last executing test programs: 17m27.474387779s ago: executing program 0 (id=1231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000140)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0xa, 0x7fffffdb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x7}, 0x50) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = getpid() r6 = perf_event_open$cgroup(&(0x7f0000000200)={0x2, 0x80, 0x4, 0x9, 0x4, 0x7, 0x0, 0x427e2527, 0x11000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0xc9, 0x1, 0x4, 0x9, 0x6, 0x3, 0x800, 0x0, 0x3888, 0x0, 0x7ff}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r5, r6, 0x0, 0xd, &(0x7f0000000280)='/dev/net/tun\x00'}, 0x30) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000180)={'veth1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) close(r1) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) (async) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000140)=0x1) (async) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0xa, 0x7fffffdb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x7}, 0x50) (async) close(r3) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) getpid() (async) perf_event_open$cgroup(&(0x7f0000000200)={0x2, 0x80, 0x4, 0x9, 0x4, 0x7, 0x0, 0x427e2527, 0x11000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0xc9, 0x1, 0x4, 0x9, 0x6, 0x3, 0x800, 0x0, 0x3888, 0x0, 0x7ff}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r5, r6, 0x0, 0xd, &(0x7f0000000280)='/dev/net/tun\x00'}, 0x30) (async) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000180)={'veth1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) (async) 17m23.195411444s ago: executing program 0 (id=1248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'team_slave_1\x00', 0x200}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x800) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={r2}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0xec}}, @func={0x7, 0x0, 0x0, 0xc, 0x3}, @var={0xf, 0x0, 0x0, 0xe, 0x5, 0x2}, @ptr={0xa, 0x0, 0x0, 0x2, 0x2}, @func={0x6, 0x0, 0x0, 0xc, 0x3}, @volatile={0xa, 0x0, 0x0, 0x9, 0x1}, @typedef={0x1, 0x0, 0x0, 0x8, 0x1}, @var={0x3, 0x0, 0x0, 0xe, 0x4, 0x1}]}, {0x0, [0x5f, 0x5f, 0x0, 0x5f]}}, &(0x7f0000000440)=""/4096, 0x92, 0x1000, 0x1, 0x8, 0x10000}, 0x28) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001500)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000015c0)=@generic={&(0x7f0000001580)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001680)={0x6, 0x6, &(0x7f00000001c0)=@raw=[@alu={0x7, 0x1, 0xd, 0x2, 0x7, 0xc, 0x8}, @alu={0x4, 0x0, 0x7, 0x7, 0x4, 0x18, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], &(0x7f0000000200)='GPL\x00', 0x1, 0x67, &(0x7f0000000240)=""/103, 0x40f00, 0x35, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000001480)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x1, 0xd1f, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001600)=[r7, r8], &(0x7f0000001640)=[{0x3, 0x3, 0x6, 0x7}, {0x3, 0x4, 0x4}, {0x5, 0x4, 0x2, 0x2}], 0x10, 0x6a3}, 0x94) r9 = perf_event_open$cgroup(&(0x7f0000001740)={0x5, 0x80, 0x4, 0xb4, 0xf8, 0x0, 0x0, 0x5, 0x40210, 0xa79ac6ae5c54f28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x6, 0x7}, 0x109061, 0xe, 0x5, 0x0, 0x1, 0xdb, 0x9, 0x0, 0x8, 0x0, 0xfffffffffffffff7}, r1, 0xf, 0xffffffffffffffff, 0x3) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000017c0)={r4, 0x2, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x11, 0x11, &(0x7f0000001800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000018c0)='syzkaller\x00', 0x7, 0x5b, &(0x7f0000001900)=""/91, 0x6354ffab40329f43, 0x0, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000001980)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000019c0)={0x4, 0x3, 0x3, 0x401}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x18, 0x8, &(0x7f0000001ac0)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r8}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x270}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000001b00)='syzkaller\x00', 0xa, 0xaa, &(0x7f0000001b40)=""/170, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001c00)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001c40)={0x1, 0x6, 0xa, 0x3}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001c80)=[{0x0, 0x1, 0x10, 0x6}, {0x5, 0x5, 0xe, 0xc214c1abeb1ff938}, {0x2, 0x1, 0xf, 0xb}, {0x0, 0x3, 0x1, 0x4}, {0x4, 0x5, 0x1, 0xb}, {0x0, 0x1, 0x9, 0x8}, {0x4, 0x3, 0x8, 0x8}, {0x1, 0x3, 0x10, 0x2}], 0x10, 0x4}, 0x94) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000001dc0)=0xe) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002fc0)={&(0x7f0000001ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xca, 0xca, 0x5, [@restrict={0xd, 0x0, 0x0, 0xb, 0x4}, @var={0x10, 0x0, 0x0, 0xe, 0x2}, @var={0x10, 0x0, 0x0, 0xe, 0x5, 0x1}, @func={0x7, 0x0, 0x0, 0xc, 0x1}, @union={0x2, 0x1, 0x0, 0x5, 0x0, 0xac, [{0xe, 0x0, 0x1}]}, @datasec={0x2, 0x9, 0x0, 0xf, 0x2, [{0x4, 0xbe6f}, {0x1, 0x10000, 0xf}, {0x5, 0x101}, {0x6f1, 0x5, 0x2642}, {0x1, 0x5, 0x85}, {0x4, 0xc2, 0xea2}, {0x1, 0x6, 0x1ff}, {0x3, 0xfffffff7, 0x5}, {0x1, 0xc23, 0x1}], "dcc9"}]}, {0x0, [0x0, 0x2e, 0x2e]}}, &(0x7f0000001fc0)=""/4096, 0xe9, 0x1000, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000030c0)={0x18, 0x5, &(0x7f0000001e00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7fff}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}]}, &(0x7f0000001e40)='GPL\x00', 0x5, 0x6, &(0x7f0000001e80)=""/6, 0x40f00, 0x1, '\x00', r5, 0x0, r12, 0x8, &(0x7f0000003000)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000003040)={0x3, 0xb, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000003080)=[{0x5, 0x129, 0x3, 0x3}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003440)={0x6, 0x13, &(0x7f0000003180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, r8}, @map_fd={0x18, 0x8, 0x1, 0x0, r3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003240)='GPL\x00', 0x4, 0x8d, &(0x7f0000003280)=""/141, 0x40f00, 0x14, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000003340)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000003380)={0x2, 0xf, 0x6b45, 0x1000}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000033c0)=[r7, r10], &(0x7f0000003400)=[{0x1, 0x5, 0xf, 0x4}, {0x0, 0x1, 0x8, 0x3}, {0x4, 0x5, 0x7, 0xc}, {0x1, 0x5, 0x9, 0xb}], 0x10, 0x1}, 0x94) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000003500)) r13 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x89e2, &(0x7f0000003540)={r2}) recvmsg$unix(r2, &(0x7f0000004640)={&(0x7f0000003580)=@abs, 0x6e, &(0x7f0000004600)=[{&(0x7f0000003600)=""/4096, 0x1000}], 0x1}, 0x40000020) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000046c0)=@o_path={&(0x7f0000004680)='./file0\x00', 0x0, 0x10, r9}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000004700)={0x1b, 0x0, 0x0, 0x5, 0x0, r14, 0xff, '\x00', r5, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f00000047c0)=@o_path={&(0x7f0000004780)='./file0\x00', 0x0, 0x4000, r14}, 0x18) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004a80)={0x11, 0x20, &(0x7f0000004800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x38c}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@jmp={0x5, 0x0, 0xd, 0x6, 0x8, 0x1, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, @ldst={0x2, 0x3, 0x3, 0x4, 0xa, 0x40, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000004900)='syzkaller\x00', 0x1ff, 0x30, &(0x7f0000004940)=""/48, 0x41100, 0x20, '\x00', r5, 0x0, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000004980)={0x4, 0x4, 0x2bd068f4, 0xe}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000049c0)=[r11, r14], &(0x7f0000004a00)=[{0x2, 0x5, 0xa, 0xa}, {0x0, 0x4, 0xe}, {0x0, 0x2, 0xb, 0xc}, {0x0, 0x3, 0xd, 0xc}, {0x1, 0x1, 0xf, 0x1}, {0x5, 0x5, 0x3, 0x7}, {0x4, 0x5, 0x0, 0x3}, {0x4, 0x5, 0xd, 0x5}]}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r15) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000005bc0)={r10, &(0x7f0000004b40)="54142c73b160e307a018b4faf91528b8c1532939d62be33977e9d472e85f273d794639d3919db62aa2b2059712718cc4bde37e6e692e5d48c5c0c96bed4aeacb2028d2f7", &(0x7f0000004bc0)=""/4096}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005ec0)={{r8}, &(0x7f0000005c00), &(0x7f0000005e80)}, 0x20) 17m22.920075851s ago: executing program 0 (id=1252): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00862455ce9807a163000000000000000000000000000000000000005856b48daa18223dd93ac0a789f0abe98daefc1beadacee08529ff0e9918e7df2a7f2b"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xaba, 0x0, r0, 0x8, '\x00', r1, r2, 0x3, 0x5, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10f475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00862455ce9807a163000000000000000000000000000000000000005856b48daa18223dd93ac0a789f0abe98daefc1beadacee08529ff0e9918e7df2a7f2b"], 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f00000000c0)}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xaba, 0x0, r0, 0x8, '\x00', r1, r2, 0x3, 0x5, 0x4}, 0x50) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10f475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) (async) socket$kcm(0x11, 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) (async) 17m22.838384743s ago: executing program 0 (id=1253): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000b701000050000000731af8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cc000000b70000000200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000400)="bc0a4303c80000008000d03a16f2", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000580)="6eee773f1c8e29", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe3}, 0x50) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) 17m22.5599513s ago: executing program 0 (id=1255): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x10000, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) recvmsg(0xffffffffffffffff, 0x0, 0x10102) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2000) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="1400000037000b63d2", 0x9}, {&(0x7f00000005c0)="06081833d0062d04944103", 0xb}], 0x2}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x5, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x84401, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x10, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x308) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000080)) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) 17m22.103548401s ago: executing program 0 (id=1262): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x4, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x18, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000943b9da386b554efba90d3fc6500000000100004000000bb7f1a00c600fe"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x4, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x18, 0x3}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000943b9da386b554efba90d3fc6500000000100004000000bb7f1a00c600fe"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 17m6.810099278s ago: executing program 32 (id=1262): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x4, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x18, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000943b9da386b554efba90d3fc6500000000100004000000bb7f1a00c600fe"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x4, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x18, 0x3}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000943b9da386b554efba90d3fc6500000000100004000000bb7f1a00c600fe"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 10m35.328334324s ago: executing program 4 (id=2918): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000000000182a0000", @ANYRES32, @ANYBLOB="000000000400bec09ab6662a95000009"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x1005, &(0x7f0000000740)=""/4101}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000009000000000000000300f0ff840000001300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m35.11635632s ago: executing program 4 (id=2920): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), &(0x7f0000000140)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0xfd52, &(0x7f0000000880)=""/258, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23, 0x0, 0x0, 0xff87}, 0x23) 10m34.927800154s ago: executing program 4 (id=2923): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x600300) socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0xa, 0x0, 0x5b) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002300)={r1, 0xe0, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0], 0x0, 0x30, &(0x7f0000000d00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0xee, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002480)={&(0x7f0000002340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x4}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x4}}]}, {0x0, [0x2e, 0x61, 0x0, 0x2e, 0x0, 0x0]}}, &(0x7f00000023c0)=""/190, 0x50, 0xbe, 0x0, 0x5, 0x10000}, 0x28) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000002540)={0x0, r1}, 0x8) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000024c0)=ANY=[@ANYBLOB="1e00000000100000080000000200000000000100", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0300000002000000020000551af3e5000000000000c978d1", @ANYRES32=r6, @ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0xc, &(0x7f0000001140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000011c0)='syzkaller\x00', 0x8, 0xff5, &(0x7f0000002d40)=""/4085, 0x41000}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002580)=ANY=[@ANYBLOB="1b00000000000000040000000000000000000000f3decb1f899fe31e8d1ce6b01694d2c72b6c0cbf1ce4d1f210abb18324ea20bbb07ca17ba7e75d55fa", @ANYRES32, @ANYBLOB="0e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000500"/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000020000e25e513afa4f318e000000000d524c193b82d897020bb0d3c2749122389c9bbcc936ea4183f632b87dd0a82ef818a6fd0adc3f2874b16afc83af7570d146bf558e77372c591d5860d60c898eb310f5b94386ac635e0428c4949a10b4b11d58dfb8b3a30623b0bf455c2f194978811880c7ba80874785060d224192cfc8762ef74f394565e161ef1d22c20321d5a9934c0706929d0fbb62c8594ee3c1d305d8c768a24cc8074d097c2897db5bde6fb20cc91a90122bb945602540f5367caeb21abb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000300"/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc3, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xad, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r8 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = perf_event_open(&(0x7f0000002600)={0x0, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000002740)=ANY=[@ANYRES64=r3], &(0x7f0000002780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x1f, 0x4, &(0x7f0000002880)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f00000028c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002900)={&(0x7f0000002940)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000200000400000000000000000200000000000000000000000200000500000000000000000000000100000000000000590000"], 0x0, 0x4e}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a80), &(0x7f0000002ac0), 0x3d, r11}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002b00)={r11, &(0x7f0000002b40), &(0x7f0000002b80)=""/208}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002c80)={0x1a, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000004d80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r12 = openat$cgroup_ro(r8, &(0x7f0000004dc0)='devices.list\x00', 0x0, 0x0) openat$cgroup_procs(r12, &(0x7f0000004e00)='cgroup.procs\x00', 0x2, 0x0) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000004e40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004ec0)={0x18, 0xc, &(0x7f0000004f80)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r13}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000005000)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000005040)={0x1f, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) 10m34.72431527s ago: executing program 4 (id=2924): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000050000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002a97850000002d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r0}, 0xc) socket$kcm(0x28, 0x5, 0x0) 10m34.500267545s ago: executing program 4 (id=2927): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x48, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x8, 0x2}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0xee, 0x5, 0x40, 0x7, 0x0, 0x0, 0xd299, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x8, 0x8}, 0x102828, 0x7ff, 0x8, 0x6, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x1c541, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x3, 0x6}, 0x2098, 0x2, 0x9, 0x0, 0x10, 0x2, 0x4007, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, r2, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/151, 0x97}], 0x1, 0xfffffffffffffffe}, 0x0) (async) close(r4) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)="d80000001d0081044e81f777db44b904021d080201000000040000a1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f0000000640)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000680)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10) 10m34.080064115s ago: executing program 4 (id=2930): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_clone(0x100000, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) socket$kcm(0x23, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000e00)={&(0x7f0000000e40)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000e80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x400c844) sendmsg$inet(r4, &(0x7f0000000ec0)={&(0x7f0000000f00)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000f80)}, {&(0x7f0000000fc0), 0x97ff}], 0x2}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x6, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r5, 0x27, 0xe, 0x0, &(0x7f0000001180)="f8ad48cc02cb29dcc8007f5b0800", 0x0, 0x1, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000c40), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)='%pK \x00'}, 0x20) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)='%pK \x00'}, 0x20) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x11, 0x0, 0xe6, 0x9, 0x8500, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r1}, 