJECTION: forcing a failure. [ 184.121412][ T7773] name failslab, interval 1, probability 0, space 0, times 0 [ 184.177359][ T7773] CPU: 1 UID: 0 PID: 7773 Comm: syz.2.585 Not tainted syzkaller #0 PREEMPT(full) [ 184.177386][ T7773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.177398][ T7773] Call Trace: [ 184.177406][ T7773] [ 184.177414][ T7773] dump_stack_lvl+0x189/0x250 [ 184.177459][ T7773] ? __pfx____ratelimit+0x10/0x10 [ 184.177485][ T7773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.177511][ T7773] ? __pfx__printk+0x10/0x10 [ 184.177537][ T7773] ? __lock_acquire+0xab9/0xd20 [ 184.177564][ T7773] should_fail_ex+0x414/0x560 [ 184.177600][ T7773] should_failslab+0xa8/0x100 [ 184.177623][ T7773] kmem_cache_alloc_noprof+0x74/0x6e0 [ 184.177652][ T7773] ? skb_clone+0x212/0x3a0 [ 184.177679][ T7773] skb_clone+0x212/0x3a0 [ 184.177705][ T7773] __netlink_deliver_tap+0x404/0x850 [ 184.177737][ T7773] ? netlink_deliver_tap+0x2e/0x1b0 [ 184.177758][ T7773] netlink_deliver_tap+0x19c/0x1b0 [ 184.177777][ T7773] netlink_unicast+0x7fa/0x9e0 [ 184.177814][ T7773] ? __pfx_netlink_unicast+0x10/0x10 [ 184.177844][ T7773] ? netlink_sendmsg+0x642/0xb30 [ 184.177860][ T7773] ? skb_put+0x11b/0x210 [ 184.177882][ T7773] netlink_sendmsg+0x805/0xb30 [ 184.177912][ T7773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.177935][ T7773] ? aa_sock_msg_perm+0xf1/0x1d0 [ 184.177967][ T7773] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 184.177986][ T7773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.178006][ T7773] __sock_sendmsg+0x21c/0x270 [ 184.178036][ T7773] ____sys_sendmsg+0x505/0x830 [ 184.178064][ T7773] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.178094][ T7773] ? import_iovec+0x74/0xa0 [ 184.178121][ T7773] ___sys_sendmsg+0x21f/0x2a0 [ 184.178144][ T7773] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.178211][ T7773] ? __fget_files+0x2a/0x420 [ 184.178229][ T7773] ? __fget_files+0x3a0/0x420 [ 184.178258][ T7773] __x64_sys_sendmsg+0x19b/0x260 [ 184.178283][ T7773] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 184.178302][ T7773] ? perf_trace_preemptirq_template+0xa3/0x340 [ 184.178333][ T7773] ? __pfx_ksys_write+0x10/0x10 [ 184.178369][ T7773] ? do_syscall_64+0xbe/0xfa0 [ 184.178399][ T7773] do_syscall_64+0xfa/0xfa0 [ 184.178423][ T7773] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.178448][ T7773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.178467][ T7773] ? clear_bhb_loop+0x60/0xb0 [ 184.178490][ T7773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.178509][ T7773] RIP: 0033:0x7f941518f6c9 [ 184.178539][ T7773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.178553][ T7773] RSP: 002b:00007f9415fdb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.178581][ T7773] RAX: ffffffffffffffda RBX: 00007f94153e5fa0 RCX: 00007f941518f6c9 [ 184.178595][ T7773] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000006 [ 184.178607][ T7773] RBP: 00007f9415fdb090 R08: 0000000000000000 R09: 0000000000000000 [ 184.178618][ T7773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.178628][ T7773] R13: 00007f94153e6038 R14: 00007f94153e5fa0 R15: 00007fff11959268 [ 184.178660][ T7773] [ 184.621002][ T7783] netlink: 'syz.4.586': attribute type 3 has an invalid length. [ 184.655063][ T7783] netlink: 132 bytes leftover after parsing attributes in process `syz.4.586'. [ 186.466485][ T7828] netlink: 'syz.2.603': attribute type 2 has an invalid length. [ 186.481716][ T7828] netlink: 'syz.2.603': attribute type 8 has an invalid length. [ 186.505616][ T7828] netlink: 132 bytes leftover after parsing attributes in process `syz.2.603'. [ 186.978156][ T7845] bridge_slave_1: left allmulticast mode [ 187.005345][ T7845] bridge_slave_1: left promiscuous mode [ 187.011496][ T7845] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.070772][ T7845] bridge_slave_0: left allmulticast mode [ 187.086089][ T7845] bridge_slave_0: left promiscuous mode [ 187.103636][ T7845] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.501549][ T7862] netlink: 28 bytes leftover after parsing attributes in process `syz.4.614'. [ 187.539652][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.614'. [ 187.845915][ T7874] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.617'. [ 187.911104][ T7876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.564032][ T7896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.623'. [ 188.817358][ T7907] delete_channel: no stack [ 188.822385][ T7907] delete_channel: no stack [ 189.057827][ T7914] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.630'. [ 190.115667][ T7932] tap0: tun_chr_ioctl cmd 1074025677 [ 190.235827][ T7932] tap0: linktype set to 0 [ 190.701100][ T7947] netlink: 24 bytes leftover after parsing attributes in process `syz.4.640'. [ 190.746850][ T7947] netlink: 16 bytes leftover after parsing attributes in process `syz.4.640'. [ 191.172956][ T7955] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 191.240134][ T7959] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.644'. [ 191.418597][ T7962] netlink: 48 bytes leftover after parsing attributes in process `syz.0.646'. [ 191.515528][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.646'. [ 191.735455][ T7963] netlink: 'syz.1.645': attribute type 3 has an invalid length. [ 191.743166][ T7963] netlink: 132 bytes leftover after parsing attributes in process `syz.1.645'. [ 192.324631][ T7972] delete_channel: no stack [ 192.517181][ T7987] netlink: 276 bytes leftover after parsing attributes in process `syz.4.651'. [ 192.662193][ T7991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.653'. [ 192.798160][ T7997] netlink: 16 bytes leftover after parsing attributes in process `syz.0.653'. [ 193.748482][ T7987] netlink: 'syz.4.651': attribute type 12 has an invalid length. [ 193.843079][ T8014] netlink: 104 bytes leftover after parsing attributes in process `syz.1.661'. [ 194.360450][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.372758][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.486344][ T8042] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 194.721444][ T8048] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 194.777326][ T8050] openvswitch: netlink: ufid size 7776 bytes exceeds the range (1, 16) [ 195.567813][ T8062] netlink: 'syz.1.674': attribute type 10 has an invalid length. [ 196.679532][ T8085] openvswitch: netlink: ufid size 7776 bytes exceeds the range (1, 16) [ 196.777356][ T8087] FAULT_INJECTION: forcing a failure. [ 196.777356][ T8087] name failslab, interval 1, probability 0, space 0, times 0 [ 196.813729][ T8087] CPU: 1 UID: 0 PID: 8087 Comm: syz.2.684 Not tainted syzkaller #0 PREEMPT(full) [ 196.813754][ T8087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.813765][ T8087] Call Trace: [ 196.813777][ T8087] [ 196.813789][ T8087] dump_stack_lvl+0x189/0x250 [ 196.813827][ T8087] ? __pfx____ratelimit+0x10/0x10 [ 196.813865][ T8087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.813904][ T8087] ? __pfx__printk+0x10/0x10 [ 196.813971][ T8087] ? __pfx___might_resched+0x10/0x10 [ 196.814004][ T8087] ? fs_reclaim_acquire+0x7d/0x100 [ 196.814071][ T8087] should_fail_ex+0x414/0x560 [ 196.814145][ T8087] should_failslab+0xa8/0x100 [ 196.814185][ T8087] kmem_cache_alloc_node_noprof+0x77/0x710 [ 196.814226][ T8087] ? __alloc_skb+0x112/0x2d0 [ 196.814247][ T8087] ? netlink_autobind+0xdb/0x300 [ 196.814303][ T8087] __alloc_skb+0x112/0x2d0 [ 196.814357][ T8087] netlink_sendmsg+0x5c6/0xb30 [ 196.814462][ T8087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.814515][ T8087] ? aa_sock_msg_perm+0xf1/0x1d0 [ 196.814571][ T8087] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.814596][ T8087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.814630][ T8087] __sock_sendmsg+0x21c/0x270 [ 196.814690][ T8087] ____sys_sendmsg+0x505/0x830 [ 196.814759][ T8087] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.814849][ T8087] ? import_iovec+0x74/0xa0 [ 196.814911][ T8087] ___sys_sendmsg+0x21f/0x2a0 [ 196.814963][ T8087] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.815223][ T8087] ? __fget_files+0x2a/0x420 [ 196.815248][ T8087] ? __fget_files+0x3a0/0x420 [ 196.815342][ T8087] __x64_sys_sendmsg+0x19b/0x260 [ 196.815394][ T8087] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.815487][ T8087] ? __pfx_ksys_write+0x10/0x10 [ 196.815551][ T8087] ? do_syscall_64+0xbe/0xfa0 [ 196.815612][ T8087] do_syscall_64+0xfa/0xfa0 [ 196.815666][ T8087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.815686][ T8087] ? asm_sysvec_call_function_single+0x1a/0x20 [ 196.815707][ T8087] ? clear_bhb_loop+0x60/0xb0 [ 196.815753][ T8087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.815774][ T8087] RIP: 0033:0x7f941518f6c9 [ 196.815800][ T8087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.815816][ T8087] RSP: 002b:00007f9415fdb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.815837][ T8087] RAX: ffffffffffffffda RBX: 00007f94153e5fa0 RCX: 00007f941518f6c9 [ 196.815851][ T8087] RDX: 0000000020004804 RSI: 0000200000000300 RDI: 0000000000000003 [ 196.815863][ T8087] RBP: 00007f9415fdb090 R08: 0000000000000000 R09: 0000000000000000 [ 196.815875][ T8087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.815885][ T8087] R13: 00007f94153e6038 R14: 00007f94153e5fa0 R15: 00007fff11959268 [ 196.816005][ T8087] [ 197.485633][ T8097] __nla_validate_parse: 2 callbacks suppressed [ 197.485653][ T8097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.688'. [ 197.533103][ T8097] bpf: Bad value for 'mode' [ 197.550222][ T8097] netlink: 112 bytes leftover after parsing attributes in process `syz.3.688'. [ 197.990007][ T8119] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.695'. [ 198.077566][ T8124] netlink: 'syz.4.697': attribute type 16 has an invalid length. [ 198.094786][ T8124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.697'. [ 198.232297][ T8107] delete_channel: no stack [ 198.408831][ T8131] openvswitch: netlink: ufid size 7776 bytes exceeds the range (1, 16) [ 198.555314][ T8136] netlink: 'syz.4.702': attribute type 11 has an invalid length. [ 198.563641][ T8136] netlink: 168 bytes leftover after parsing attributes in process `syz.4.702'. [ 199.526565][ T8165] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.710'. [ 199.723854][ T8167] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 199.813819][ T8170] openvswitch: netlink: ufid size 7776 bytes exceeds the range (1, 16) [ 200.139587][ T8177] netlink: 44 bytes leftover after parsing attributes in process `syz.3.714'. [ 200.180403][ T8177] tc_dump_action: action bad kind [ 200.572366][ T8190] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 200.683598][ T8192] pim6reg: tun_chr_ioctl cmd 1074025677 [ 200.703674][ T8192] pim6reg: linktype set to 768 [ 200.739172][ T8191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.795123][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 200.835098][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 200.898090][ T8196] netlink: 'syz.2.719': attribute type 10 has an invalid length. [ 201.109951][ T8196] veth1_macvtap: left promiscuous mode [ 201.359863][ T8208] netlink: 188 bytes leftover after parsing attributes in process `syz.0.722'. [ 201.655803][ T8213] openvswitch: netlink: ufid size 7776 bytes exceeds the range (1, 16) [ 201.830252][ T8222] tc_dump_action: action bad kind [ 202.245642][ T8226] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 202.489243][ T8234] netlink: 'syz.0.730': attribute type 1 has an invalid length. [ 202.538144][ T30] audit: type=1107 audit(1763081929.074:2): pid=8233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ø">EWÓé'=J!Rh%}<*…нŒ/í*È…vø' [ 202.545653][ T8234] dummy0: entered promiscuous mode [ 202.559957][ T8234] dummy0: entered allmulticast mode [ 203.114508][ T8247] netlink: 'syz.0.736': attribute type 1 has an invalid length. [ 203.437003][ T8256] openvswitch: netlink: ufid size 7776 bytes exceeds the range (1, 16) [ 203.599477][ T8263] netlink: 'syz.3.741': attribute type 29 has an invalid length. [ 203.643766][ T8263] netlink: 'syz.3.741': attribute type 29 has an invalid length. [ 203.894864][ T8266] __nla_validate_parse: 4 callbacks suppressed [ 203.894888][ T8266] netlink: 24 bytes leftover after parsing attributes in process `syz.0.745'. [ 203.985172][ T8270] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 204.453268][ T8285] netlink: 68 bytes leftover after parsing attributes in process `syz.4.751'. [ 205.033299][ T8301] openvswitch: netlink: ufid size 7776 bytes exceeds the range (1, 16) [ 205.075995][ T8302] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.754'. [ 205.354536][ T8310] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 208.337816][ T8342] netlink: 'syz.3.768': attribute type 21 has an invalid length. [ 208.365912][ T8342] netlink: 128 bytes leftover after parsing attributes in process `syz.3.768'. [ 208.411726][ T8342] netlink: 830 bytes leftover after parsing attributes in process `syz.3.768'. [ 208.424856][ T8342] bond_slave_0: entered promiscuous mode [ 208.430944][ T8342] bond_slave_1: entered promiscuous mode [ 208.626973][ T8351] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 208.816552][ T8360] netlink: 'syz.1.774': attribute type 1 has an invalid length. [ 208.922203][ T8353] netlink: 211780 bytes leftover after parsing attributes in process `syz.4.772'. [ 209.183279][ T8376] netlink: 'syz.0.780': attribute type 10 has an invalid length. [ 209.201826][ T8376] netlink: 55 bytes leftover after parsing attributes in process `syz.0.780'. [ 209.679264][ T8393] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 209.826638][ T8395] openvswitch: netlink: ufid size 7776 bytes exceeds the range (1, 16) [ 210.174583][ T8407] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.790'. [ 210.346384][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.791'. [ 210.350958][ T8407] netlink: 'syz.2.790': attribute type 10 has an invalid length. [ 210.364955][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.791'. [ 210.413432][ T8413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.193362][ T8407] veth0_vlan: left promiscuous mode [ 211.333280][ T8407] veth0_vlan: entered promiscuous mode [ 211.513541][ T8407] team0: Device veth0_vlan failed to register rx_handler [ 211.651194][ T8430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.798'. [ 211.795993][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 211.803494][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 211.810495][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 211.825536][ T8407] syz.2.790 (8407) used greatest stack depth: 17480 bytes left [ 212.247045][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'. [ 213.238124][ T8485] netlink: 830 bytes leftover after parsing attributes in process `syz.2.816'. [ 213.571222][ T8492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.818'. [ 214.101091][ T8510] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 214.829269][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.829'. [ 215.125694][ T8524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.827'. [ 215.330349][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.830'. [ 215.633846][ T8543] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.833'. [ 215.850128][ T8546] netlink: 'syz.2.835': attribute type 10 has an invalid length. [ 215.946175][ T8546] netlink: 55 bytes leftover after parsing attributes in process `syz.2.835'. [ 216.915560][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 216.918981][ T5148] Bluetooth: hci4: command 0x0406 tx timeout [ 217.255278][ T8581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.846'. [ 217.306222][ T8581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.846'. [ 217.375758][ T8590] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 217.446667][ T8593] netlink: 'syz.3.848': attribute type 10 has an invalid length. [ 217.827604][ T8602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.914344][ T8602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.945354][ T8602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.952797][ T8602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.198809][ T8618] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 218.533012][ T8627] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 218.740505][ T8636] raw_sendmsg: syz.2.861 forgot to set AF_INET. Fix it! [ 218.804077][ T8636] netlink: 'syz.2.861': attribute type 10 has an invalid length. [ 218.826468][ T8639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.864'. [ 218.867405][ T8639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.864'. [ 218.902727][ T8642] netlink: 'syz.2.861': attribute type 10 has an invalid length. [ 218.960624][ T8642] netlink: 40 bytes leftover after parsing attributes in process `syz.2.861'. [ 218.970163][ T8636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.053142][ T8636] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 219.138019][ T8642] batadv0: entered promiscuous mode [ 219.189744][ T8642] batadv0: entered allmulticast mode [ 219.234121][ T8642] bond0: (slave batadv0): Releasing backup interface [ 219.246654][ T8642] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 219.292232][ T8651] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 219.568412][ T8657] openvswitch: netlink: ufid size 7776 bytes exceeds the range (1, 16) [ 220.466379][ T8665] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.873'. [ 220.823779][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.874'. [ 221.316098][ T8683] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 221.567286][ T8700] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 221.701803][ T8702] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.887'. [ 221.863512][ T8714] netlink: 'syz.2.891': attribute type 7 has an invalid length. [ 221.876200][ T8714] netlink: 'syz.2.891': attribute type 8 has an invalid length. [ 222.865529][ T8740] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 223.328839][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'. [ 223.577444][ T8754] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.901'. [ 224.049257][ T8771] FAULT_INJECTION: forcing a failure. [ 224.049257][ T8771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.064858][ T8771] CPU: 1 UID: 0 PID: 8771 Comm: syz.4.907 Not tainted syzkaller #0 PREEMPT(full) [ 224.064886][ T8771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.064898][ T8771] Call Trace: [ 224.064907][ T8771] [ 224.064915][ T8771] dump_stack_lvl+0x189/0x250 [ 224.064949][ T8771] ? __pfx____ratelimit+0x10/0x10 [ 224.064975][ T8771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.065002][ T8771] ? __pfx__printk+0x10/0x10 [ 224.065025][ T8771] ? __asan_memcpy+0x40/0x70 [ 224.065061][ T8771] should_fail_ex+0x414/0x560 [ 224.065097][ T8771] _copy_to_user+0x31/0xb0 [ 224.065134][ T8771] bpf_verifier_vlog+0x48c/0x900 [ 224.065168][ T8771] __btf_verifier_log+0xd4/0x120 [ 224.065200][ T8771] ? __pfx___btf_verifier_log+0x10/0x10 [ 224.065223][ T8771] ? __might_fault+0xb0/0x130 [ 224.065258][ T8771] ? btf_parse_hdr+0x1e2/0x6d0 [ 224.065294][ T8771] btf_parse_hdr+0x3aa/0x6d0 [ 224.065331][ T8771] btf_new_fd+0x372/0xc90 [ 224.065349][ T8771] ? apparmor_capable+0x137/0x1b0 [ 224.065380][ T8771] ? __pfx_btf_new_fd+0x10/0x10 [ 224.065402][ T8771] ? bpf_token_put+0x143/0x160 [ 224.065426][ T8771] ? bpf_btf_load+0x126/0x190 [ 224.065450][ T8771] __sys_bpf+0x3ed/0x860 [ 224.065472][ T8771] ? __pfx___sys_bpf+0x10/0x10 [ 224.065526][ T8771] __x64_sys_bpf+0x7c/0x90 [ 224.065557][ T8771] do_syscall_64+0xfa/0xfa0 [ 224.065585][ T8771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.065604][ T8771] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 224.065624][ T8771] ? clear_bhb_loop+0x60/0xb0 [ 224.065649][ T8771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.065669][ T8771] RIP: 0033:0x7f5cdaf8f6c9 [ 224.065687][ T8771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.065703][ T8771] RSP: 002b:00007f5cdbecc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.065724][ T8771] RAX: ffffffffffffffda RBX: 00007f5cdb1e6090 RCX: 00007f5cdaf8f6c9 [ 224.065739][ T8771] RDX: 0000000000000028 RSI: 00002000000001c0 RDI: 0000000000000012 [ 224.065751][ T8771] RBP: 00007f5cdbecc090 R08: 0000000000000000 R09: 0000000000000000 [ 224.065764][ T8771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.065775][ T8771] R13: 00007f5cdb1e6128 R14: 00007f5cdb1e6090 R15: 00007ffe023b93e8 [ 224.065810][ T8771] [ 224.304683][ T8774] netlink: 'syz.0.908': attribute type 1 has an invalid length. [ 224.451917][ T8778] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 224.566781][ T8782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.911'. [ 224.745593][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.915'. [ 224.872876][ T8799] batadv0: left allmulticast mode [ 224.891436][ T8799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.937854][ T8802] netlink: 'syz.3.917': attribute type 1 has an invalid length. [ 225.300259][ T8815] netlink: 'syz.2.921': attribute type 1 has an invalid length. [ 225.360796][ T8816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.923'. [ 225.605274][ T8826] netlink: 64 bytes leftover after parsing attributes in process `syz.1.924'. [ 225.741185][ T8830] netlink: 16 bytes leftover after parsing attributes in process `syz.3.928'. [ 226.975331][ T8842] FAULT_INJECTION: forcing a failure. [ 226.975331][ T8842] name failslab, interval 1, probability 0, space 0, times 0 [ 226.982992][ T8841] netlink: 'syz.4.932': attribute type 1 has an invalid length. [ 226.990254][ T8842] CPU: 1 UID: 0 PID: 8842 Comm: syz.1.931 Not tainted syzkaller #0 PREEMPT(full) [ 226.990285][ T8842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 226.990298][ T8842] Call Trace: [ 226.990311][ T8842] [ 226.990324][ T8842] dump_stack_lvl+0x189/0x250 [ 226.990371][ T8842] ? __pfx____ratelimit+0x10/0x10 [ 226.990414][ T8842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.990458][ T8842] ? __pfx__printk+0x10/0x10 [ 226.990529][ T8842] ? __pfx___might_resched+0x10/0x10 [ 226.990589][ T8842] should_fail_ex+0x414/0x560 [ 226.990667][ T8842] should_failslab+0xa8/0x100 [ 226.990711][ T8842] __kmalloc_cache_noprof+0x6f/0x6f0 [ 226.990753][ T8842] ? nft_trans_table_add+0x56/0x430 [ 226.990829][ T8842] nft_trans_table_add+0x56/0x430 [ 226.990901][ T8842] nf_tables_newtable+0xce3/0x1890 [ 226.991053][ T8842] nfnetlink_rcv+0x11d9/0x2590 [ 226.991309][ T8842] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 226.991449][ T8842] ? ref_tracker_free+0x63a/0x7d0 [ 226.991652][ T8842] ? __netlink_deliver_tap+0x807/0x850 [ 226.991682][ T8842] ? netlink_deliver_tap+0x2e/0x1b0 [ 226.991817][ T8842] netlink_unicast+0x82f/0x9e0 [ 226.991913][ T8842] ? __pfx_netlink_unicast+0x10/0x10 [ 226.991970][ T8842] ? netlink_sendmsg+0x642/0xb30 [ 226.991989][ T8842] ? skb_put+0x11b/0x210 [ 226.992047][ T8842] netlink_sendmsg+0x805/0xb30 [ 226.992151][ T8842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.992202][ T8842] ? aa_sock_msg_perm+0xf1/0x1d0 [ 226.992255][ T8842] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 226.992281][ T8842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.992337][ T8842] __sock_sendmsg+0x21c/0x270 [ 226.992400][ T8842] ____sys_sendmsg+0x505/0x830 [ 226.992470][ T8842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.992562][ T8842] ? import_iovec+0x74/0xa0 [ 226.992625][ T8842] ___sys_sendmsg+0x21f/0x2a0 [ 226.992677][ T8842] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.992926][ T8842] ? __fget_files+0x2a/0x420 [ 226.992952][ T8842] ? __fget_files+0x3a0/0x420 [ 226.993046][ T8842] __x64_sys_sendmsg+0x19b/0x260 [ 226.993099][ T8842] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.993196][ T8842] ? __pfx_ksys_write+0x10/0x10 [ 226.993274][ T8842] ? do_syscall_64+0xbe/0xfa0 [ 226.993334][ T8842] do_syscall_64+0xfa/0xfa0 [ 226.993363][ T8842] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.993400][ T8842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.993425][ T8842] ? clear_bhb_loop+0x60/0xb0 [ 226.993494][ T8842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.993531][ T8842] RIP: 0033:0x7fd7fc78f6c9 [ 226.993558][ T8842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.993577][ T8842] RSP: 002b:00007fd7fd5f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.993619][ T8842] RAX: ffffffffffffffda RBX: 00007fd7fc9e5fa0 RCX: 00007fd7fc78f6c9 [ 226.993636][ T8842] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 226.993649][ T8842] RBP: 00007fd7fd5f4090 R08: 0000000000000000 R09: 0000000000000000 [ 226.993664][ T8842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.993677][ T8842] R13: 00007fd7fc9e6038 R14: 00007fd7fc9e5fa0 R15: 00007fff75bf4ca8 [ 226.993796][ T8842] [ 228.177378][ T8872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.940'. [ 228.495898][ T8875] netlink: 'syz.4.941': attribute type 15 has an invalid length. [ 228.524819][ T8875] netlink: 'syz.4.941': attribute type 7 has an invalid length. [ 228.532752][ T8875] netlink: 52 bytes leftover after parsing attributes in process `syz.4.941'. [ 228.600831][ T8867] delete_channel: no stack [ 228.668086][ T8877] netlink: 104 bytes leftover after parsing attributes in process `syz.1.942'. [ 228.885437][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.946'. [ 229.262024][ T8901] netlink: 'syz.3.950': attribute type 10 has an invalid length. [ 229.275382][ T8901] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.950'. [ 230.272661][ T8919] netlink: 'syz.3.955': attribute type 3 has an invalid length. [ 230.617096][ T8923] delete_channel: no stack [ 230.942887][ T8936] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.959'. [ 232.328312][ T8983] FAULT_INJECTION: forcing a failure. [ 232.328312][ T8983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.328895][ T8983] [ 232.328905][ T8983] ====================================================== [ 232.328913][ T8983] WARNING: possible circular locking dependency detected [ 232.328926][ T8983] syzkaller #0 Not tainted [ 232.328937][ T8983] ------------------------------------------------------ [ 232.328944][ T8983] syz.2.973/8983 is trying to acquire lock: [ 232.328954][ T8983] ffffffff8df315a0 (console_owner){-...}-{0:0}, at: console_flush_all+0x13a/0xb10 [ 232.329012][ T8983] [ 232.329012][ T8983] but task is already holding lock: [ 232.329019][ T8983] ffff8880b893a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 232.329061][ T8983] [ 232.329061][ T8983] which lock already depends on the new lock. [ 232.329061][ T8983] [ 232.329068][ T8983] [ 232.329068][ T8983] the existing dependency chain (in reverse order) is: [ 232.329075][ T8983] [ 232.329075][ T8983] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 232.329101][ T8983] lock_acquire+0x120/0x360 [ 232.329118][ T8983] _raw_spin_lock_nested+0x32/0x50 [ 232.329142][ T8983] raw_spin_rq_lock_nested+0x2a/0x140 [ 232.329160][ T8983] task_rq_lock+0xbc/0x470 [ 232.329178][ T8983] cgroup_move_task+0x92/0x2a0 [ 232.329200][ T8983] css_set_move_task+0x658/0x9e0 [ 232.329226][ T8983] cgroup_post_fork+0x1ef/0x790 [ 232.329250][ T8983] copy_process+0x3862/0x3c00 [ 232.329269][ T8983] kernel_clone+0x21e/0x840 [ 232.329290][ T8983] user_mode_thread+0xdd/0x140 [ 232.329312][ T8983] rest_init+0x23/0x300 [ 232.329328][ T8983] start_kernel+0x3ae/0x410 [ 232.329354][ T8983] x86_64_start_reservations+0x24/0x30 [ 232.329375][ T8983] x86_64_start_kernel+0x143/0x1c0 [ 232.329395][ T8983] common_startup_64+0x13e/0x147 [ 232.329419][ T8983] [ 232.329419][ T8983] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 