0x20) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=r3, @ANYBLOB="ff0700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000200000005000000000000000000000000000000000000001f3809c9a28e725d5e78ece906983721166d78cdc92d90897335ecce157b80d13112433ef4b72861050b4b2bdf4fad25a27e6c17303bb84585b5374020d0e17a93f27e68d3f5dbd7a6ab1c6998f5836eb3734cb81de0a51d6c5076d51ee613306e049067dc644fa49720f485832fb12ed30e175006a4020eb0028bb3c047eafad38eb0cbc40b1378a6bd81fc483c175889ff753150a22c66deb97fcfd0377d2342e859aa0afb5f76b25467317ba4289f2641cdac35668e02016cc776e934aaba4d28944d1383e6564afbb6c1cc3212c4e2b386dec0652dd3589e879d7f1f0f8f3788e9cb3b7f668b20de5dd5d13d9e5e9166ebc875831744b0b4ecbd0fcd624e10059972790973a3f6fa622efabae2d1befdaa52b6c233dc76ba3577ef2212a0f4e65646d15b5d3774d9d4904ed43bbcffc97bb86fd7e7233e8afacf401b7cb53041c074ca8b6e93bbacbe3eccabc348c3b18765eebb5d01d8f8bf36acbeff9440673bfa3165"], 0x50) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18210000", @ANYRES32=r6, @ANYBLOB='_\a\x00\x00\x00\x00\x00\x00'], &(0x7f0000000240)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x1b, r7, 0x8, &(0x7f00000002c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000800)=[0xffffffffffffffff, r8, r9, r3, r10, r11, r12, 0x1, 0xffffffffffffffff, r13], &(0x7f0000000840)=[{0x1, 0x3, 0x10, 0x2}, {0x4, 0x2, 0xc, 0x4}], 0x10, 0x6}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000500)="8236fca008874827ccf1c8ed1e1f", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@fallback=r9, r14, 0x5, 0x10, r0, @void, @value=r1}, 0x20) 10m18.651539848s ago: executing program 33 (id=2930): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d1400bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_clone(0x100000, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) socket$kcm(0x23, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000e00)={&(0x7f0000000e40)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000e80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x400c844) sendmsg$inet(r4, &(0x7f0000000ec0)={&(0x7f0000000f00)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000f80)}, {&(0x7f0000000fc0), 0x97ff}], 0x2}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x6, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r5, 0x27, 0xe, 0x0, &(0x7f0000001180)="f8ad48cc02cb29dcc8007f5b0800", 0x0, 0x1, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000c40), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)='%pK \x00'}, 0x20) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)='%pK \x00'}, 0x20) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x11, 0x0, 0xe6, 0x9, 0x8500, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r1}, 0x20) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=r3, @ANYBLOB="ff0700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18210000", @ANYRES32=r6, @ANYBLOB='_\a\x00\x00\x00\x00\x00\x00'], &(0x7f0000000240)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x1b, r7, 0x8, &(0x7f00000002c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000800)=[0xffffffffffffffff, r8, r9, r3, r10, r11, r12, 0x1, 0xffffffffffffffff, r13], &(0x7f0000000840)=[{0x1, 0x3, 0x10, 0x2}, {0x4, 0x2, 0xc, 0x4}], 0x10, 0x6}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000500)="8236fca008874827ccf1c8ed1e1f", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@fallback=r9, r14, 0x5, 0x10, r0, @void, @value=r1}, 0x20) 9.905706204s ago: executing program 5 (id=5498): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000740), 0x4bd) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="0f02000039000511d25a80648c63940d0324fc600b00354028", 0x19}], 0x1}, 0xe000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0200002004000000080004000100000080000000", @ANYRES32=r0, @ANYRESDEC=r2, @ANYRES32=r1, @ANYRESOCT=r2, @ANYRESHEX=r1], 0x48) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8400, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000640), 0x4) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000740)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f00000007c0)=@in6={0xa, 0x4e21, 0x1, @remote}, 0x80, 0x0, 0x0, 0x0, 0x1d}, 0x4800) socket$kcm(0xa, 0x6, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x13, 0x4, &(0x7f0000000940)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x27409}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="33fe00006a"], 0xfe33) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x14, &(0x7f0000000280), 0x120) setsockopt$sock_attach_bpf(r6, 0x29, 0x15, &(0x7f0000000300), 0x3d) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000340)={r8}, 0x8) close(r9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@alu={0x7, 0x1, 0xd, 0x8, 0x8, 0x2, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x208, 0x1005, &(0x7f0000000e00)=""/4101, 0x41100, 0xc}, 0x94) 8.808280911s ago: executing program 5 (id=5508): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095", @ANYRES64=r0], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x33, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x2604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x3, 0xdf, 0xf9, 0x8, 0x0, 0x3, 0x180200, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7adbfa11, 0x0, @perf_bp={&(0x7f0000000340), 0x8}, 0x101cc, 0x0, 0xfffffffe, 0x2, 0x0, 0x7fffffff, 0x8, 0x0, 0x7, 0x0, 0x3cd2}, 0x0, 0xb, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)="180000007600a921059f317a9dab00"/24, 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000200)={r3}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000900)=ANY=[], &(0x7f0000000940)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000a40)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000700)='\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb149998bad72340ee9431c4771e8801001800000000000000180001001800000006000000020000000100000500e370ff5192c49c7b6528040000f8ffffffffffffffdac5ac9e6fed2ec6c453798145ab95685c2d505a729a5954176eb1b8d415edc238e79ba51433bdc8ad030000000000000063db000000000000"], 0x0, 0x36, 0x0, 0x1, 0x3ff}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r8}, 0x38) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 8.269888155s ago: executing program 5 (id=5512): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r7, 0x0, 0xe, 0x0, &(0x7f0000000600)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_devices(r5, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRESDEC], 0xffdd) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x10, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000ff0f0000000000000e00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b70300000000000000550901000000000095000000000000007209f4ff01000000bf91000000000000b7020000000000008500000085004000b70000000000000095000000440e0000"], &(0x7f0000000d40)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$kcm(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000e00)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pressure(r10, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000e80)={'vlan0\x00', @random="010000201000"}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.516173477s ago: executing program 5 (id=5524): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x2000000000000216, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRES8=r0, @ANYBLOB="5869f541382c6d9e02077d537613409f25e7696363e7e0cb155c004ced7da62fc12abe224e9fafabd7ac7aff0402561762c2ff98b0006dc7d25a69cce5672ff580e9c7b5d9872c842ec390a7841ca4c32f8127ae72f51b427a45af29721e9f18922f052e51948286847b4ad0903625f249e256a667e936f346a7438128e48d21d940a54e7dfbbb1012716bd480f28b33b70e648951488faf17ad262012f0bdae6f1037262bbd1f73a5020cc1a4ef6ee5643cca23effe4d0b5e88dea2d01efdc7faa3659465921ac75595350cd04a28b68ad177f65dbef37b2f9a9abc28be19ff4c149638a3b06c254032cd4cacf985", @ANYRESOCT=r1, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRES64=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7c, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) close(r2) (async) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) (async) syz_clone(0x201100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 4.514589928s ago: executing program 3 (id=5525): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64239, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_config_ext={0x8, 0x7ff}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4000000000200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x19, &(0x7f0000000000), 0x4) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x10e, 0xb, &(0x7f00000000c0), 0x4) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001880), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000018c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001900), &(0x7f0000001940)}, 0x20) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000019c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ac0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001a40), &(0x7f0000001a80)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001b00), &(0x7f0000001b40)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c40)=@bpf_tracing={0x1a, 0x40, &(0x7f00000011c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3a85}, {}, {}, [@call={0x85, 0x0, 0x0, 0x6b}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x4, 0x0, 0x9, 0x7, 0xa, 0xfffffffffffffff4, 0xffffffffffffffff}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000013c0)='GPL\x00', 0x7f, 0xe6, &(0x7f0000001400)=""/230, 0x40f00, 0x60, '\x00', 0x0, 0x18, r3, 0x8, &(0x7f0000001800)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001840)={0x4, 0x3, 0x4}, 0x10, 0x19ee2, r5, 0x3, &(0x7f0000001bc0)=[r6, r7, r8, 0x1, r9, r10, r1], &(0x7f0000001c00)=[{0x3, 0x2, 0xa, 0xb}, {0x3, 0x5, 0xd, 0x2}, {0x3, 0x2, 0x1, 0xb}], 0x10, 0x80}, 0x94) sendmsg$kcm(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000e80)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) r11 = openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xda, 0xda, 0xc, [@enum={0xa, 0x5, 0x0, 0x6, 0x4, [{0xb, 0x4041}, {0xe, 0xbdf1}, {0x4, 0x401}, {0x10, 0xf729}, {0x4, 0x80000000}]}, @struct={0xb, 0x2, 0x0, 0x4, 0x1, 0x6, [{0x3, 0x4, 0x80000001}, {0x6, 0x3, 0x8001}]}, @typedef={0xc, 0x0, 0x0, 0x8, 0x3}, @datasec={0xc, 0x5, 0x0, 0xf, 0x2, [{0x5, 0x0, 0xfffffff7}, {0x2, 0x400, 0x9}, {0x4, 0x5, 0x100}, {0x3, 0x23d3, 0x3}, {0x2, 0x34c36c98, 0x7}], "53c0"}, @var={0x3, 0x0, 0x0, 0xe, 0x4, 0x2}, @const={0x1, 0x0, 0x0, 0xa, 0x3}, @var={0x6, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x61, 0x61, 0x2e, 0x5f, 0x0, 0x30, 0x2e, 0x2e, 0x2e, 0x30]}}, &(0x7f0000000540)=""/212, 0x100, 0xd4, 0x0, 0xfffffff9}, 0x28) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x17, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r14}, &(0x7f00000008c0), &(0x7f0000000900)=r15}, 0x20) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x9, 0x5, 0x202, 0x4, 0x0, 0xffffffffffffffff, 0x100}, 0x50) r17 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x14, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r17, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r18 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b80)={0xffffffffffffffff, 0xcc62}, 0xc) r19 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="01000000040000000400000009"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000c00)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, r19}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x1f, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xab83, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @ldst={0x3, 0x0, 0x2, 0x4, 0x9, 0xfffffffffffffff8, 0xffffffffffffffff}]}, &(0x7f0000000280)='GPL\x00', 0x80000, 0x84, &(0x7f00000002c0)=""/132, 0x40f00, 0x68, '\x00', r12, @fallback=0x12, r13, 0x8, &(0x7f0000000680)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0xe, 0x0, 0x1}, 0x10, 0x0, r15, 0xa, &(0x7f0000000c40)=[r17, r18, 0xffffffffffffffff, r11, r19], &(0x7f0000000c80)=[{0x0, 0x4, 0x7, 0x6}, {0x3, 0x1, 0xc, 0x1}, {0x2, 0x1, 0xe, 0x2}, {0x4, 0x5, 0x2, 0xc}, {0x3, 0x3, 0x7, 0x2}, {0x0, 0x4, 0x9, 0x1}, {0x0, 0x4, 0x1, 0x5}, {0x2, 0x5, 0x1, 0xb}, {0x4, 0x3, 0x5}, {0x2, 0x2, 0x9, 0x8}], 0x10, 0x7}, 0x94) write$cgroup_pid(r11, &(0x7f0000000140)=r2, 0x12) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0xc, 0x5, 0x5, 0x0, 0x8000, 0xc00a0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x1, 0x1460}, 0x680, 0x0, 0x5, 0x4, 0xfffffffffffffff9, 0x1, 0x2, 0x0, 0xd, 0x0, 0x1000}, r2, 0x6, r1, 0x1) 4.316353592s ago: executing program 5 (id=5528): socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000001b80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001c40)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000001cc0), 0x4) sendmsg$kcm(r1, &(0x7f0000001d00)={&(0x7f0000001d40)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001e00)="f4000900062b3325fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a00", 0x2a}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x5, 0x0) r4 = getpid() perf_event_open(&(0x7f0000001e40)={0x5, 0x80, 0x8e, 0x4, 0x14, 0x7, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x8, @perf_config_ext={0xdb6, 0xf9f7}, 0x10, 0x1, 0x1ff, 0x5, 0x9, 0x25, 0xfff8, 0x0, 0x4, 0x0, 0x2}, r4, 0x9, r0, 0x5) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000001ec0)=r0, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001f00)={0x11, 0x3, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000002000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002040)={r6, 0xe0, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r7, 0x0}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002200)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000005153987c0fdd60d6a4dfd858267817827f383401c9b079ba90360870b96fcc5f5de459cfdfb757c1a220e0681583b8aca3ce8aef136d3a5d6759d492c9908316da4f616b1801eb22a9e2a110e414e8ba8668b8df08e8841321d754e462ef36b65e1a04dfaf6d0b154f8d1a51200ffc8711a54c9c64299c0493ed86f8445c0917481d49ea8526920af6654985ce0dccbfdb093cca7f147fb290df70a1b60000", @ANYRES32=0x1, @ANYBLOB="018000"/20, @ANYRES32=r7, @ANYRES32=r2, @ANYBLOB="05000000030000000100"/28], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002300)=@generic={0x0, r5}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000002340)={&(0x7f0000002380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000002400)='\x00', 0x1}], 0x1}, 0x3e8) openat$tun(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000024c0)={'erspan0\x00', 0x100}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8922, &(0x7f0000002500)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) 4.123338607s ago: executing program 3 (id=5530): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5c00000016006bab9a3fe3d46e17aa0a046b876c050048007ea60864160af36504bb4a43eee80fd1716dbbbc001a00b8001d001931a0e69ce517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bba170ee3b24277c652274c2777211a0d4cf32f5f2652ce56085bbc5", 0x76}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000040) recvmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000400)=""/205, 0xcd}, {0x0}, {&(0x7f0000001040)=""/4077, 0xfed}, {&(0x7f0000002040)=""/211, 0xd3}], 0x5}, 0x40012100) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002140)={{r0}, 0x0, &(0x7f0000002180)}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002200)={0x1f, 0xd, 0x0, &(0x7f00000022c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000002300)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200040c4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.828087735s ago: executing program 5 (id=5532): r0 = socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x29, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='notify_on_release\x00', 0x2, 0x0) close(0x3) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x2, 0xffffffffffffffff, 0xa) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r1}, 0x8) close(0xffffffffffffffff) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000540)={&(0x7f0000000580)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) write$cgroup_int(r2, &(0x7f00000005c0)=0xfffffffffffffffc, 0x12) mkdirat$cgroup(r1, &(0x7f0000000640)='syz0\x00', 0x1ff) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000000), 0x43) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0xa, 0x922000000003, 0x11) r7 = socket$kcm(0x11, 0x2, 0x300) unlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD(0x5, &(0x7f0000010900)={0x7, 0x3, &(0x7f00000109c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000010c00)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000010c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000010c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010000) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f0000010cc0)=r10, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000010d00)={0x0, 0x0, &(0x7f0000010d40)=[{&(0x7f0000010d80)="d8", 0x1}], 0x1, 0x0, 0x0, 0x7400}, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) 3.126140622s ago: executing program 2 (id=5534): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x600}, 0x70) 3.125340102s ago: executing program 3 (id=5535): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x2100, 0x0, &(0x7f00000004c0), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) (async) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000140)="3f1f2725e7", 0x5}], 0x2}, 0x8080) socket$kcm(0x1e, 0x1, 0x0) (async) sendmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) (async) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1, 0x0, 0x18}, 0x100) (async, rerun: 32) write$cgroup_devices(r1, &(0x7f00000005c0)=ANY=[], 0xfffffeff) (rerun: 32) 2.974336666s ago: executing program 2 (id=5536): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000a, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0x1}, 0x11fda, 0x6, 0xfffef071, 0x4, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x6c, r0}, 0x38) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x15, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0xffffff2d, &(0x7f0000000200)=[{&(0x7f0000000440)="c00e020039000b05d25a806f8c6394f90324fc602f00000008000300feff020037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x266, 0x400000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f00000005c0)={0x0, 0x0}) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_ext={0x1c, 0x23, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x328, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000980)='syzkaller\x00', 0x2, 0x2d, &(0x7f00000009c0)=""/45, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x160a2, r6, 