232.329445][ T8983] lock_acquire+0x120/0x360 [ 232.329461][ T8983] _raw_spin_lock_irqsave+0xa7/0xf0 [ 232.329483][ T8983] try_to_wake_up+0x67/0x12b0 [ 232.329507][ T8983] __wake_up_common_lock+0x137/0x1f0 [ 232.329533][ T8983] tty_port_default_wakeup+0xfb/0x170 [ 232.329550][ T8983] serial8250_tx_chars+0x72e/0x970 [ 232.329575][ T8983] serial8250_handle_irq+0x633/0xbb0 [ 232.329600][ T8983] serial8250_default_handle_irq+0xbf/0x200 [ 232.329619][ T8983] serial8250_interrupt+0x8d/0x180 [ 232.329639][ T8983] __handle_irq_event_percpu+0x295/0xab0 [ 232.329663][ T8983] handle_irq_event+0x8b/0x1e0 [ 232.329686][ T8983] handle_edge_irq+0x23b/0xa10 [ 232.329708][ T8983] __common_interrupt+0x141/0x1f0 [ 232.329735][ T8983] common_interrupt+0xb6/0xe0 [ 232.329753][ T8983] asm_common_interrupt+0x26/0x40 [ 232.329776][ T8983] pv_native_safe_halt+0x13/0x20 [ 232.329800][ T8983] default_idle+0x13/0x20 [ 232.329814][ T8983] default_idle_call+0x73/0xb0 [ 232.329830][ T8983] do_idle+0x1e7/0x510 [ 232.329848][ T8983] cpu_startup_entry+0x44/0x60 [ 232.329878][ T8983] rest_init+0x2de/0x300 [ 232.329894][ T8983] start_kernel+0x3ae/0x410 [ 232.329919][ T8983] x86_64_start_reservations+0x24/0x30 [ 232.329939][ T8983] x86_64_start_kernel+0x143/0x1c0 [ 232.329958][ T8983] common_startup_64+0x13e/0x147 [ 232.329982][ T8983] [ 232.329982][ T8983] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 232.330007][ T8983] lock_acquire+0x120/0x360 [ 232.330023][ T8983] _raw_spin_lock_irqsave+0xa7/0xf0 [ 232.330062][ T8983] __wake_up_common_lock+0x2f/0x1f0 [ 232.330089][ T8983] tty_port_default_wakeup+0xfb/0x170 [ 232.330105][ T8983] serial8250_tx_chars+0x72e/0x970 [ 232.330132][ T8983] serial8250_handle_irq+0x633/0xbb0 [ 232.330159][ T8983] serial8250_default_handle_irq+0xbf/0x200 [ 232.330178][ T8983] serial8250_interrupt+0x8d/0x180 [ 232.330200][ T8983] __handle_irq_event_percpu+0x295/0xab0 [ 232.330225][ T8983] handle_irq_event+0x8b/0x1e0 [ 232.330250][ T8983] handle_edge_irq+0x23b/0xa10 [ 232.330272][ T8983] __common_interrupt+0x141/0x1f0 [ 232.330300][ T8983] common_interrupt+0xb6/0xe0 [ 232.330317][ T8983] asm_common_interrupt+0x26/0x40 [ 232.330334][ T8983] pv_native_safe_halt+0x13/0x20 [ 232.330357][ T8983] default_idle+0x13/0x20 [ 232.330371][ T8983] default_idle_call+0x73/0xb0 [ 232.330386][ T8983] do_idle+0x1e7/0x510 [ 232.330404][ T8983] cpu_startup_entry+0x44/0x60 [ 232.330423][ T8983] rest_init+0x2de/0x300 [ 232.330439][ T8983] start_kernel+0x3ae/0x410 [ 232.330475][ T8983] x86_64_start_reservations+0x24/0x30 [ 232.330495][ T8983] x86_64_start_kernel+0x143/0x1c0 [ 232.330515][ T8983] common_startup_64+0x13e/0x147 [ 232.330539][ T8983] [ 232.330539][ T8983] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 232.330564][ T8983] lock_acquire+0x120/0x360 [ 232.330580][ T8983] _raw_spin_lock_irqsave+0xa7/0xf0 [ 232.330601][ T8983] serial8250_console_write+0x17e/0x1ba0 [ 232.330647][ T8983] console_flush_all+0x6f3/0xb10 [ 232.330671][ T8983] console_unlock+0xbb/0x190 [ 232.330692][ T8983] vprintk_emit+0x4c5/0x590 [ 232.330713][ T8983] _printk+0xcf/0x120 [ 232.330730][ T8983] register_console+0xa8b/0xf90 [ 232.330754][ T8983] univ8250_console_init+0x3a/0x70 [ 232.330782][ T8983] console_init+0x10e/0x430 [ 232.330801][ T8983] start_kernel+0x254/0x410 [ 232.330827][ T8983] x86_64_start_reservations+0x24/0x30 [ 232.330848][ T8983] x86_64_start_kernel+0x143/0x1c0 [ 232.330868][ T8983] common_startup_64+0x13e/0x147 [ 232.330893][ T8983] [ 232.330893][ T8983] -> #0 (console_owner){-...}-{0:0}: [ 232.330919][ T8983] validate_chain+0xb9b/0x2140 [ 232.330940][ T8983] __lock_acquire+0xab9/0xd20 [ 232.330956][ T8983] lock_acquire+0x120/0x360 [ 232.330972][ T8983] console_flush_all+0x69c/0xb10 [ 232.330996][ T8983] console_unlock+0xbb/0x190 [ 232.331017][ T8983] vprintk_emit+0x4c5/0x590 [ 232.331038][ T8983] _printk+0xcf/0x120 [ 232.331054][ T8983] should_fail_ex+0x3f5/0x560 [ 232.331082][ T8983] strncpy_from_user+0x36/0x290 [ 232.331108][ T8983] strncpy_from_user_nofault+0x72/0x150 [ 232.331128][ T8983] bpf_probe_read_compat_str+0xe2/0x180 [ 232.331152][ T8983] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 232.331168][ T8983] bpf_trace_run4+0x3f2/0x4a0 [ 232.331196][ T8983] __bpf_trace_sched_switch+0x17a/0x1e0 [ 232.331222][ T8983] __traceiter_sched_switch+0x9d/0xd0 [ 232.331248][ T8983] __schedule+0x238f/0x4cc0 [ 232.331270][ T8983] preempt_schedule_common+0x83/0xd0 [ 232.331293][ T8983] preempt_schedule+0xae/0xc0 [ 232.331315][ T8983] preempt_schedule_thunk+0x16/0x30 [ 232.331335][ T8983] _raw_spin_unlock_irq+0x45/0x50 [ 232.331356][ T8983] __wait_for_common+0x3c7/0x710 [ 232.331380][ T8983] wait_for_completion_state+0x1c/0x40 [ 232.331403][ T8983] call_usermodehelper_exec+0x3d3/0x4b0 [ 232.331422][ T8983] __request_module+0x3c0/0x5e0 [ 232.331439][ T8983] get_fs_type+0x180/0x480 [ 232.331459][ T8983] tomoyo_mount_permission+0x65d/0x970 [ 232.331486][ T8983] security_sb_mount+0xec/0x350 [ 232.331512][ T8983] path_mount+0xbc/0xfe0 [ 232.331538][ T8983] __se_sys_mount+0x313/0x410 [ 232.331553][ T8983] do_syscall_64+0xfa/0xfa0 [ 232.331576][ T8983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.331594][ T8983] [ 232.331594][ T8983] other info that might help us debug this: [ 232.331594][ T8983] [ 232.331601][ T8983] Chain exists of: [ 232.331601][ T8983] console_owner --> &p->pi_lock --> &rq->__lock [ 232.331601][ T8983] [ 232.331631][ T8983] Possible unsafe locking scenario: [ 232.331631][ T8983] [ 232.331637][ T8983] CPU0 CPU1 [ 232.331643][ T8983] ---- ---- [ 