0x4, 0x0, &(0x7f0000000a40)=[{0x4, 0x5, 0x3, 0x1}, {0x3, 0x4, 0x4, 0x7}, {0x2, 0x3, 0x8, 0x6}, {0x5, 0x5, 0x3, 0x1}], 0x10, 0x82}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b40)=@generic={&(0x7f0000000800)='./file0\x00', r9}, 0x18) close(r7) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000600), 0x4bd) r10 = socket$kcm(0x1e, 0x0, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000640), 0x43) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r11, &(0x7f0000000780)='syz0\x00', 0x1ff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r12, &(0x7f00000006c0)={&(0x7f0000000700)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x1, 0x2000}}, 0x10, 0x0}, 0x4040000) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x40, 0x4, 0x4, 0x1, 0x0, 0x896a, 0x20008, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x1100, 0x8, 0x2, 0x6, 0x7f, 0x28022af1, 0xfbdf, 0x0, 0x24, 0x0, 0x200}, 0xffffffffffffffff, 0x7, r5, 0xb) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f00000007c0)={'netdevsim0\x00', @random="f7172475a6fd"}) 2.611912075s ago: executing program 2 (id=5537): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000}, [@alu={0x7, 0x0, 0x1, 0x3, 0x7, 0x41, 0xfffffffffffffffc}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @ringbuf_query, @jmp={0x5, 0x1, 0x8, 0xa, 0x6, 0xfffffffffffffff4, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x31, &(0x7f0000000100)=""/49, 0x41000, 0xa2, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x5e8, 0xffffffffffffffff, 0x1, &(0x7f0000000180)=[0x1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x4, 0x3, 0xe, 0xc}], 0x10, 0x4}, 0x94) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) close(0x3) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000b9a8"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x8, &(0x7f00000004c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xad}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x15, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000900)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000001300)=""/4096}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0xd, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="660a0000000000006110740000000000180000000000000000000000000000009500000000"], &(0x7f0000000640)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000000)='./file0\x00', r0}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x540bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0xf1, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) sendmsg$inet(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r7, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x312}, 0x40002002) sendmsg$kcm(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)="2e00000010008188040f80ec0300000013d9b3b3300000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740)={r0, r4}, 0xc) 2.353556781s ago: executing program 1 (id=5538): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="deaa00000000000061106c00000000009567cccc52dea97c3c3055f8edb6ac28704f7ec6271217e8df05a78867e2e283f3fc066ba24b7f898b5516083c9d9361f20080f74be4affcb9000019dc839be01ce25e3ad817dcb1de851c319c49dc1d36"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000001103000000ffffffff00000000000000020000000002000000000000080200000000005f"], 0x0, 0x44}, 0x28) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x14, 0x4, 0x8, 0x1, 0x80, 0x1, 0x100000, '\x00', 0x0, r2, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200"], 0x50) r3 = openat$cgroup_ro(r1, &(0x7f0000000480)='memory.swap.current\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000280)=r3, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"/431], &(0x7f0000000180)=""/64, 0x142, 0x40, 0x0, 0x800, 0x10000, @value=r3}, 0x28) 2.148661756s ago: executing program 3 (id=5539): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xa}, 0x100000, 0x110000, 0x9e4, 0x5, 0x8, 0x20005, 0x100, 0x0, 0x0, 0x0, 0x20020006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611154000000f9ff05000000040000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xc, r0, 0x2) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0xfe) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC=0x0, @ANYBLOB, @ANYRES32=r1], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00"/13], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000010000000000000001000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa2000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b708000000100000828af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000000182300"/126, @ANYRES32=r2, @ANYBLOB], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000500)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)='@', 0x1}], 0x1, &(0x7f0000000600)=[{0x18, 0x84, 0x0, 'r'}, {0x20, 0x84, 0x8, "eeb4fe8ba15e3999ef"}], 0x38}, 0x41) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x8, 0x1, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0900000004000000100000000f00000000010000", @ANYRES32, @ANYBLOB="000009007100ffffffea0000000000ff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000980), 0x4) (async) sendmsg$kcm(r7, &(0x7f00000009c0)={&(0x7f0000000a00)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b00)={0xd, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x1d, 0xd, &(0x7f0000000c00)=ANY=[@ANYBLOB="95000000000700000000fff5929cff85100000000000001824004978aa6ced86557a000000000000", @ANYRES32=r6, @ANYBLOB="0000000000f0ffff18580000060000000000000000000000180000000100"], &(0x7f0000000c80)='GPL\x00', 0x7, 0x56, &(0x7f0000000cc0)=""/86, 0x41000, 0x11, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000d80)={0x1, 0x1, 0x7ff, 0x5}, 0x10, r8, 0x0, 0x1, &(0x7f0000000dc0), &(0x7f0000000e00)=[{0x2, 0x3, 0xd}], 0x10, 0x6}, 0x94) socket$kcm(0x2, 0x5, 0x84) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (rerun: 32) 1.649199979s ago: executing program 2 (id=5540): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x1}, 0xa080, 0x5, 0x3, 0x46ab52bf2228c1d1, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="18120000000000000000000000d3d864a8f08e1ef08fa8f6"], &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={0x0, r0}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0xe4}, 0x0, 0x80000, 0x0, 0x3, 0x3, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000001c0)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x6d}, [@ldst={0x7}]}, &(0x7f0000000200)='GPL\x00', 0x8, 0xb579, &(0x7f00000002c0)=""/195}, 0x23) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, &(0x7f0000000280), 0x4) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/167, 0xa7}, 0x2002) 1.647285609s ago: executing program 1 (id=5548): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x22, 0x0, 0x88) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg$kcm(r3, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{0x0}], 0x1}, 0x4000001) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x1458}, 0x20048811) recvmsg$kcm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/102, 0x66}], 0x1}, 0x40) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0xc010, r1}, 0x18) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0xc6, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r0, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0], 0x0, 0xf7, &(0x7f0000000bc0)=[{}], 0x8, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001180)={r0, 0xe0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000e80)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x0], 0x0, 0x65, &(0x7f0000000f80)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000fc0), &(0x7f0000001000), 0x8, 0xb2, 0x8, 0x8, &(0x7f0000001040)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1a, 0x25, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x34}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @jmp={0x5, 0x1, 0x7, 0x4, 0x9, 0x4, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000a40)='syzkaller\x00', 0x8c10, 0x60, &(0x7f0000000a80)=""/96, 0x41000, 0x0, '\x00', r6, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000e40)={0x3, 0xf, 0x6, 0x6}, 0x10, r7, 0xffffffffffffffff, 0x4, 0x0, &(0x7f00000011c0)=[{0x5, 0x2, 0xf, 0xc}, {0x4, 0x1, 0x6, 0x7}, {0x0, 0x4, 0x5, 0x8}, {0x3, 0x5, 0xa, 0x9}], 0x10, 0x249}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0x0, 0x0}, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e00000000000000030000000700001003000000fdffffff00000000612e00002e"], 0x0, 0x46, 0x0, 0xa}, 0x28) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="1448c661c1fd93fde55c598a1387240f43da6276abaf1fc58f6852dde92628daaa8e3a38a5db4139b2ecf355e877cfc0ccd7095feaa25d92e023647c413aef6e931de7f562a39f2bfc292e92580ed569d80f2fdec495d5dfe258fd71c66785ee3b14f74f9f00e04723c5a62b071cb0c78c00a9bc4e334619ca32efd7c4da0ca0e158f211e6eb47d2783b56fa9045b52b6b821fe42cc1d8fa224c70784a299d9032e708241bd5379925f6479c195906270867e57acdcf6f0133b4839c4fc3d549bf191a2566bd72def7e7ecd12efb", 0xce}], 0x1}, 0x0) 1.616395989s ago: executing program 3 (id=5541): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f5f4018116"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000007f00000018150000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={0x0, 0x0, 0x4010}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f0000000540)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x9, '\x00', 0x0, r4, 0x4, 0x1, 0x4}, 0x50) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000640)={&(0x7f0000000680)=@in6={0xa, 0x4e21, 0x0, @mcast2}, 0x80, 0x0}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.299128557s ago: executing program 2 (id=5542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r3, 0x4) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000140)) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000180)) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) socketpair(0x1f, 0x6, 0xd, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000200)={r1, r3}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000240)) close(r1) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', r3, 0x4000, r2}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', r3}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@o_path={&(0x7f0000000380)='./file0/file0\x00', r3, 0x4000, r5}, 0x18) r6 = syz_clone(0x902000, &(0x7f0000000440)="ec77f4116bff8892fa9813fe1ba4e5281b6ec8f2ef58a4fe91963f82b1a826c1ca012ab0763ac1369d0ed507fa5ed613e7ae3a408a0867fe211c32b10d134a3f6d0038e19ff872383c47b1ba6265f7794e469b406129d8d50ffba13939f60032229be589b2f1a3890e84a71795213a1b5b626d39e947eb731c9ed4b1a2423c82b3d78cc80271f879c423da013616c4680a7bf5dc23ba8695a9f023cc6b38cbfde3bb63c3f63d6714eb1e3a", 0xab, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="a2eee2285d1b5f80efa6e6ee4b4adb0c061244f4974cd61dc08ca4ab6aa3441bf7ff83ecfcc13f0e8c71c095b158c45b3af86ae24da29610a0e2f2d0510493a8ec44a4d1ef34c1493c3074e7a75bacc799a2fb3342ac659fc24ff300de0b628408237bb127ac37d2cc77aca44f1b042e9d23e3df4c27b944cd993706cc0b7a90adf03fdbdcba97d8513c7db4a02574604055d168a24f23ddb4d226e0f8b87963526261528abf8cf24f7fac85259e0036e649ad6626242342f5") r7 = perf_event_open$cgroup(&(0x7f0000000640)={0x0, 0x80, 0x3, 0x1, 0x8, 0x8, 0x0, 0x7, 0x10200, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x100000001, 0xfffffffffffffffb}, 0x10, 0x1, 0x6, 0x2, 0xfff, 0x8001, 0x8, 0x0, 0x401, 0x0, 0x36}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={r6, r7, 0x0, 0xd, &(0x7f00000006c0)='/dev/net/tun\x00'}, 0x30) socketpair(0x2, 0xa, 0xe, &(0x7f0000000740)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)) recvmsg(r1, &(0x7f0000001980)={&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/15, 0xf}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/44, 0x2c}], 0x3, &(0x7f0000001900)=""/116, 0x74}, 0x2) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000019c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xb0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a40)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0xfffffb69, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b40)={r8, 0x58, &(0x7f0000001ac0)}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001b80)={'gretap0\x00', 0x2000}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c80)={&(0x7f0000001bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@const={0xc, 0x0, 0x0, 0xa, 0x1}, @struct={0xd, 0x4, 0x0, 0x4, 0x0, 0x6, [{0x1, 0x5, 0x1}, {0xb, 0x4, 0x6}, {0xc, 0x1, 0x5d2}, {0x2, 0x4, 0x3}]}]}, {0x0, [0x2e, 0x0, 0x61]}}, &(0x7f0000001c40)=""/36, 0x65, 0x24, 0x0, 0xf9}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001dc0)={r9, 0x20, &(0x7f0000001d80)={&(0x7f0000001cc0)=""/42, 0x2a, 0x0, &(0x7f0000001d00)=""/71, 0x47}}, 0x10) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000001e00)={0x1, 0x1, [@local]}) 1.104429832s ago: executing program 1 (id=5543): r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x67, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x8, 0x43a1bd77, 0x7, 0x7, 0x658, 0x7, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 884.723398ms ago: executing program 1 (id=5544): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x70) 773.91265ms ago: executing program 3 (id=5545): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x10, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x100, 0x1, 0x20}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x2000000000000216, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000600)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x9e}]}, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x9, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x401, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x7, 0xc, &(0x7f0000000980)=ANY=[], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0c00000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"], 0x50) r7 = perf_event_open(&(0x7f0000000c00)={0x1, 0x80, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6401, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x9, 0xb, 0xa, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = perf_event_open(&(0x7f0000000c80)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x10000, 0x9e8, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = perf_event_open(&(0x7f0000000d00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYRESOCT, @ANYRESOCT=r7, @ANYRES32=0x0, @ANYRESOCT=r9, @ANYRES8, @ANYRESHEX, @ANYRESHEX=r7, @ANYRES32, @ANYRES32], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r8, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0], 0x0, 0x22, &(0x7f0000001000)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001040), 0x0, 0x0, 0xc5, 0x8, 0x8, &(0x7f0000001080)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="1300000006000000070000000300000004000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32, @ANYBLOB="0400000000000000000000000000000503c544429dbbafe6"], 0x50) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000001100), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_ext={0x1d, 0x3, &(0x7f0000001200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000001240)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1576d, r12, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x1f, 0xd, &(0x7f0000001880)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0x14, &(0x7f0000001600)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000016c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0x18, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd}, [@tail_call, @map_idx={0x18, 0x7, 0x5, 0x0, 0x10}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @alu={0x7, 0x1, 0x4, 0x9, 0xb, 0xffffffffffffffff, 0xfffffffffffffffe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000b80)='GPL\x00', 0x59d411f7, 0x40, &(0x7f0000000bc0)=""/64, 0x40f00, 0x1d, '\x00', r11, @fallback=0xa, r12, 0x8, &(0x7f0000001280)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000012c0)={0x1, 0x10, 0x3, 0xdb8}, 0x10, 0x0, r4, 0x7, &(0x7f0000001700)=[r13, r0, r0, r3, r14, r3, r0, r3, r3, r0], &(0x7f0000001740)=[{0x3, 0x3, 0xf, 0x3}, {0x3, 0x4, 0x5}, {0x1, 0x2, 0xa, 0x6}, {0x1, 0x3, 0x0, 0x3}, {0x5, 0x1}, {0x4, 0x3, 0xb, 0x8}, {0x1, 0x4, 0x7, 0x6}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 664.143303ms ago: executing program 1 (id=5546): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x65199, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0xffffffff}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r2, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x6, &(0x7f0000000640)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000680)='GPL\x00', 0x5, 0x29e, &(0x7f00000006c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) 450.646438ms ago: executing program 1 (id=5547): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), 0x2ca}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000000c00)=""/4089, 0x32, 0xff9, 0xa}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x200000000000000a, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x7, 0xc, &(0x7f0000000980)=ANY=[], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(r3, &(0x7f0000000a80)={&(0x7f0000000ac0)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b80)='@', 0x1}], 0x1}, 0x4000000) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000001c40)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0x2f9, 0xf788, &(0x7f00000005c0)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000600)="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", &(0x7f0000000740)}, 0x28) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001cc0)=ANY=[], 0x48) r5 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000001d00), 0xe) mkdir(&(0x7f0000001d40)='./cgroup/../file0\x00', 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001d80), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000001dc0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000001e00)=r6, 0x12) perf_event_open$cgroup(&(0x7f0000001e40)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa480}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001ec0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000001f40), 0x4) 0s ago: executing program 2 (id=5549): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xa}, 0x100000, 0x110000, 0x9e4, 0x5, 0x8, 0x20005, 0x100, 0x0, 0x0, 0x0, 0x20020006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x800}, 0x10}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xc, r0, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0xfe) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC=0x0, @ANYBLOB, @ANYRES32=r1], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00"/13], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000010000000000000001000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa2000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b708000000100000828af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000000182300"/126, @ANYRES32=r2, @ANYBLOB], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000500)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)='@', 0x1}], 0x1, &(0x7f0000000600)=[{0x18, 0x84, 0x0, 'r'}, {0x20, 0x84, 0x8, "eeb4fe8ba15e3999ef"}], 0x38}, 0x41) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0900000004000000100000000f00000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000980), 0x4) sendmsg$kcm(r7, &(0x7f00000009c0)={&(0x7f0000000a00)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b00)={0xd, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x1d, 0xd, &(0x7f0000000c00)=ANY=[@ANYBLOB="95000000000700000000fff5929cff85100000000000001824004978aa6ced86557a000000000000", @ANYRES32=r6, @ANYBLOB="0000000000f0ffff18580000060000000000000000000000180000000100"], &(0x7f0000000c80)='GPL\x00', 0x7, 0x56, &(0x7f0000000cc0)=""/86, 0x41000, 0x11, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000d80)={0x1, 0x1, 0x7ff, 0x5}, 0x10, r8, 0x0, 0x1, &(0x7f0000000dc0), &(0x7f0000000e00)=[{0x2, 0x3, 0xd}], 0x10, 0x6}, 0x94) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) kernel console output (not intermixed with test programs): link: 144316 bytes leftover after parsing attributes in process `syz.2.3979'. [ 1066.727410][T22873] netlink: 'syz.5.3980': attribute type 3 has an invalid length. [ 1066.735899][T22873] netlink: 'syz.5.3980': attribute type 5 has an invalid length. [ 1066.744587][T22873] netlink: 'syz.5.3980': attribute type 6 has an invalid length. [ 1066.753655][T22873] netlink: 197520 bytes leftover after parsing attributes in process `syz.5.3980'. [ 1067.431372][T22894] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3985'. [ 1067.893481][T22909] netlink: 'syz.3.3990': attribute type 29 has an invalid length. [ 1067.957881][T22909] netlink: 'syz.3.3990': attribute type 29 has an invalid length. [ 1068.043449][T22917] netlink: 'syz.3.3990': attribute type 29 has an invalid length. [ 1068.104443][T22920] netlink: 'syz.3.3990': attribute type 29 has an invalid length. [ 1068.135923][T22917] netlink: 'syz.3.3990': attribute type 10 has an invalid length. [ 1068.165518][T22922] netlink: 'syz.3.3990': attribute type 29 has an invalid length. [ 1068.192332][T22917] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3990'. [ 1068.203357][T22917] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3990'. [ 1068.344191][T22928] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.3995'. [ 1069.805753][T22943] rxe_eth0 speed is unknown, defaulting to 1000 [ 1070.660860][T22976] netlink: 'syz.3.4007': attribute type 29 has an invalid length. [ 1070.681224][T22976] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4007'. [ 1070.726335][T22974] netlink: 208064 bytes leftover after parsing attributes in process `syz.5.4006'. [ 1071.941540][T22987] geneve1: entered promiscuous mode [ 1071.950207][T22987] geneve1: entered allmulticast mode [ 1071.957133][T22987] team0: Port device geneve1 added [ 1072.879099][T23001] delete_channel: no stack [ 1073.535116][T23018] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.4020'. [ 1074.088591][T23038] validate_nla: 4 callbacks suppressed [ 1074.088612][T23038] netlink: 'syz.5.4027': attribute type 4 has an invalid length. [ 1074.147521][T23038] netlink: 206236 bytes leftover after parsing attributes in process `syz.5.4027'. [ 1074.749154][T23058] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4032'. [ 1074.785081][T23058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1074.857382][T23064] mac80211_hwsim hwsim47 ..ãc¤±: renamed from wlan1 [ 1076.426755][T23091] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.4037'. [ 1076.505019][T23087] IPv6: Can't replace route, no match found [ 1076.622915][T23098] tap0: tun_chr_ioctl cmd 1074025677 [ 1076.628488][T23098] tap0: linktype set to 777 [ 1076.688039][T23100] netlink: 'syz.1.4040': attribute type 29 has an invalid length. [ 1076.739467][T23100] netlink: 'syz.1.4040': attribute type 29 has an invalid length. [ 1076.768898][T23101] netlink: 'syz.1.4040': attribute type 29 has an invalid length. [ 1076.788145][T23102] netlink: 'syz.1.4040': attribute type 29 has an invalid length. [ 1076.896582][T23102] netlink: 'syz.1.4040': attribute type 29 has an invalid length. [ 1077.183555][T23101] netlink: 'syz.1.4040': attribute type 10 has an invalid length. [ 1077.353804][T23101] veth0_vlan: left promiscuous mode [ 1077.360247][T23101] veth0_vlan: entered promiscuous mode [ 1077.605535][T23101] team0: Device veth0_vlan failed to register rx_handler [ 1078.432027][T23124] netlink: 'syz.3.4044': attribute type 10 has an invalid length. [ 1078.452121][T23124] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4044'. [ 1078.734459][T23121] IPv6: Can't replace route, no match found [ 1078.825743][T23138] netlink: 'syz.1.4048': attribute type 21 has an invalid length. [ 1078.833987][T23138] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4048'. [ 1078.897898][T23140] sctp: [Deprecated]: syz.1.4048 (pid 23140) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1078.897898][T23140] Use struct sctp_sack_info instead [ 1079.366504][T23152] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.4049'. [ 1080.093812][T23173] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4056'. [ 1082.988514][T23192] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.4062'. [ 1083.220826][T23201] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.4066'. [ 1083.244874][T23201] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1083.261293][T23201] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4066'. [ 1083.282457][T23205] delete_channel: no stack [ 1083.287403][T23205] delete_channel: no stack [ 1083.631385][T23223] netdevsim netdevsim5 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 1085.041748][T23219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1087.396790][T23301] netlink: 'syz.2.4090': attribute type 10 has an invalid length. [ 1087.426847][T23301] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4090'. [ 1087.436759][T23301] team0: entered promiscuous mode [ 1087.442192][T23301] team_slave_0: entered promiscuous mode [ 1087.448779][T23301] team_slave_1: entered promiscuous mode [ 1087.455554][T23301] : entered promiscuous mode [ 1087.460629][T23301] bond_slave_1: entered promiscuous mode [ 1087.468115][T23301] macvlan1: entered promiscuous mode [ 1087.480645][T23301] geneve1: entered promiscuous mode [ 1087.489662][T23301] team0: entered allmulticast mode [ 1087.502081][T23301] team_slave_0: entered allmulticast mode [ 1087.511975][T23301] team_slave_1: entered allmulticast mode [ 1087.525933][T23301] : entered allmulticast mode [ 1087.541180][T23301] bond_slave_1: entered allmulticast mode [ 1087.556203][T23301] geneve1: entered allmulticast mode [ 1087.573565][T23301] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1087.609998][T23298] netlink: 'syz.3.4089': attribute type 10 has an invalid length. [ 1087.904703][T23314] netlink: 'syz.2.4093': attribute type 10 has an invalid length. [ 1087.918793][T23314] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4093'. [ 1087.929245][T23314] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1088.054136][T23320] netlink: 'syz.3.4094': attribute type 21 has an invalid length. [ 1088.070145][T23320] IPv6: NLM_F_CREATE should be specified when creating new route [ 1088.081792][T23320] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1088.091767][T23320] IPv6: NLM_F_CREATE should be set when creating new route [ 1088.110129][T23320] IPv6: NLM_F_CREATE should be set when creating new route [ 1088.118669][T23320] IPv6: NLM_F_CREATE should be set when creating new route [ 1091.955137][T23383] IPv6: Can't replace route, no match found [ 1092.375885][T23399] netlink: 'syz.1.4112': attribute type 1 has an invalid length. [ 1092.401969][T23399] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.4112'. [ 1092.430121][T23399] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4112'. [ 1094.185943][T23431] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4120'. [ 1094.210358][T23431] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1094.231745][T23430] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4122'. [ 1094.315742][T23427] IPv6: Can't replace route, no match found [ 1095.991916][T23473] mac80211_hwsim hwsim40 ..ãc¤±: renamed from wlan1 (while UP) [ 1096.204174][T23475] netlink: 'syz.3.4133': attribute type 10 has an invalid length. [ 1097.210975][T23497] netlink: 'syz.5.4139': attribute type 10 has an invalid length. [ 1097.226952][T23497] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4139'. [ 1097.238367][T23497] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1097.250887][T23497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1097.381410][T23491] netlink: 'syz.2.4137': attribute type 21 has an invalid length. [ 1099.127994][T23538] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4149'. [ 1099.140590][T23541] netlink: 'syz.5.4150': attribute type 10 has an invalid length. [ 1099.709491][T23541] team0: Device gre0 is of different type [ 1103.839546][T23591] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4161'. [ 1105.495841][T23647] netlink: 'syz.5.4175': attribute type 12 has an invalid length. [ 1105.535954][T23647] netlink: 14585 bytes leftover after parsing attributes in process `syz.5.4175'. [ 1105.647685][T23647] netlink: 'syz.5.4175': attribute type 4 has an invalid length. [ 1106.222236][T23661] netlink: 'syz.3.4178': attribute type 10 has an invalid length. [ 1106.241939][T23661] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4178'. [ 1106.286279][T23664] netlink: 'syz.3.4178': attribute type 10 has an invalid length. [ 1106.306458][T23664] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4178'. [ 1106.503253][T23672] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4181'. [ 1106.586781][T23675] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4182'. [ 1107.240797][T23706] netlink: 'syz.3.4185': attribute type 12 has an invalid length. [ 1107.249269][T23706] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.4185'. [ 1107.505742][T23703] netlink: 'syz.3.4185': attribute type 4 has an invalid length. [ 1107.597887][T23711] netlink: 'syz.1.4186': attribute type 21 has an invalid length. [ 1108.359251][T23735] netlink: 'syz.1.4193': attribute type 21 has an invalid length. [ 1108.374115][T23740] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4195'. [ 1108.384418][T23735] netlink: 'syz.1.4193': attribute type 6 has an invalid length. [ 1108.384580][T23735] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4193'. [ 1108.462655][T23743] netlink: 'syz.3.4195': attribute type 10 has an invalid length. [ 1108.554778][T23743] team0: left allmulticast mode [ 1108.598839][T23743] team_slave_0: left allmulticast mode [ 1108.626035][T23743] team_slave_1: left allmulticast mode [ 1108.642844][T23743] bond0: left allmulticast mode [ 1108.647830][T23743] bond_slave_0: left allmulticast mode [ 1108.653589][T23743] bond_slave_1: left allmulticast mode [ 1108.659224][T23743] bridge_slave_1: left allmulticast mode [ 1108.665225][T23743] batadv0: left allmulticast mode [ 1108.670355][T23743] geneve1: left allmulticast mode [ 1108.676340][T23743] team0: left promiscuous mode [ 1108.683420][T23743] team_slave_0: left promiscuous mode [ 1108.689093][T23743] team_slave_1: left promiscuous mode [ 1108.694896][T23743] bond0: left promiscuous mode [ 1108.700663][T23743] bond_slave_0: left promiscuous mode [ 1108.707387][T23743] bond_slave_1: left promiscuous mode [ 1108.713278][T23743] bridge_slave_1: left promiscuous mode [ 1108.719080][T23743] batadv0: left promiscuous mode [ 1108.724495][T23743] geneve1: left promiscuous mode [ 1108.729796][T23743] bridge0: port 3(team0) entered disabled state [ 1108.739845][T23743] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.983807][T23757] netlink: 144316 bytes leftover after parsing attributes in process `syz.5.4198'. [ 1108.994326][T23757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4198'. [ 1109.199891][T23760] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4200'. [ 1109.491348][T23765] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.4199'. [ 1110.612885][T23793] validate_nla: 4 callbacks suppressed [ 1110.612929][T23793] netlink: 'syz.2.4208': attribute type 3 has an invalid length. [ 1110.671953][T23793] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.4208'. [ 1110.684763][T23795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4209'. [ 1110.960538][T23804] netlink: 'syz.5.4213': attribute type 9 has an invalid length. [ 1110.978300][T23804] netlink: 134780 bytes leftover after parsing attributes in process `syz.5.4213'. [ 1111.330783][T23809] delete_channel: no stack [ 1111.907940][T23829] netlink: 'syz.2.4218': attribute type 12 has an invalid length. [ 1111.922379][T23829] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.4218'. [ 1111.949164][T23829] netlink: 'syz.2.4218': attribute type 4 has an invalid length. [ 1112.199611][T23836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4220'. [ 1115.788909][T23851] delete_channel: no stack [ 1116.161273][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.170509][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.685707][T23873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4231'. [ 1116.728078][T23883] netlink: 'syz.3.4235': attribute type 21 has an invalid length. [ 1116.766273][T23883] netlink: 'syz.3.4235': attribute type 6 has an invalid length. [ 1116.801212][T23883] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4235'. [ 1117.488401][T23899] delete_channel: no stack [ 1118.193897][T23914] netlink: 'syz.2.4242': attribute type 29 has an invalid length. [ 1118.221969][T23914] netlink: 'syz.2.4242': attribute type 29 has an invalid length. [ 1120.179797][T23964] netlink: 'syz.3.4258': attribute type 4 has an invalid length. [ 1120.232524][T23964] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4258'. [ 1120.302876][T23964] netlink: 'syz.3.4258': attribute type 4 has an invalid length. [ 1120.346872][T23964] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4258'. [ 1120.395513][T23964] netlink: 'syz.3.4258': attribute type 4 has an invalid length. [ 1120.415021][T23964] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4258'. [ 1120.429115][T23964] netlink: 'syz.3.4258': attribute type 4 has an invalid length. [ 1120.453658][T23964] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4258'. [ 1120.492753][T23964] netlink: 'syz.3.4258': attribute type 4 has an invalid length. [ 1120.500741][T23964] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4258'. [ 1120.535882][T23964] netlink: 'syz.3.4258': attribute type 4 has an invalid length. [ 1120.549950][T23964] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4258'. [ 1120.582590][T23964] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4258'. [ 1120.600165][T23964] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4258'. [ 1122.747424][T24021] validate_nla: 61 callbacks suppressed [ 1122.747446][T24021] netlink: 'syz.3.4267': attribute type 27 has an invalid length. [ 1122.922377][T24021] __nla_validate_parse: 58 callbacks suppressed [ 1122.922400][T24021] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4267'. [ 1123.195128][T24030] netlink: 'syz.1.4268': attribute type 1 has an invalid length. [ 1123.205274][T24030] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4268'. [ 1123.658015][T24044] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4276'. [ 1124.339577][T24063] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4280'. [ 1124.586626][T24063] hsr_slave_0: left promiscuous mode [ 1124.670014][T24063] hsr_slave_1: left promiscuous mode [ 1124.768015][T24063] bridge0: port 2(hsr0) entered disabled state [ 1125.000507][T24063] hsr0 (unregistering): left allmulticast mode [ 1125.046164][T24063] bridge0: port 2(hsr0) entered disabled state [ 1125.292330][T24068] tap1: tun_chr_ioctl cmd 2147767519 [ 1127.469192][T24101] netlink: 'syz.3.4288': attribute type 4 has an invalid length. [ 1127.571323][T24101] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4288'. [ 1127.729826][T24101] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1127.838792][T24111] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4295'. [ 1127.884538][T24110] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4295'. [ 1127.894281][T24111] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1127.962198][T24110] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1128.003595][T24117] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4296'. [ 1128.047839][T24117] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4296'. [ 1129.255451][T24143] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.4304'. [ 1130.220392][T24166] netlink: 'syz.1.4306': attribute type 4 has an invalid length. [ 1130.278920][T24166] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4306'. [ 1130.695308][T24170] netlink: 'syz.5.4309': attribute type 2 has an invalid length. [ 1130.729877][T24170] netlink: 'syz.5.4309': attribute type 8 has an invalid length. [ 1130.745522][T24170] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4309'. [ 1131.597074][T24191] syzkaller0: entered promiscuous mode [ 1131.661949][T24191] syzkaller0: entered allmulticast mode [ 1131.947474][T24183] rxe_eth0 speed is unknown, defaulting to 1000 [ 1136.215548][T24219] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.4323'. [ 1136.467551][T24228] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.4324'. [ 1136.487309][T24225] netlink: 'syz.5.4321': attribute type 4 has an invalid length. [ 1136.500200][T24228] openvswitch: netlink: Message has 20476 unknown bytes. [ 1136.508857][T24225] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4321'. [ 1137.504917][T24255] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4330'. [ 