232.331650][ T8983] lock(&rq->__lock); [ 232.331662][ T8983] lock(&p->pi_lock); [ 232.331676][ T8983] lock(&rq->__lock); [ 232.331689][ T8983] lock(console_owner); [ 232.331702][ T8983] [ 232.331702][ T8983] *** DEADLOCK *** [ 232.331702][ T8983] [ 232.331707][ T8983] 5 locks held by syz.2.973/8983: [ 232.331718][ T8983] #0: ffffffff8e5e3210 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_mount_permission+0x27a/0x970 [ 232.331779][ T8983] #1: ffff8880b893a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 232.331825][ T8983] #2: ffffffff8df3d620 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 232.331881][ T8983] #3: ffffffff8df31600 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 232.331925][ T8983] #4: ffffffff8de18ed0 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xb10 [ 232.331977][ T8983] [ 232.331977][ T8983] stack backtrace: [ 232.331987][ T8983] CPU: 1 UID: 0 PID: 8983 Comm: syz.2.973 Not tainted syzkaller #0 PREEMPT(full) [ 232.332009][ T8983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 232.332021][ T8983] Call Trace: [ 232.332029][ T8983] [ 232.332037][ T8983] dump_stack_lvl+0x189/0x250 [ 232.332068][ T8983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.332096][ T8983] ? __pfx__printk+0x10/0x10 [ 232.332119][ T8983] ? print_lock_name+0xde/0x100 [ 232.332142][ T8983] print_circular_bug+0x2ee/0x310 [ 232.332170][ T8983] check_noncircular+0x134/0x160 [ 232.332201][ T8983] validate_chain+0xb9b/0x2140 [ 232.332244][ T8983] __lock_acquire+0xab9/0xd20 [ 232.332269][ T8983] ? console_flush_all+0x13a/0xb10 [ 232.332295][ T8983] lock_acquire+0x120/0x360 [ 232.332313][ T8983] ? console_flush_all+0x13a/0xb10 [ 232.332346][ T8983] ? do_raw_spin_unlock+0x122/0x240 [ 232.332376][ T8983] ? console_flush_all+0x13a/0xb10 [ 232.332403][ T8983] console_flush_all+0x69c/0xb10 [ 232.332429][ T8983] ? console_flush_all+0x13a/0xb10 [ 232.332458][ T8983] ? console_flush_all+0x13a/0xb10 [ 232.332489][ T8983] ? __pfx_console_flush_all+0x10/0x10 [ 232.332525][ T8983] ? is_printk_cpu_sync_owner+0x32/0x40 [ 232.332557][ T8983] console_unlock+0xbb/0x190 [ 232.332581][ T8983] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 232.332609][ T8983] ? __pfx_console_unlock+0x10/0x10 [ 232.332641][ T8983] vprintk_emit+0x4c5/0x590 [ 232.332668][ T8983] ? __pfx_vprintk_emit+0x10/0x10 [ 232.332696][ T8983] ? perf_trace_lock+0xec/0x3b0 [ 232.332733][ T8983] ? perf_trace_lock+0xec/0x3b0 [ 232.332758][ T8983] _printk+0xcf/0x120 [ 232.332783][ T8983] ? __pfx____ratelimit+0x10/0x10 [ 232.332809][ T8983] ? __pfx__printk+0x10/0x10 [ 232.332829][ T8983] ? perf_trace_lock+0xec/0x3b0 [ 232.332856][ T8983] should_fail_ex+0x3f5/0x560 [ 232.332912][ T8983] strncpy_from_user+0x36/0x290 [ 232.332951][ T8983] strncpy_from_user_nofault+0x72/0x150 [ 232.332977][ T8983] bpf_probe_read_compat_str+0xe2/0x180 [ 232.333005][ T8983] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 232.333023][ T8983] bpf_trace_run4+0x3f2/0x4a0 [ 232.333055][ T8983] ? bpf_trace_run4+0x19c/0x4a0 [ 232.333087][ T8983] ? __pfx_bpf_trace_run4+0x10/0x10 [ 232.333123][ T8983] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 232.333156][ T8983] __bpf_trace_sched_switch+0x17a/0x1e0 [ 232.333187][ T8983] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 232.333216][ T8983] ? psi_group_change+0xab8/0x1050 [ 232.333240][ T8983] ? __schedule+0x22e9/0x4cc0 [ 232.333269][ T8983] ? __schedule+0x22e9/0x4cc0 [ 232.333297][ T8983] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 232.333328][ T8983] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 232.333358][ T8983] __traceiter_sched_switch+0x9d/0xd0 [ 232.333389][ T8983] __schedule+0x238f/0x4cc0 [ 232.333426][ T8983] ? __pfx_perf_trace_lock+0x10/0x10 [ 232.333453][ T8983] ? __pfx___schedule+0x10/0x10 [ 232.333482][ T8983] ? __lock_acquire+0xab9/0xd20 [ 232.333505][ T8983] ? perf_trace_lock+0xec/0x3b0 [ 232.333527][ T8983] ? do_raw_spin_lock+0x121/0x290 [ 232.333554][ T8983] ? preempt_schedule+0xae/0xc0 [ 232.333581][ T8983] preempt_schedule_common+0x83/0xd0 [ 232.333607][ T8983] preempt_schedule+0xae/0xc0 [ 232.333632][ T8983] ? __pfx_preempt_schedule+0x10/0x10 [ 232.333659][ T8983] ? __wait_for_common+0x3c7/0x710 [ 232.333690][ T8983] preempt_schedule_thunk+0x16/0x30 [ 232.333718][ T8983] _raw_spin_unlock_irq+0x45/0x50 [ 232.333742][ T8983] __wait_for_common+0x3c7/0x710 [ 232.333787][ T8983] ? __pfx_schedule_timeout+0x10/0x10 [ 232.333809][ T8983] ? __pfx___wait_for_common+0x10/0x10 [ 232.333842][ T8983] ? __init_swait_queue_head+0xa9/0x150 [ 232.333871][ T8983] wait_for_completion_state+0x1c/0x40 [ 232.333898][ T8983] call_usermodehelper_exec+0x3d3/0x4b0 [ 232.333921][ T8983] ? __pfx_call_usermodehelper_exec+0x10/0x10 [ 232.333940][ T8983] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 232.333975][ T8983] ? __pfx_free_modprobe_argv+0x10/0x10 [ 232.334000][ T8983] __request_module+0x3c0/0x5e0 [ 232.334024][ T8983] ? __pfx___request_module+0x10/0x10 [ 232.334048][ T8983] ? get_fs_type+0x169/0x480 [ 232.334081][ T8983] get_fs_type+0x180/0x480 [ 232.334107][ T8983] tomoyo_mount_permission+0x65d/0x970 [ 232.334139][ T8983] ? tomoyo_mount_permission+0x27a/0x970 [ 232.334169][ T8983] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 232.334240][ T8983] security_sb_mount+0xec/0x350 [ 232.334272][ T8983] path_mount+0xbc/0xfe0 [ 232.334300][ T8983] ? user_path_at+0x44/0x60 [ 232.334322][ T8983] ? kmem_cache_free+0x19b/0x690 [ 232.334365][ T8983] __se_sys_mount+0x313/0x410 [ 232.334389][ T8983] ? __pfx___se_sys_mount+0x10/0x10 [ 232.334411][ T8983] ? do_syscall_64+0xbe/0xfa0 [ 232.334437][ T8983] ? __x64_sys_mount+0x20/0xc0 [ 232.334457][ T8983] do_syscall_64+0xfa/0xfa0 [ 232.334483][ T8983] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.334510][ T8983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.334530][ T8983] ? clear_bhb_loop+0x60/0xb0 [ 232.334553][ T8983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.334573][ T8983] RIP: 0033:0x7f941518f6c9 [ 232.334591][ T8983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.334607][ T8983] RSP: 002b:00007f9415fba038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 232.334627][ T8983] RAX: ffffffffffffffda RBX: 00007f94153e6090 RCX: 00007f941518f6c9 [ 232.334641][ T8983] RDX: 0000000000000000 RSI: 0000200000011c00 RDI: 0000000000000000 [ 232.334654][ T8983] RBP: 00007f9415fba090 R08: 0000000000000000 R09: 0000000000000000 [ 232.334666][ T8983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.334678][ T8983] R13: 00007f94153e6128 R14: 00007f94153e6090 R15: 00007fff11959268 [ 232.334706][ T8983] [ 233.730655][ T8983] CPU: 1 UID: 0 PID: 8983 Comm: syz.2.973 Not tainted syzkaller #0 PREEMPT(full) [ 233.730674][ T8983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 233.730683][ T8983] Call Trace: [ 233.730692][ T8983] [ 233.730699][ T8983] dump_stack_lvl+0x189/0x250 [ 233.730722][ T8983] ? __pfx____ratelimit+0x10/0x10 [ 233.730740][ T8983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.730760][ T8983] ? __pfx__printk+0x10/0x10 [ 233.730774][ T8983] ? perf_trace_lock+0xec/0x3b0 [ 233.730795][ T8983] should_fail_ex+0x414/0x560 [ 233.730819][ T8983] strncpy_from_user+0x36/0x290 [ 233.730842][ T8983] strncpy_from_user_nofault+0x72/0x150 [ 233.730880][ T8983] bpf_probe_read_compat_str+0xe2/0x180 [ 233.730901][ T8983] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 233.730914][ T8983] bpf_trace_run4+0x3f2/0x4a0 [ 233.730937][ T8983] ? bpf_trace_run4+0x19c/0x4a0 [ 233.730960][ T8983] ? __pfx_bpf_trace_run4+0x10/0x10 [ 233.730987][ T8983] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 233.731010][ T8983] __bpf_trace_sched_switch+0x17a/0x1e0 [ 233.731032][ T8983] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 233.731053][ T8983] ? psi_group_change+0xab8/0x1050 [ 233.731070][ T8983] ? __schedule+0x22e9/0x4cc0 [ 233.731091][ T8983] ? __schedule+0x22e9/0x4cc0 [ 233.731110][ T8983] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 233.731133][ T8983] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 233.731154][ T8983] __traceiter_sched_switch+0x9d/0xd0 [ 233.731177][ T8983] __schedule+0x238f/0x4cc0 [ 233.731203][ T8983] ? __pfx_perf_trace_lock+0x10/0x10 [ 233.731222][ T8983] ? __pfx___schedule+0x10/0x10 [ 233.731242][ T8983] ? __lock_acquire+0xab9/0xd20 [ 233.731258][ T8983] ? perf_trace_lock+0xec/0x3b0 [ 233.731274][ T8983] ? do_raw_spin_lock+0x121/0x290 [ 233.731293][ T8983] ? preempt_schedule+0xae/0xc0 [ 233.731311][ T8983] preempt_schedule_common+0x83/0xd0 [ 233.731331][ T8983] preempt_schedule+0xae/0xc0 [ 233.731348][ T8983] ? __pfx_preempt_schedule+0x10/0x10 [ 233.731368][ T8983] ? __wait_for_common+0x3c7/0x710 [ 233.731395][ T8983] preempt_schedule_thunk+0x16/0x30 [ 233.731414][ T8983] _raw_spin_unlock_irq+0x45/0x50 [ 233.731432][ T8983] __wait_for_common+0x3c7/0x710 [ 233.731460][ T8983] ? __pfx_schedule_timeout+0x10/0x10 [ 233.731475][ T8983] ? __pfx___wait_for_common+0x10/0x10 [ 233.731499][ T8983] ? __init_swait_queue_head+0xa9/0x150 [ 233.731519][ T8983] wait_for_completion_state+0x1c/0x40 [ 233.731538][ T8983] call_usermodehelper_exec+0x3d3/0x4b0 [ 233.731555][ T8983] ? __pfx_call_usermodehelper_exec+0x10/0x10 [ 233.731569][ T8983] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 233.731593][ T8983] ? __pfx_free_modprobe_argv+0x10/0x10 [ 233.731610][ T8983] __request_module+0x3c0/0x5e0 [ 233.731627][ T8983] ? __pfx___request_module+0x10/0x10 [ 233.731643][ T8983] ? get_fs_type+0x169/0x480 [ 233.731668][ T8983] get_fs_type+0x180/0x480 [ 233.731686][ T8983] tomoyo_mount_permission+0x65d/0x970 [ 233.731710][ T8983] ? tomoyo_mount_permission+0x27a/0x970 [ 233.731730][ T8983] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 233.731779][ T8983] security_sb_mount+0xec/0x350 [ 233.731802][ T8983] path_mount+0xbc/0xfe0 [ 233.731822][ T8983] ? user_path_at+0x44/0x60 [ 233.731838][ T8983] ? kmem_cache_free+0x19b/0x690 [ 233.731864][ T8983] __se_sys_mount+0x313/0x410 [ 233.731880][ T8983] ? __pfx___se_sys_mount+0x10/0x10 [ 233.731895][ T8983] ? do_syscall_64+0xbe/0xfa0 [ 233.731914][ T8983] ? __x64_sys_mount+0x20/0xc0 [ 233.731927][ T8983] do_syscall_64+0xfa/0xfa0 [ 233.731945][ T8983] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.731964][ T8983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.731978][ T8983] ? clear_bhb_loop+0x60/0xb0 [ 233.731994][ T8983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.732008][ T8983] RIP: 0033:0x7f941518f6c9 [ 233.732021][ T8983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.732032][ T8983] RSP: 002b:00007f9415fba038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 233.732048][ T8983] RAX: ffffffffffffffda RBX: 00007f94153e6090 RCX: 00007f941518f6c9 [ 233.732058][ T8983] RDX: 0000000000000000 RSI: 0000200000011c00 RDI: 0000000000000000 [ 233.732067][ T8983] RBP: 00007f9415fba090 R08: 0000000000000000 R09: 0000000000000000 [ 233.732087][ T8983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.732095][ T8983] R13: 00007f94153e6128 R14: 00007f94153e6090 R15: 00007fff11959268 [ 233.732114][ T8983]