1137.532392][T24255] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4330'. [ 1137.545911][T24250] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4330'. [ 1137.558661][T24250] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4330'. [ 1138.271174][T24263] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4342'. [ 1138.579279][T24277] netlink: 'syz.1.4338': attribute type 4 has an invalid length. [ 1139.011945][T24284] netlink: 'syz.2.4334': attribute type 4 has an invalid length. [ 1139.019765][T24284] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4334'. [ 1139.205340][T24284] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1139.718301][T24303] netlink: 'syz.2.4344': attribute type 28 has an invalid length. [ 1139.789878][T24303] netlink: 29 bytes leftover after parsing attributes in process `syz.2.4344'. [ 1140.747792][T24326] netlink: 'syz.2.4351': attribute type 9 has an invalid length. [ 1140.869770][T24327] netlink: 'syz.2.4351': attribute type 9 has an invalid length. [ 1141.978926][T24356] sctp: [Deprecated]: syz.2.4358 (pid 24356) Use of int in max_burst socket option deprecated. [ 1141.978926][T24356] Use struct sctp_assoc_value instead [ 1142.383194][T24368] __nla_validate_parse: 7 callbacks suppressed [ 1142.383213][T24368] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4362'. [ 1142.460028][T24368] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.4362'. [ 1142.496132][T24368] tipc: Started in network mode [ 1142.501074][T24368] tipc: Node identity b, cluster identity 57 [ 1142.588025][T24368] tipc: Node number set to 11 [ 1142.595772][T24378] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4363'. [ 1142.653593][T24378] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4363'. [ 1142.700699][T24379] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4363'. [ 1142.784286][T24369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4363'. [ 1143.646170][T24391] netlink: 'syz.5.4369': attribute type 4 has an invalid length. [ 1143.654243][T24391] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4369'. [ 1143.668082][T24387] rxe_eth0 speed is unknown, defaulting to 1000 [ 1145.598593][T24432] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.4387'. [ 1145.985316][T24435] rxe_eth0 speed is unknown, defaulting to 1000 [ 1146.070563][T24438] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4380'. [ 1146.093211][T24438] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4380'. [ 1146.309328][T24451] netlink: 'syz.1.4383': attribute type 1 has an invalid length. [ 1146.322250][T24451] netlink: 'syz.1.4383': attribute type 2 has an invalid length. [ 1146.897373][T24461] netlink: 'syz.5.4385': attribute type 28 has an invalid length. [ 1146.915563][T24461] netlink: 'syz.5.4385': attribute type 29 has an invalid length. [ 1147.764998][T24461] netlink: 'syz.5.4385': attribute type 2 has an invalid length. [ 1148.106817][T24439] rxe_eth0 speed is unknown, defaulting to 1000 [ 1148.114909][T24483] __nla_validate_parse: 5 callbacks suppressed [ 1148.114925][T24483] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4389'. [ 1148.168260][T24484] delete_channel: no stack [ 1148.208892][T24483] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4389'. [ 1148.227739][T24481] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4389'. [ 1148.697974][T24490] netlink: 'syz.1.4390': attribute type 15 has an invalid length. [ 1148.724051][T24490] netlink: 'syz.1.4390': attribute type 7 has an invalid length. [ 1148.750774][T24490] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4390'. [ 1152.122471][T24508] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4394'. [ 1152.131570][T24508] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4394'. [ 1152.242824][T24506] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4394'. [ 1152.999116][T24508] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4394'. [ 1153.431229][T24525] syzkaller0: entered promiscuous mode [ 1153.441699][T24525] syzkaller0: entered allmulticast mode [ 1155.562994][T24567] netlink: 'syz.2.4410': attribute type 21 has an invalid length. [ 1155.581125][T24567] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4410'. [ 1155.869076][T24570] netlink: 'syz.3.4411': attribute type 10 has an invalid length. [ 1157.333541][T24602] netlink: 'syz.3.4420': attribute type 1 has an invalid length. [ 1157.372660][T24602] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4420'. [ 1157.401285][T24596] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.4420'. [ 1157.658405][T24609] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.4421'. [ 1157.729225][T24609] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1157.864417][T24618] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4426'. [ 1158.561740][T24629] netlink: 'syz.5.4429': attribute type 15 has an invalid length. [ 1158.602626][T24629] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.4429'. [ 1159.423804][T24651] netlink: 'syz.5.4437': attribute type 10 has an invalid length. [ 1159.530765][T24651] veth1_macvtap: left promiscuous mode [ 1160.457523][T24655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.649281][T24659] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.4437'. [ 1160.693596][T24649] rxe_eth0 speed is unknown, defaulting to 1000 [ 1162.006152][T24683] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4445'. [ 1162.288180][T24694] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4449'. [ 1162.308603][T24694] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1165.225482][T24723] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 1166.429100][T24743] netlink: 'syz.1.4463': attribute type 39 has an invalid length. [ 1166.451945][T24743] veth1_vlan: entered allmulticast mode [ 1166.791316][T24744] netlink: 'syz.2.4462': attribute type 153 has an invalid length. [ 1166.873201][T24744] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.4462'. [ 1167.365550][T24756] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.4466'. [ 1167.492998][T24756] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 1167.640495][T24766] netlink: 'syz.3.4466': attribute type 29 has an invalid length. [ 1167.653697][T24766] netlink: 'syz.3.4466': attribute type 29 has an invalid length. [ 1167.687522][T24765] netlink: 'syz.2.4468': attribute type 21 has an invalid length. [ 1167.709463][T24765] netlink: 'syz.2.4468': attribute type 6 has an invalid length. [ 1167.744742][T24765] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4468'. [ 1167.821844][T24760] netlink: 'syz.3.4466': attribute type 29 has an invalid length. [ 1168.010563][T24770] netlink: 'syz.5.4469': attribute type 10 has an invalid length. [ 1168.162349][T24770] netlink: 212412 bytes leftover after parsing attributes in process `syz.5.4469'. [ 1168.294112][T24770] openvswitch: netlink: Flow key attr not present in new flow. [ 1168.376274][T24775] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4470'. [ 1169.056472][T24783] netlink: 'syz.5.4472': attribute type 4 has an invalid length. [ 1170.005632][T24800] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4478'. [ 1170.938797][T24815] syzkaller0: entered promiscuous mode [ 1171.061108][T24815] syzkaller0: entered allmulticast mode [ 1174.927329][T24854] rxe_eth0 speed is unknown, defaulting to 1000 [ 1175.662644][T24872] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.4494'. [ 1176.846815][T24888] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4499'. [ 1177.664502][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.670886][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.973821][T24901] sit0: entered promiscuous mode [ 1178.163690][T24913] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4504'. [ 1180.654005][T24930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1180.670128][T24930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1180.680340][T24930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1180.695819][T24930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1181.893910][T24953] netlink: 212400 bytes leftover after parsing attributes in process `syz.3.4514'. [ 1182.389314][T24943] delete_channel: no stack [ 1184.350120][T25005] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.4526'. [ 1184.484717][T25005] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1184.810427][T25014] netlink: 'syz.5.4530': attribute type 9 has an invalid length. [ 1184.812034][T25016] netlink: 'syz.1.4529': attribute type 10 has an invalid length. [ 1184.825735][T25014] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.4530'. [ 1184.851819][T25016] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4529'. [ 1184.904256][T25019] netlink: 'syz.1.4529': attribute type 10 has an invalid length. [ 1184.942239][T25019] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4529'. [ 1186.176425][T25051] mac80211_hwsim hwsim54 wlan1: entered promiscuous mode [ 1186.195672][T25051] mac80211_hwsim hwsim54 wlan1: entered allmulticast mode [ 1186.223396][T25053] netlink: 'syz.1.4539': attribute type 1 has an invalid length. [ 1186.239245][T25053] netlink: 'syz.1.4539': attribute type 3 has an invalid length. [ 1186.292629][T25054] netlink: 'syz.1.4539': attribute type 10 has an invalid length. [ 1186.341320][T25053] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4539'. [ 1186.342855][T25054] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4539'. [ 1186.370716][T25048] netlink: 'syz.2.4540': attribute type 4 has an invalid length. [ 1186.801570][T25072] netlink: 'syz.2.4547': attribute type 23 has an invalid length. [ 1186.976722][T25075] netlink: 'syz.2.4547': attribute type 23 has an invalid length. [ 1187.332262][T25089] netlink: 'syz.3.4552': attribute type 10 has an invalid length. [ 1187.435283][T25089] team0: Port device veth0_to_bond added [ 1188.267389][T13742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1188.282070][T13742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1188.290307][T13742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1188.664842][T13742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1188.675580][T13742] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1188.684472][T13742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1188.701509][T25115] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4558'. [ 1188.721640][T25115] ipvlan1: entered promiscuous mode [ 1188.753216][T25115] ipvlan1: entered allmulticast mode [ 1188.765167][T25115] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1188.781072][T25121] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.4559'. [ 1188.838108][T25106] rxe_eth0 speed is unknown, defaulting to 1000 [ 1189.050509][T13377] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.082262][T25127] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4561'. [ 1189.088737][T25128] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4560'. [ 1189.386873][T13377] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.652879][T25134] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.4563'. [ 1190.557476][T25128] validate_nla: 4 callbacks suppressed [ 1190.557492][T25128] netlink: 'syz.3.4560': attribute type 10 has an invalid length. [ 1190.571411][T25128] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.4560'. [ 1190.616184][T25134] netlink: 'syz.5.4563': attribute type 2 has an invalid length. [ 1190.632313][T25134] netlink: 'syz.5.4563': attribute type 8 has an invalid length. [ 1190.640129][T25134] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4563'. [ 1190.746249][T13377] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.782378][T13742] Bluetooth: hci0: command tx timeout [ 1190.864889][T13377] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.099023][T25159] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.4568'. [ 1191.183739][T25106] chnl_net:caif_netlink_parms(): no params data found [ 1191.797583][T13377] tipc: Left network mode [ 1191.818503][T25106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.842142][T25106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.880045][T25106] bridge_slave_0: entered allmulticast mode [ 1191.908725][T25106] bridge_slave_0: entered promiscuous mode [ 1192.084564][T25106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.122102][T25106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.129391][T25106] bridge_slave_1: entered allmulticast mode [ 1192.151916][T25106] bridge_slave_1: entered promiscuous mode [ 1192.412338][T25106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.447849][T25196] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4577'. [ 1192.457933][T25106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.586446][T25106] team0: Port device team_slave_0 added [ 1192.783601][T25106] team0: Port device team_slave_1 added [ 1192.820278][T25106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1192.828024][T25106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1192.854905][T25106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1192.874537][T13742] Bluetooth: hci0: command tx timeout [ 1192.960377][T25202] netlink: 186256 bytes leftover after parsing attributes in process `syz.3.4578'. [ 1193.037871][T25106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1193.055231][T25106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1193.121939][T25106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1193.481954][T25202] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1193.489933][T25202] CPU: 0 PID: 25202 Comm: syz.3.4578 Not tainted syzkaller #0 [ 1193.497450][T25202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1193.507549][T25202] Call Trace: [ 1193.510865][T25202] [ 1193.513855][T25202] dump_stack_lvl+0x18c/0x250 [ 1193.518589][T25202] ? show_regs_print_info+0x20/0x20 [ 1193.523929][T25202] ? load_image+0x420/0x420 [ 1193.528495][T25202] sysfs_warn_dup+0x8e/0xa0 [ 1193.533042][T25202] sysfs_do_create_link_sd+0xc0/0x110 [ 1193.538472][T25202] device_add_class_symlinks+0x1cf/0x240 [ 1193.544163][T25202] device_add+0x4f9/0xc40 [ 1193.548543][T25202] wiphy_register+0x1d99/0x2ac0 [ 1193.553480][T25202] ? cfg80211_event_work+0x40/0x40 [ 1193.558630][T25202] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1193.564867][T25202] ? ieee80211_register_hw+0x2d64/0x3cb0 [ 1193.570548][T25202] ieee80211_register_hw+0x2f3d/0x3cb0 [ 1193.576058][T25202] ? ieee80211_register_hw+0xee1/0x3cb0 [ 1193.581623][T25202] ? ieee80211_tasklet_handler+0x20/0x20 [ 1193.587271][T25202] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1193.593193][T25202] ? __debug_object_init+0xec/0x450 [ 1193.598420][T25202] ? __asan_memset+0x22/0x40 [ 1193.603033][T25202] ? __hrtimer_init+0x189/0x270 [ 1193.607909][T25202] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1193.613674][T25202] ? mac80211_hwsim_free+0x220/0x220 [ 1193.618977][T25202] ? rcu_is_watching+0x15/0xb0 [ 1193.623762][T25202] ? kstrndup+0xbd/0x140 [ 1193.628037][T25202] hwsim_new_radio_nl+0xdad/0x1a70 [ 1193.633184][T25202] ? __nla_validate+0x50/0x50 [ 1193.637895][T25202] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1193.644269][T25202] ? __nla_parse+0x40/0x50 [ 1193.648706][T25202] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1193.655068][T25202] genl_family_rcv_msg_doit+0x21a/0x310 [ 1193.660642][T25202] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1193.666562][T25202] ? bpf_lsm_capable+0x9/0x10 [ 1193.671253][T25202] ? security_capable+0x89/0xb0 [ 1193.676130][T25202] genl_rcv_msg+0x611/0x7a0 [ 1193.680661][T25202] ? genl_bind+0x360/0x360 [ 1193.685096][T25202] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1193.691441][T25202] ? ref_tracker_free+0x686/0x830 [ 1193.696477][T25202] ? __kasan_kmalloc_large+0x8b/0xa0 [ 1193.701789][T25202] netlink_rcv_skb+0x235/0x4c0 [ 1193.706571][T25202] ? genl_bind+0x360/0x360 [ 1193.711005][T25202] ? netlink_ack+0x1160/0x1160 [ 1193.715830][T25202] ? __lock_acquire+0x7eb0/0x7eb0 [ 1193.720879][T25202] ? down_read+0x1ac/0x2e0 [ 1193.725314][T25202] genl_rcv+0x28/0x40 [ 1193.729314][T25202] netlink_unicast+0x7b1/0x930 [ 1193.734104][T25202] netlink_sendmsg+0x8d0/0xbf0 [ 1193.738892][T25202] ? netlink_getsockopt+0x590/0x590 [ 1193.744133][T25202] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1193.749701][T25202] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1193.755005][T25202] ? security_socket_sendmsg+0x80/0xa0 [ 1193.760481][T25202] ? netlink_getsockopt+0x590/0x590 [ 1193.765712][T25202] ____sys_sendmsg+0x61b/0x980 [ 1193.770510][T25202] ? __asan_memset+0x22/0x40 [ 1193.775129][T25202] ? __sys_sendmsg_sock+0x30/0x30 [ 1193.780175][T25202] ? __import_iovec+0x5f2/0x850 [ 1193.785165][T25202] ? import_iovec+0x73/0xa0 [ 1193.789695][T25202] ___sys_sendmsg+0x2a6/0x360 [ 1193.794399][T25202] ? __sys_sendmsg+0x2b0/0x2b0 [ 1193.799234][T25202] __se_sys_sendmsg+0x1d0/0x2c0 [ 1193.804110][T25202] ? __x64_sys_sendmsg+0x80/0x80 [ 1193.809088][T25202] ? lockdep_hardirqs_on+0x98/0x150 [ 1193.814306][T25202] do_syscall_64+0x55/0xb0 [ 1193.818733][T25202] ? clear_bhb_loop+0x40/0x90 [ 1193.823424][T25202] ? clear_bhb_loop+0x40/0x90 [ 1193.828113][T25202] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1193.834029][T25202] RIP: 0033:0x7ff19099e559 [ 1193.838467][T25202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1193.858094][T25202] RSP: 002b:00007ff1917f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1193.866547][T25202] RAX: ffffffffffffffda RBX: 00007ff190c26090 RCX: 00007ff19099e559 [ 1193.874536][T25202] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1193.882521][T25202] RBP: 00007ff190a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1193.890499][T25202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1193.898479][T25202] R13: 00007ff190c26128 R14: 00007ff190c26090 R15: 00007ffcec872cc8 [ 1193.906479][T25202] [ 1194.573258][T25106] hsr_slave_0: entered promiscuous mode [ 1194.603849][T25106] hsr_slave_1: entered promiscuous mode [ 1194.941928][T13742] Bluetooth: hci0: command tx timeout [ 1197.062930][T13742] Bluetooth: hci0: command tx timeout [ 1198.824613][T25247] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4586'. [ 1199.518695][T13377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1199.534198][T13377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1199.568385][T13377] bridge0: port 1(batadv_slave_0) entered disabled state [ 1200.529350][T13377] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1201.963248][T13377] team0 (unregistering): Port device team_slave_1 removed [ 1202.019581][T13377] team0 (unregistering): Port device team_slave_0 removed [ 1202.067840][T13377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1202.123041][T13377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1202.413312][T13377] bond0 (unregistering): Released all slaves [ 1202.742133][T25320] netlink: 'syz.5.4599': attribute type 10 has an invalid length. [ 1202.759790][T25320] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4599'. [ 1202.797185][T25320] team0: entered promiscuous mode [ 1202.807358][T25320] team_slave_1: entered promiscuous mode [ 1202.818518][T25320] team0: entered allmulticast mode [ 1202.826160][T25320] team_slave_1: entered allmulticast mode [ 1202.836076][T25320] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1203.163127][T25106] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1203.169489][T25334] FAULT_INJECTION: forcing a failure. [ 1203.169489][T25334] name failslab, interval 1, probability 0, space 0, times 1 [ 1203.196173][T25334] CPU: 0 PID: 25334 Comm: syz.2.4603 Not tainted syzkaller #0 [ 1203.203712][T25334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1203.209878][T25106] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1203.213792][T25334] Call Trace: [ 1203.213804][T25334] [ 1203.213813][T25334] dump_stack_lvl+0x18c/0x250 [ 1203.213845][T25334] ? show_regs_print_info+0x20/0x20 [ 1203.213868][T25334] ? load_image+0x420/0x420 [ 1203.213900][T25334] ? __might_sleep+0xe0/0xe0 [ 1203.213970][T25334] ? __lock_acquire+0x7eb0/0x7eb0 [ 1203.251691][T25334] should_fail_ex+0x394/0x4c0 [ 1203.256426][T25334] should_failslab+0x9/0x20 [ 1203.261076][T25334] slab_pre_alloc_hook+0x59/0x300 [ 1203.266157][T25334] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1203.271996][T25334] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1203.277740][T25334] __kmem_cache_alloc_node+0x53/0x250 [ 1203.283152][T25334] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1203.288884][T25334] __kmalloc+0xa7/0x240 [ 1203.293147][T25334] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1203.298734][T25334] ? tomoyo_domain+0xd6/0x120 [ 1203.303446][T25334] tomoyo_path_number_perm+0x248/0x5e0 [ 1203.308935][T25334] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1203.314602][T25334] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1203.320107][T25334] ? ksys_write+0x1d2/0x260 [ 1203.324689][T25334] ? __fget_files+0x28/0x460 [ 1203.329368][T25334] security_file_ioctl+0x70/0xa0 [ 1203.334348][T25334] __se_sys_ioctl+0x48/0x170 [ 1203.338965][T25334] do_syscall_64+0x55/0xb0 [ 1203.343394][T25334] ? clear_bhb_loop+0x40/0x90 [ 1203.348083][T25334] ? clear_bhb_loop+0x40/0x90 [ 1203.352787][T25334] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1203.358704][T25334] RIP: 0033:0x7f20eed9e559 [ 1203.363139][T25334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1203.382763][T25334] RSP: 002b:00007f20efd18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1203.391193][T25334] RAX: ffffffffffffffda RBX: 00007f20ef025fa0 RCX: 00007f20eed9e559 [ 1203.399172][T25334] RDX: 0000200000000900 RSI: 0000000000008946 RDI: 0000000000000004 [ 1203.407181][T25334] RBP: 00007f20efd18090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.415164][T25334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.423163][T25334] R13: 00007f20ef026038 R14: 00007f20ef025fa0 R15: 00007ffd5b0ea168 [ 1203.431164][T25334] [ 1203.485304][T25106] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1203.520484][T25106] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1203.529039][T25334] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1203.794940][T25106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1203.842535][T25346] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4604'. [ 1204.001381][T25346] team0: Port device bond0 removed [ 1204.011347][T25346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1204.035172][T25346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1204.057596][T25346] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1204.069148][T25346] bond0 (unregistering): Released all slaves [ 1204.119068][T25106] 8021q: adding VLAN 0 to HW filter on device team0 [ 1204.154580][T13402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.161879][T13402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1204.184887][T13402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.192277][T13402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1204.330392][T25106] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1204.381991][T25106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1204.909932][T25106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1204.988800][T25106] veth0_vlan: entered promiscuous mode [ 1205.006743][T25106] veth1_vlan: entered promiscuous mode [ 1205.066614][T25106] veth0_macvtap: entered promiscuous mode [ 1205.080105][T25106] veth1_macvtap: entered promiscuous mode [ 1205.106786][T25106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1205.123371][T25106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1205.138606][T25106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1205.151172][T25106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1205.169493][T25106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.178737][T25106] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.189730][T25106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.199877][T25106] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.357157][T13410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.381824][T13410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.450301][T13397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.478192][T13397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.481562][T25391] netlink: 'syz.5.4610': attribute type 21 has an invalid length. [ 1207.077263][T25426] netlink: 'syz.2.4618': attribute type 21 has an invalid length. [ 1207.108086][T25426] IPv6: Can't replace route, no match found [ 1207.203438][T25432] netlink: 212912 bytes leftover after parsing attributes in process `syz.5.4620'. [ 1207.251929][T25432] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1207.667325][T25446] mac80211_hwsim hwsim45 ..ãc¤±: renamed from wlan1 (while UP) [ 1207.913348][T25457] netlink: 'syz.5.4625': attribute type 3 has an invalid length. [ 1207.935385][T25457] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4625'. [ 1208.021781][T25454] tap0: tun_chr_ioctl cmd 2147767511 [ 1208.983695][T25492] netlink: 'syz.3.4632': attribute type 10 has an invalid length. [ 1209.306641][T25501] netlink: 'syz.2.4633': attribute type 10 has an invalid length. [ 1209.899901][T25509] netlink: 120332 bytes leftover after parsing attributes in process `syz.5.4635'. [ 1210.118892][T25519] netlink: 'syz.1.4637': attribute type 16 has an invalid length. [ 1210.210084][T25519] netlink: 'syz.1.4637': attribute type 3 has an invalid length. [ 1210.374357][T25531] sit0: left promiscuous mode [ 1210.379337][T25519] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4637'. [ 1210.608288][T25530] sit0: entered promiscuous mode [ 1211.894574][T25573] netlink: 'syz.5.4644': attribute type 21 has an invalid length. [ 1211.906082][T25573] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4644'. [ 1212.089749][T25576] sit0: entered promiscuous mode [ 1213.299008][T25613] netlink: 'syz.1.4653': attribute type 2 has an invalid length. [ 1213.308188][T25613] netlink: 'syz.1.4653': attribute type 8 has an invalid length. [ 1213.319141][T25613] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4653'. [ 1214.888038][T25627] netlink: 'syz.2.4656': attribute type 10 has an invalid length. [ 1215.017315][T25627] geneve0: entered promiscuous mode [ 1215.093099][T25627] geneve0: entered allmulticast mode [ 1215.108808][T25627] : (slave geneve0): Enslaving as an active interface with an up link [ 1215.562729][T25649] netlink: 140 bytes leftover after parsing attributes in process `syz.5.4661'. [ 1215.572226][T25649] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4661'. [ 1215.594376][T25649] bond0: (slave bond_slave_0): Releasing backup interface [ 1215.625992][T25649] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1216.013613][T25664] netlink: 'syz.1.4664': attribute type 2 has an invalid length. [ 1216.024368][T25664] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4664'. [ 1216.049191][T25664] netlink: 'syz.1.4664': attribute type 39 has an invalid length. [ 1216.726426][T25665] rxe_eth0 speed is unknown, defaulting to 1000 [ 1217.060493][T25680] syzkaller0: entered promiscuous mode [ 1217.072276][T25680] syzkaller0: entered allmulticast mode [ 1217.538194][T25684] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.4668'. [ 1217.589421][T25684] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1217.613880][T25684] CPU: 1 PID: 25684 Comm: syz.5.4668 Not tainted syzkaller #0 [ 1217.621504][T25684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1217.631646][T25684] Call Trace: [ 1217.635002][T25684] [ 1217.637998][T25684] dump_stack_lvl+0x18c/0x250 [ 1217.642771][T25684] ? show_regs_print_info+0x20/0x20 [ 1217.648075][T25684] ? load_image+0x420/0x420 [ 1217.652703][T25684] sysfs_warn_dup+0x8e/0xa0 [ 1217.657285][T25684] sysfs_do_create_link_sd+0xc0/0x110 [ 1217.662739][T25684] device_add_class_symlinks+0x1cf/0x240 [ 1217.668412][T25684] device_add+0x4f9/0xc40 [ 1217.672807][T25684] wiphy_register+0x1d99/0x2ac0 [ 1217.677825][T25684] ? cfg80211_event_work+0x40/0x40 [ 1217.683523][T25684] ? minstrel_ht_alloc+0x88a/0x990 [ 1217.688757][T25684] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1217.694919][T25684] ieee80211_register_hw+0x2f3d/0x3cb0 [ 1217.700531][T25684] ? ieee80211_register_hw+0xee1/0x3cb0 [ 1217.706214][T25684] ? ieee80211_tasklet_handler+0x20/0x20 [ 1217.711918][T25684] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1217.717885][T25684] ? __debug_object_init+0xec/0x450 [ 1217.723239][T25684] ? __asan_memset+0x22/0x40 [ 1217.727883][T25684] ? __hrtimer_init+0x189/0x270 [ 1217.732804][T25684] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1217.738643][T25684] ? mac80211_hwsim_free+0x220/0x220 [ 1217.743982][T25684] ? rcu_is_watching+0x15/0xb0 [ 1217.748793][T25684] ? kstrndup+0xbd/0x140 [ 1217.753113][T25684] hwsim_new_radio_nl+0xdad/0x1a70 [ 1217.758285][T25684] ? __nla_validate+0x50/0x50 [ 1217.763050][T25684] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1217.769461][T25684] ? __nla_parse+0x40/0x50 [ 1217.773930][T25684] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1217.780332][T25684] genl_family_rcv_msg_doit+0x21a/0x310 [ 1217.785942][T25684] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1217.791915][T25684] ? bpf_lsm_capable+0x9/0x10 [ 1217.796652][T25684] ? security_capable+0x89/0xb0 [ 1217.801566][T25684] genl_rcv_msg+0x611/0x7a0 [ 1217.806135][T25684] ? genl_bind+0x360/0x360 [ 1217.810592][T25684] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1217.816974][T25684] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1217.823603][T25684] ? perf_trace_lock+0xfc/0x3b0 [ 1217.828525][T25684] netlink_rcv_skb+0x235/0x4c0 [ 1217.833341][T25684] ? genl_bind+0x360/0x360 [ 1217.837811][T25684] ? netlink_ack+0x1160/0x1160 [ 1217.842657][T25684] ? __lock_acquire+0x7eb0/0x7eb0 [ 1217.847744][T25684] ? down_read+0x1ac/0x2e0 [ 1217.852212][T25684] genl_rcv+0x28/0x40 [ 1217.856233][T25684] netlink_unicast+0x7b1/0x930 [ 1217.861073][T25684] netlink_sendmsg+0x8d0/0xbf0 [ 1217.865911][T25684] ? netlink_getsockopt+0x590/0x590 [ 1217.871167][T25684] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1217.876760][T25684] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1217.882091][T25684] ? security_socket_sendmsg+0x80/0xa0 [ 1217.887696][T25684] ? netlink_getsockopt+0x590/0x590 [ 1217.892942][T25684] ____sys_sendmsg+0x61b/0x980 [ 1217.897786][T25684] ? __asan_memset+0x22/0x40 [ 1217.902423][T25684] ? __sys_sendmsg_sock+0x30/0x30 [ 1217.907489][T25684] ? __import_iovec+0x5f2/0x850 [ 1217.912415][T25684] ? import_iovec+0x73/0xa0 [ 1217.916992][T25684] ___sys_sendmsg+0x2a6/0x360 [ 1217.921741][T25684] ? __sys_sendmsg+0x2b0/0x2b0 [ 1217.926730][T25684] __se_sys_sendmsg+0x1d0/0x2c0 [ 1217.931635][T25684] ? __x64_sys_sendmsg+0x80/0x80 [ 1217.936674][T25684] ? lockdep_hardirqs_on+0x98/0x150 [ 1217.941927][T25684] do_syscall_64+0x55/0xb0 [ 1217.946383][T25684] ? clear_bhb_loop+0x40/0x90 [ 1217.951107][T25684] ? clear_bhb_loop+0x40/0x90 [ 1217.955842][T25684] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1217.961788][T25684] RIP: 0033:0x7fe20979e559 [ 1217.966249][T25684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.985894][T25684] RSP: 002b:00007fe20a74d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1217.994360][T25684] RAX: ffffffffffffffda RBX: 00007fe209a25fa0 RCX: 00007fe20979e559 [ 1218.002366][T25684] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 000000000000000a [ 1218.010370][T25684] RBP: 00007fe209835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1218.018437][T25684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1218.026487][T25684] R13: 00007fe209a26038 R14: 00007fe209a25fa0 R15: 00007ffe8f992a38 [ 1218.034558][T25684] [ 1218.087678][T25688] netlink: 'syz.2.4669': attribute type 10 has an invalid length. [ 1223.571890][T25753] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4685'. [ 1226.893737][T25784] netlink: 'syz.3.4692': attribute type 29 has an invalid length. [ 1226.942325][T25784] netlink: 'syz.3.4692': attribute type 29 has an invalid length. [ 1226.951363][T25784] netlink: 'syz.3.4692': attribute type 29 has an invalid length. [ 1226.968667][T25784] netlink: 'syz.3.4692': attribute type 29 has an invalid length. [ 1227.162535][T25788] syzkaller0: entered promiscuous mode [ 1227.168095][T25788] syzkaller0: entered allmulticast mode [ 1227.186705][T25795] netlink: 'syz.2.4695': attribute type 9 has an invalid length. [ 1227.191500][T25790] netlink: 'syz.3.4692': attribute type 23 has an invalid length. [ 1227.201812][T25795] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4695'. [ 1227.223372][T25796] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4695'. [ 1227.235593][T25796] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1227.430292][T25784] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4692'. [ 1227.897983][T25814] netlink: 'syz.5.4700': attribute type 1 has an invalid length. [ 1227.941939][T25814] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.4700'. [ 1232.706163][T25870] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4715'. [ 1232.786577][T25875] netlink: 'syz.3.4717': attribute type 1 has an invalid length. [ 1232.809022][T25875] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4717'. [ 1233.111929][T25881] netlink: 'syz.5.4720': attribute type 29 has an invalid length. [ 1233.128171][T25881] netlink: 'syz.5.4720': attribute type 29 has an invalid length. [ 1233.151165][T25881] netlink: 'syz.5.4720': attribute type 29 has an invalid length. [ 1233.169112][T25881] netlink: 'syz.5.4720': attribute type 29 has an invalid length. [ 1234.803892][T25914] netlink: 'syz.3.4729': attribute type 12 has an invalid length. [ 1234.844538][T25914] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4729'. [ 1234.883357][T25915] netlink: 'syz.3.4729': attribute type 12 has an invalid length. [ 1234.922852][T25915] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4729'. [ 1234.980883][T25917] netlink: 'syz.5.4730': attribute type 29 has an invalid length. [ 1235.019655][T25917] netlink: 'syz.5.4730': attribute type 29 has an invalid length. [ 1235.084915][T25919] netlink: 'syz.5.4730': attribute type 29 has an invalid length. [ 1235.677845][T25940] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4736'. [ 1236.185976][T25957] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4740'. [ 1236.825891][T25959] rxe_eth0 speed is unknown, defaulting to 1000 [ 1237.484635][T25989] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.4750'. [ 1237.975081][T26000] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1237.997523][T26000] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1238.016083][T26000] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1238.047337][T26000] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1238.059976][T26000] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1238.072130][T26000] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1238.243820][T25998] rxe_eth0 speed is unknown, defaulting to 1000 [ 1238.916193][T20301] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.027249][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.033844][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.072363][T20301] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.351252][T20301] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.470307][T20301] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.538755][T26030] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4760'. [ 1239.566102][T26031] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.4759'. [ 1239.628602][T25998] chnl_net:caif_netlink_parms(): no params data found [ 1240.108522][T26041] validate_nla: 1 callbacks suppressed [ 1240.108564][T26041] netlink: 'syz.2.4762': attribute type 29 has an invalid length. [ 1240.146046][T26000] Bluetooth: hci4: command tx timeout [ 1240.162332][T25998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.169531][T25998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.177271][T25998] bridge_slave_0: entered allmulticast mode [ 1240.184908][T25998] bridge_slave_0: entered promiscuous mode [ 1240.194390][T25998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.201585][T25998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.208908][T25998] bridge_slave_1: entered allmulticast mode [ 1240.217388][T25998] bridge_slave_1: entered promiscuous mode [ 1240.226717][T26041] netlink: 'syz.2.4762': attribute type 29 has an invalid length. [ 1240.329738][T25998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1240.344474][T26040] netlink: 'syz.2.4762': attribute type 29 has an invalid length. [ 1240.454802][T25998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1240.840488][T25998] team0: Port device team_slave_0 added [ 1240.860793][T25998] team0: Port device team_slave_1 added [ 1241.062660][T25998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1241.069687][T25998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1241.155409][T25998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1241.226755][T25998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1241.246618][T25998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1241.279330][T25998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1241.586086][T25998] hsr_slave_0: entered promiscuous mode [ 1241.607409][T25998] hsr_slave_1: entered promiscuous mode [ 1241.614735][T25998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1241.622759][T25998] Cannot create hsr debugfs directory [ 1241.961474][T26092] netlink: 209820 bytes leftover after parsing attributes in process `syz.5.4769'. [ 1241.979715][T26094] netlink: 'syz.1.4770': attribute type 3 has an invalid length. [ 1242.009234][T26094] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4770'. [ 1242.241927][T26000] Bluetooth: hci4: command tx timeout [ 1242.271477][T26103] netlink: 'syz.5.4779': attribute type 21 has an invalid length. [ 1242.289347][T26103] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4779'. [ 1242.405065][T26106] netlink: 'syz.1.4772': attribute type 29 has an invalid length. [ 1242.444411][T26106] netlink: 'syz.1.4772': attribute type 29 has an invalid length. [ 1242.700462][T26110] netlink: 'syz.5.4779': attribute type 21 has an invalid length. [ 1242.743012][T26110] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4779'. [ 1242.823889][T26113] netlink: 'syz.1.4772': attribute type 29 has an invalid length. [ 1243.489087][T26138] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4777'. [ 1243.976650][T25998] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1244.304721][T26000] Bluetooth: hci4: command tx timeout [ 1244.405856][T25998] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1244.426662][T25998] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1244.501455][T25998] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1245.125734][T25998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1245.216884][T25998] 8021q: adding VLAN 0 to HW filter on device team0 [ 1245.277148][T20286] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.284450][T20286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1245.337389][T20288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.344686][T20288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1245.460378][T20301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1245.491901][T20301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1245.502829][T20301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1245.510292][T20301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1245.550966][T20301] bridge_slave_0: left allmulticast mode [ 1245.582330][T20301] bridge_slave_0: left promiscuous mode [ 1245.589119][T20301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.920834][T20301] veth1_macvtap: left promiscuous mode [ 1245.928865][T20301] veth0_macvtap: left promiscuous mode [ 1246.378606][T26205] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4789'. [ 1246.388954][T26000] Bluetooth: hci4: command tx timeout [ 1246.411930][T26205] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1247.000973][T20301] team0 (unregistering): Port device geneve1 removed [ 1247.904968][T20301] team0 (unregistering): Port device team_slave_1 removed [ 1247.988651][T20301] team0 (unregistering): Port device team_slave_0 removed [ 1248.327617][T20301] team0 (unregistering): Port device veth0_to_bond removed [ 1249.209372][T20301] team0 (unregistering): Port device batadv0 removed [ 1249.441009][T26213] netlink: 'syz.2.4789': attribute type 10 has an invalid length. [ 1249.490676][T26217] netlink: 'syz.2.4789': attribute type 21 has an invalid length. [ 1249.499161][T26217] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4789'. [ 1249.705370][T26234] syzkaller0: entered promiscuous mode [ 1249.710929][T26234] syzkaller0: entered allmulticast mode [ 1249.765364][T26238] syzkaller0: left promiscuous mode [ 1249.770657][T26238] syzkaller0: left allmulticast mode [ 1253.237071][T26283] netlink: 'syz.5.4799': attribute type 21 has an invalid length. [ 1253.341379][T26281] netlink: 'syz.1.4800': attribute type 39 has an invalid length. [ 1253.637890][T26283] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4799'. [ 1253.982868][T26298] netlink: 'syz.1.4801': attribute type 9 has an invalid length. [ 1254.012275][T26298] netlink: 209660 bytes leftover after parsing attributes in process `syz.1.4801'. [ 1254.164399][T25998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1254.175289][T26302] netlink: 'syz.1.4801': attribute type 9 has an invalid length. [ 1254.192655][T26302] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4801'. [ 1254.319351][T25998] veth0_vlan: entered promiscuous mode [ 1254.359980][T25998] veth1_vlan: entered promiscuous mode [ 1254.491483][T26312] netlink: 16054 bytes leftover after parsing attributes in process `syz.5.4802'. [ 1254.667578][T25998] veth0_macvtap: entered promiscuous mode [ 1254.729504][T25998] veth1_macvtap: entered promiscuous mode [ 1254.866156][T26329] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 1254.880022][T26324] pim6reg0: tun_chr_ioctl cmd 2147767521 [ 1254.901229][T26324] pim6reg0: tun_chr_ioctl cmd 1074025681 [ 1254.962114][T25998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.989526][T25998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.016577][T25998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1255.055492][T25998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.082819][T25998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.103461][T25998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1255.125324][T25998] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.152755][T25998] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.179362][T25998] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.201689][T25998] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.547662][T13410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.567989][T13410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.616571][T13374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.636201][T13374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.072657][T26360] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4813'. [ 1257.137787][T26360] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1258.009024][T26374] netlink: 'syz.3.4815': attribute type 21 has an invalid length. [ 1258.094158][T26374] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4815'. [ 1258.537842][T26384] FAULT_INJECTION: forcing a failure. [ 1258.537842][T26384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1258.592216][T26384] CPU: 1 PID: 26384 Comm: syz.5.4817 Not tainted syzkaller #0 [ 1258.599753][T26384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1258.609844][T26384] Call Trace: [ 1258.613151][T26384] [ 1258.616112][T26384] dump_stack_lvl+0x18c/0x250 [ 1258.620836][T26384] ? show_regs_print_info+0x20/0x20 [ 1258.626068][T26384] ? load_image+0x420/0x420 [ 1258.630611][T26384] ? __might_fault+0xaa/0x120 [ 1258.635328][T26384] ? __lock_acquire+0x7eb0/0x7eb0 [ 1258.640429][T26384] should_fail_ex+0x394/0x4c0 [ 1258.645154][T26384] _copy_from_user+0x2f/0xe0 [ 1258.649786][T26384] __sys_bpf+0x23e/0x890 [ 1258.654063][T26384] ? bpf_link_show_fdinfo+0x560/0x560 [ 1258.659488][T26384] ? lock_chain_count+0x20/0x20 [ 1258.664381][T26384] __x64_sys_bpf+0x7c/0x90 [ 1258.668829][T26384] do_syscall_64+0x55/0xb0 [ 1258.673279][T26384] ? clear_bhb_loop+0x40/0x90 [ 1258.677988][T26384] ? clear_bhb_loop+0x40/0x90 [ 1258.682716][T26384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1258.688702][T26384] RIP: 0033:0x7fe20979e559 [ 1258.693153][T26384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1258.712804][T26384] RSP: 002b:00007fe20a72c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1258.721347][T26384] RAX: ffffffffffffffda RBX: 00007fe209a26090 RCX: 00007fe20979e559 [ 1258.729345][T26384] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 1258.737345][T26384] RBP: 00007fe20a72c090 R08: 0000000000000000 R09: 0000000000000000 [ 1258.745352][T26384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1258.753354][T26384] R13: 00007fe209a26128 R14: 00007fe209a26090 R15: 00007ffe8f992a38 [ 1258.761461][T26384] [ 1265.626134][T26436] netlink: 'syz.3.4832': attribute type 10 has an invalid length. [ 1266.546941][T26436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.951150][T26436] team0: Port device batadv0 added [ 1268.842383][T26461] netlink: 'syz.2.4838': attribute type 16 has an invalid length. [ 1268.850296][T26461] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4838'. [ 1269.194371][T26468] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.4839'. [ 1270.327085][T26481] rxe_eth0 speed is unknown, defaulting to 1000 [ 1270.948780][T26509] netlink: 'syz.1.4857': attribute type 5 has an invalid length. [ 1270.978056][T26509] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4857'. [ 1271.017359][T26509] sctp: [Deprecated]: syz.1.4857 (pid 26509) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1271.017359][T26509] Use struct sctp_sack_info instead [ 1273.332586][T26568] netlink: 'syz.1.4868': attribute type 10 has an invalid length. [ 1273.360226][T26568] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4868'. [ 1273.434369][T26568] hsr0: entered promiscuous mode [ 1273.453258][T26568] bridge0: port 3(hsr0) entered blocking state [ 1273.470093][T26568] bridge0: port 3(hsr0) entered disabled state [ 1273.497780][T26568] hsr0: entered allmulticast mode [ 1273.517640][T26568] hsr_slave_0: entered allmulticast mode [ 1273.549159][T26568] hsr_slave_1: entered allmulticast mode [ 1273.723340][T26568] bridge0: port 3(hsr0) entered blocking state [ 1273.731472][T26568] bridge0: port 3(hsr0) entered forwarding state [ 1273.867415][T26575] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4870'. [ 1273.892289][T26575] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1276.337020][T26593] netlink: 'syz.2.4873': attribute type 1 has an invalid length. [ 1276.357836][T26593] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.4873'. [ 1276.769992][T26619] netlink: 'syz.5.4879': attribute type 46 has an invalid length. [ 1276.788593][T26619] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4879'. [ 1276.876444][T26619] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4879'. [ 1276.954003][T26619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1278.858927][T26672] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.4892'. [ 1279.216341][T26678] sctp: [Deprecated]: syz.3.4893 (pid 26678) Use of int in maxseg socket option. [ 1279.216341][T26678] Use struct sctp_assoc_value instead [ 1281.077720][T26713] netlink: 'syz.5.4902': attribute type 10 has an invalid length. [ 1281.103356][T26713] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4902'. [ 1282.352565][T26754] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4912'. [ 1282.388654][T26748] netlink: 'syz.2.4912': attribute type 11 has an invalid length. [ 1282.412050][T26748] netlink: 'syz.2.4912': attribute type 1 has an invalid length. [ 1282.430644][T26748] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.4912'. [ 1283.536850][T26797] netlink: 'syz.5.4923': attribute type 2 has an invalid length. [ 1283.561826][T26797] netlink: 'syz.5.4923': attribute type 8 has an invalid length. [ 1283.593081][T26797] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4923'. [ 1283.944406][T26797] syzkaller0: entered promiscuous mode [ 1283.977228][T26797] syzkaller0: entered allmulticast mode [ 1286.905896][T26813] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4926'. [ 1286.984991][T26822] syzkaller0: entered promiscuous mode [ 1286.990549][T26822] syzkaller0: entered allmulticast mode [ 1287.133710][T26835] sctp: [Deprecated]: syz.2.4930 (pid 26835) Use of int in maxseg socket option. [ 1287.133710][T26835] Use struct sctp_assoc_value instead [ 1287.253506][T26826] rxe_eth0 speed is unknown, defaulting to 1000 [ 1287.858714][T26850] netlink: 'syz.5.4935': attribute type 4 has an invalid length. [ 1291.569954][T26883] rxe_eth0 speed is unknown, defaulting to 1000 [ 1292.440600][T26928] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4961'. [ 1293.242012][T13742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1293.256175][T13742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1293.273701][T13742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1293.283226][T13742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1293.292135][T13742] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1293.300797][T13742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1293.454846][T13393] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.728811][T13393] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.940827][T26945] rxe_eth0 speed is unknown, defaulting to 1000 [ 1293.974705][T26953] delete_channel: no stack [ 1293.994831][T26953] delete_channel: no stack [ 1294.080211][T13393] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.217732][T13393] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.285206][T26966] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.4972'. [ 1294.401606][T26972] FAULT_INJECTION: forcing a failure. [ 1294.401606][T26972] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.423404][T26972] CPU: 1 PID: 26972 Comm: syz.1.4973 Not tainted syzkaller #0 [ 1294.430956][T26972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1294.441087][T26972] Call Trace: [ 1294.444436][T26972] [ 1294.447430][T26972] dump_stack_lvl+0x18c/0x250 [ 1294.452198][T26972] ? show_regs_print_info+0x20/0x20 [ 1294.457470][T26972] ? load_image+0x420/0x420 [ 1294.462148][T26972] ? __might_sleep+0xe0/0xe0 [ 1294.466816][T26972] ? __lock_acquire+0x7eb0/0x7eb0 [ 1294.471928][T26972] should_fail_ex+0x394/0x4c0 [ 1294.476707][T26972] should_failslab+0x9/0x20 [ 1294.481279][T26972] slab_pre_alloc_hook+0x59/0x300 [ 1294.486366][T26972] ? trace_call_bpf+0x5e9/0x6c0 [ 1294.491283][T26972] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1294.497093][T26972] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1294.502981][T26972] __kmem_cache_alloc_node+0x53/0x250 [ 1294.508464][T26972] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1294.514260][T26972] __kmalloc+0xa7/0x240 [ 1294.518510][T26972] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1294.524140][T26972] ? tomoyo_domain+0xd6/0x120 [ 1294.528925][T26972] tomoyo_path_number_perm+0x248/0x5e0 [ 1294.534465][T26972] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1294.540174][T26972] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1294.545726][T26972] ? ksys_write+0x1d2/0x260 [ 1294.550811][T26972] ? __fget_files+0x28/0x460 [ 1294.555552][T26972] security_file_ioctl+0x70/0xa0 [ 1294.560621][T26972] __se_sys_ioctl+0x48/0x170 [ 1294.565316][T26972] do_syscall_64+0x55/0xb0 [ 1294.569799][T26972] ? clear_bhb_loop+0x40/0x90 [ 1294.574546][T26972] ? clear_bhb_loop+0x40/0x90 [ 1294.579325][T26972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1294.585308][T26972] RIP: 0033:0x7f7b0899e559 [ 1294.589888][T26972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1294.609577][T26972] RSP: 002b:00007f7b098e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1294.618051][T26972] RAX: ffffffffffffffda RBX: 00007f7b08c25fa0 RCX: 00007f7b0899e559 [ 1294.626089][T26972] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000004 [ 1294.634109][T26972] RBP: 00007f7b098e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1294.642477][T26972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1294.650497][T26972] R13: 00007f7b08c26038 R14: 00007f7b08c25fa0 R15: 00007ffd2697d198 [ 1294.658639][T26972] [ 1294.803304][T26972] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1294.879076][T26975] netlink: 'syz.3.4975': attribute type 39 has an invalid length. [ 1295.080385][T13393] tipc: Left network mode [ 1295.090583][T26991] netlink: 'syz.1.4976': attribute type 10 has an invalid length. [ 1295.157983][T26991] team0: Port device macvlan0 added [ 1295.165140][T26991] netlink: 'syz.1.4976': attribute type 10 has an invalid length. [ 1295.298466][T26991] netlink: 'syz.1.4976': attribute type 10 has an invalid length. [ 1295.317591][T26991] netlink: 'syz.1.4976': attribute type 10 has an invalid length. [ 1295.348408][T13742] Bluetooth: hci1: command tx timeout [ 1295.426265][T26991] netlink: 'syz.1.4976': attribute type 10 has an invalid length. [ 1295.427378][T27005] netlink: 144316 bytes leftover after parsing attributes in process `syz.5.4980'. [ 1295.454279][T26991] netlink: 'syz.1.4976': attribute type 10 has an invalid length. [ 1295.468198][T26991] netlink: 'syz.1.4976': attribute type 10 has an invalid length. [ 1295.482903][T26991] netlink: 'syz.1.4976': attribute type 10 has an invalid length. [ 1295.571400][T26991] netlink: 'syz.1.4976': attribute type 10 has an invalid length. [ 1295.587860][T26945] chnl_net:caif_netlink_parms(): no params data found [ 1295.872179][T27025] FAULT_INJECTION: forcing a failure. [ 1295.872179][T27025] name failslab, interval 1, probability 0, space 0, times 0 [ 1295.889437][T27025] CPU: 0 PID: 27025 Comm: syz.1.4983 Not tainted syzkaller #0 [ 1295.896967][T27025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1295.907063][T27025] Call Trace: [ 1295.910382][T27025] [ 1295.913353][T27025] dump_stack_lvl+0x18c/0x250 [ 1295.918085][T27025] ? show_regs_print_info+0x20/0x20 [ 1295.923334][T27025] ? load_image+0x420/0x420 [ 1295.927893][T27025] ? __might_sleep+0xe0/0xe0 [ 1295.932539][T27025] ? __lock_acquire+0x7eb0/0x7eb0 [ 1295.937617][T27025] should_fail_ex+0x394/0x4c0 [ 1295.942348][T27025] should_failslab+0x9/0x20 [ 1295.946901][T27025] slab_pre_alloc_hook+0x59/0x300 [ 1295.951973][T27025] ? tomoyo_encode+0x2ad/0x570 [ 1295.956780][T27025] ? tomoyo_encode+0x2ad/0x570 [ 1295.961588][T27025] __kmem_cache_alloc_node+0x53/0x250 [ 1295.967020][T27025] ? tomoyo_encode+0x2ad/0x570 [ 1295.971828][T27025] __kmalloc+0xa7/0x240 [ 1295.976051][T27025] tomoyo_encode+0x2ad/0x570 [ 1295.980688][T27025] tomoyo_realpath_from_path+0x57c/0x5c0 [ 1295.986383][T27025] ? tomoyo_domain+0xd6/0x120 [ 1295.991118][T27025] tomoyo_path_number_perm+0x248/0x5e0 [ 1295.996638][T27025] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1296.002331][T27025] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1296.007861][T27025] ? ksys_write+0x1d2/0x260 [ 1296.012445][T27025] ? __fget_files+0x28/0x460 [ 1296.017101][T27025] security_file_ioctl+0x70/0xa0 [ 1296.022099][T27025] __se_sys_ioctl+0x48/0x170 [ 1296.026775][T27025] do_syscall_64+0x55/0xb0 [ 1296.031239][T27025] ? clear_bhb_loop+0x40/0x90 [ 1296.036009][T27025] ? clear_bhb_loop+0x40/0x90 [ 1296.040740][T27025] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1296.046779][T27025] RIP: 0033:0x7f7b0899e559 [ 1296.051240][T27025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1296.070900][T27025] RSP: 002b:00007f7b098e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1296.079372][T27025] RAX: ffffffffffffffda RBX: 00007f7b08c25fa0 RCX: 00007f7b0899e559 [ 1296.087397][T27025] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000004 [ 1296.095516][T27025] RBP: 00007f7b098e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1296.103556][T27025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1296.111583][T27025] R13: 00007f7b08c26038 R14: 00007f7b08c25fa0 R15: 00007ffd2697d198 [ 1296.119624][T27025] [ 1296.137690][T27025] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1296.444962][T26945] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.478079][T26945] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.498308][T26945] bridge_slave_0: entered allmulticast mode [ 1296.510124][T26945] bridge_slave_0: entered promiscuous mode [ 1296.519162][T26945] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.526752][T26945] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.534161][T26945] bridge_slave_1: entered allmulticast mode [ 1296.541845][T26945] bridge_slave_1: entered promiscuous mode [ 1296.626534][T13393] gretap0 (unregistering): left allmulticast mode [ 1296.640952][T13393] gretap0 (unregistering): left promiscuous mode [ 1296.659290][T13393] Ÿë: port 1(gretap0) entered disabled state [ 1296.690661][T26945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1296.692671][T27048] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.4989'. [ 1296.770807][T26945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1296.938589][T26945] team0: Port device team_slave_0 added [ 1297.049174][T26945] team0: Port device team_slave_1 added [ 1297.088096][T27060] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4992'. [ 1297.137655][T26945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1297.172229][T26945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1297.249677][T26945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1297.322865][T26945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1297.329887][T26945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1297.359765][T26945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1297.423871][T13742] Bluetooth: hci1: command tx timeout [ 1297.498407][T26945] hsr_slave_0: entered promiscuous mode [ 1297.565781][T26945] hsr_slave_1: entered promiscuous mode [ 1297.591965][T26945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1297.619981][T26945] Cannot create hsr debugfs directory [ 1297.933709][T27083] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.4998'. [ 1298.466729][T27094] syzkaller0: entered promiscuous mode [ 1298.509941][T27094] syzkaller0: entered allmulticast mode [ 1298.606101][T27107] sit0: entered allmulticast mode [ 1298.657617][T27096] sit0: entered promiscuous mode [ 1298.798462][T27105] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.5002'. [ 1298.846219][T27105] openvswitch: netlink: Flow key attr not present in new flow. [ 1299.502115][T13742] Bluetooth: hci1: command tx timeout [ 1300.470814][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.477303][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.529619][T27117] validate_nla: 27 callbacks suppressed [ 1300.529659][T27117] netlink: 'syz.3.5005': attribute type 16 has an invalid length. [ 1300.571847][T27117] netlink: 'syz.3.5005': attribute type 3 has an invalid length. [ 1300.590439][T27117] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5005'. [ 1301.587268][T13742] Bluetooth: hci1: command tx timeout [ 1304.094790][T27156] netlink: 'syz.5.5014': attribute type 21 has an invalid length. [ 1304.247509][T27157] netlink: 'syz.5.5014': attribute type 10 has an invalid length. [ 1304.309716][T27157] geneve0: entered promiscuous mode [ 1304.350705][T27157] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1304.925543][T26945] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1305.014353][T26945] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1305.055635][T26945] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1305.134870][T26945] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1305.420182][T13393] veth1_vlan: left allmulticast mode [ 1305.435695][T13393] veth1_vlan: left promiscuous mode [ 1306.151610][T13393] geneve1 (unregistering): left promiscuous mode [ 1306.169644][T13393] geneve1 (unregistering): left allmulticast mode [ 1306.194210][T13393] team0 (unregistering): Port device geneve1 removed [ 1306.290335][T13393]  (unregistering): (slave geneve0): Releasing backup interface [ 1306.306690][T13393] geneve0 (unregistering): left allmulticast mode [ 1306.458959][T13393] macvlan1 (unregistering): left promiscuous mode [ 1306.468144][T13393] team0 (unregistering): Port device macvlan1 removed [ 1306.932617][T13393] team_slave_1 (unregistering): left promiscuous mode [ 1306.939518][T13393] team_slave_1 (unregistering): left allmulticast mode [ 1306.949904][T13393] team0 (unregistering): Port device team_slave_1 removed [ 1306.999509][T13393] team_slave_0 (unregistering): left promiscuous mode [ 1307.008345][T13393] team_slave_0 (unregistering): left allmulticast mode [ 1307.016536][T13393] team0 (unregistering): Port device team_slave_0 removed [ 1307.065929][T13393]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1307.078865][T13393] bond_slave_1 (unregistering): left promiscuous mode [ 1307.085775][T13393] bond_slave_1 (unregistering): left allmulticast mode [ 1307.416146][T13393]  (unregistering): left promiscuous mode [ 1307.422169][T13393]  (unregistering): left allmulticast mode [ 1307.429904][T13393] team0 (unregistering): Port device  removed [ 1307.475818][T13393]  (unregistering): Released all slaves [ 1307.516953][T27183] netlink: 'syz.5.5020': attribute type 39 has an invalid length. [ 1307.813903][T26945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1307.993902][T26945] 8021q: adding VLAN 0 to HW filter on device team0 [ 1308.029173][T13389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.036392][T13389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1308.089243][T13389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.096506][T13389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.248844][T26945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1309.215709][T27261] netlink: 'syz.3.5030': attribute type 21 has an invalid length. [ 1309.267158][T26945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1309.597992][T26945] veth0_vlan: entered promiscuous mode [ 1309.642443][T26945] veth1_vlan: entered promiscuous mode [ 1309.715866][T27278] mac80211_hwsim hwsim83 wlan0: entered promiscuous mode [ 1309.744167][T27278] mac80211_hwsim hwsim83 wlan0: entered allmulticast mode [ 1309.828324][T26945] veth0_macvtap: entered promiscuous mode [ 1309.867325][T26945] veth1_macvtap: entered promiscuous mode [ 1309.922738][T26945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.951875][T26945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.972158][T26945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.998466][T26945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.020784][T26945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1310.062197][T26945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1310.090101][T26945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.105712][T26945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1310.121954][T26945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.148031][T26945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1310.179786][T26945] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.207376][T26945] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.238243][T26945] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.260987][T26945] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.578544][T13393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.602450][T13393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.811646][T13381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.841782][T13381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.413147][T27319] netlink: 'syz.2.4962': attribute type 10 has an invalid length. [ 1311.445345][T27319] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4962'. [ 1311.460385][T27319] dummy0: entered promiscuous mode [ 1311.466540][T27319] dummy0: entered allmulticast mode [ 1311.475616][T27319] bridge0: port 3(dummy0) entered blocking state [ 1311.483394][T27319] bridge0: port 3(dummy0) entered disabled state [ 1311.506937][T27319] bridge0: port 3(dummy0) entered blocking state [ 1311.513805][T27319] bridge0: port 3(dummy0) entered forwarding state [ 1311.541044][T27329] netlink: 'syz.5.5040': attribute type 13 has an invalid length. [ 1311.575086][T27329] netlink: 'syz.5.5040': attribute type 58 has an invalid length. [ 1311.598074][T27329] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5040'. [ 1311.930188][T27349] netlink: 'syz.2.5045': attribute type 3 has an invalid length. [ 1311.979947][T27349] netlink: 'syz.2.5045': attribute type 1 has an invalid length. [ 1312.009331][T27349] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.5045'. [ 1312.785548][T26000] Bluetooth: hci0: command 0x0406 tx timeout [ 1313.171367][T27343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1313.570561][T27380] netlink: 'syz.3.5048': attribute type 11 has an invalid length. [ 1313.582368][T27380] netlink: 'syz.3.5048': attribute type 1 has an invalid length. [ 1313.617186][T27380] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.5048'. [ 1314.111344][T27387] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5052'. [ 1314.369078][T27397] netlink: 'syz.5.5054': attribute type 10 has an invalid length. [ 1314.386223][T27397] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5054'. [ 1314.672188][T27409] delete_channel: no stack [ 1314.680195][T27409] delete_channel: no stack [ 1314.719060][T27410] netlink: 134780 bytes leftover after parsing attributes in process `syz.5.5058'. [ 1314.740409][T27408] lo: entered allmulticast mode [ 1314.781342][T27408] lo: entered promiscuous mode [ 1314.799064][T27408] lo: left allmulticast mode [ 1315.071574][T27421] netlink: 'syz.1.5062': attribute type 21 has an invalid length. [ 1315.240083][T27429] sit0: left promiscuous mode [ 1315.768473][T27437] netlink: 171444 bytes leftover after parsing attributes in process `syz.3.5064'. [ 1316.554434][T27456] netlink: 'syz.1.5067': attribute type 10 has an invalid length. [ 1316.592914][T27456] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5067'. [ 1316.622422][T27456] dummy0: entered promiscuous mode [ 1316.627629][T27456] dummy0: entered allmulticast mode [ 1316.663006][T27456] bridge0: port 4(dummy0) entered blocking state [ 1316.678565][T27456] bridge0: port 4(dummy0) entered disabled state [ 1316.751391][T27456] bridge0: port 4(dummy0) entered blocking state [ 1316.758008][T27456] bridge0: port 4(dummy0) entered forwarding state [ 1317.067411][T27469] netlink: 'syz.3.5070': attribute type 21 has an invalid length. [ 1317.092514][T27469] netlink: 'syz.3.5070': attribute type 1 has an invalid length. [ 1317.116072][T27469] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5070'. [ 1318.084142][T27488] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5078'. [ 1318.409798][T27503] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5080'. [ 1318.451934][T27503] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5080'. [ 1318.487155][T27496] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5080'. [ 1318.507753][T27500] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5080'. [ 1319.628978][T27499] rxe_eth0 speed is unknown, defaulting to 1000 [ 1320.134416][T27538] netlink: 151092 bytes leftover after parsing attributes in process `syz.5.5091'. [ 1321.048174][T27545] netlink: 140 bytes leftover after parsing attributes in process `syz.5.5093'. [ 1322.630650][T27578] can: request_module (can-proto-3) failed. [ 1325.329227][T27610] netlink: 'syz.5.5108': attribute type 39 has an invalid length. [ 1325.856778][T27621] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5112'. [ 1326.398074][T27637] netlink: 'syz.5.5117': attribute type 10 has an invalid length. [ 1326.406915][T27637] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.5117'. [ 1327.399120][T27647] Â: renamed from ip6gretap0 (while UP) [ 1327.600409][T27635] rxe_eth0 speed is unknown, defaulting to 1000 [ 1328.117931][T27662] netlink: 'syz.2.5124': attribute type 10 has an invalid length. [ 1328.563751][T27662] team0: Device gre0 is of different type [ 1330.590156][T27717] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5135'. [ 1330.616335][T27717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1331.158477][T27737] netlink: 'syz.2.5139': attribute type 39 has an invalid length. [ 1335.582108][T27798] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5151'. [ 1335.813852][T27804] tun0: tun_chr_ioctl cmd 1074812117 [ 1339.206851][T27815] rxe_eth0 speed is unknown, defaulting to 1000 [ 1340.484065][T27852] delete_channel: no stack [ 1341.916315][T27869] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5168'. [ 1342.192606][T27873] syzkaller0: entered promiscuous mode [ 1342.225615][T27873] syzkaller0: entered allmulticast mode [ 1343.042033][T27885] netlink: 'syz.3.5171': attribute type 21 has an invalid length. [ 1343.069045][T27885] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5171'. [ 1343.335434][T27890] sit0: entered allmulticast mode [ 1343.406532][T27894] ¥: port 1(team0) entered blocking state [ 1343.413009][T27894] ¥: port 1(team0) entered disabled state [ 1343.432625][T27894] team0: entered allmulticast mode [ 1343.440926][T27894] team_slave_0: entered allmulticast mode [ 1343.452082][T27894] team_slave_1: entered allmulticast mode [ 1343.471926][T27894] macvlan0: entered allmulticast mode [ 1343.481432][T27894] team0: entered promiscuous mode [ 1343.501958][T27894] team_slave_0: entered promiscuous mode [ 1343.508084][T27894] team_slave_1: entered promiscuous mode [ 1343.520495][T27894] macvlan0: entered promiscuous mode [ 1343.633480][T27909] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5176'. [ 1343.648096][T27909] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5176'. [ 1343.660960][T27909] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5176'. [ 1343.675451][T27909] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5176'. [ 1343.747924][T27912] netlink: 'syz.5.5179': attribute type 1 has an invalid length. [ 1343.802208][T27912] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.5179'. [ 1343.810974][T27916] netlink: 'syz.5.5179': attribute type 1 has an invalid length. [ 1343.841298][T27916] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.5179'. [ 1345.304538][T27968] netlink: 'syz.3.5190': attribute type 4 has an invalid length. [ 1345.312598][T27968] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5190'. [ 1345.556645][T27981] netlink: 'syz.3.5194': attribute type 11 has an invalid length. [ 1345.565075][T27981] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5194'. [ 1345.797648][T27987] netlink: 'syz.1.5195': attribute type 10 has an invalid length. [ 1345.921284][T27995] netlink: 'syz.2.5198': attribute type 1 has an invalid length. [ 1345.946897][T27987] caif0: entered promiscuous mode [ 1345.953201][T27987] caif0: entered allmulticast mode [ 1345.958388][T27987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1346.667188][T28022] netlink: 'syz.5.5205': attribute type 10 has an invalid length. [ 1346.800938][T28027] lo: entered allmulticast mode [ 1347.175254][T28035] netlink: 'syz.3.5209': attribute type 3 has an invalid length. [ 1347.216559][T28037] netlink: 'syz.1.5210': attribute type 1 has an invalid length. [ 1347.232358][T28035] __nla_validate_parse: 9 callbacks suppressed [ 1347.232378][T28035] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.5209'. [ 1347.240389][T28037] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.5210'. [ 1347.680652][T28060] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5217'. [ 1347.716467][T28060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1348.706013][T28080] netlink: 'syz.1.5226': attribute type 2 has an invalid length. [ 1349.673146][T28093] netlink: 'syz.2.5230': attribute type 1 has an invalid length. [ 1349.681092][T28093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5230'. [ 1349.874459][T28106] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1349.881804][T28106] IPv6: NLM_F_CREATE should be set when creating new route [ 1349.889485][T28106] IPv6: NLM_F_CREATE should be set when creating new route [ 1349.896881][T28106] IPv6: NLM_F_CREATE should be set when creating new route [ 1349.962870][T28104] netlink: 'syz.1.5232': attribute type 9 has an invalid length. [ 1349.973207][T28104] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5232'. [ 1352.032815][T28111] rxe_eth0 speed is unknown, defaulting to 1000 [ 1352.409333][T28150] netlink: 'syz.2.5246': attribute type 21 has an invalid length. [ 1352.540971][T28150] netlink: 'syz.2.5246': attribute type 6 has an invalid length. [ 1352.667203][T28150] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5246'. [ 1352.842000][T28152] netlink: 'syz.1.5247': attribute type 10 has an invalid length. [ 1353.136928][T28163] netlink: 'syz.3.5248': attribute type 9 has an invalid length. [ 1353.147371][T28152] geneve1: entered promiscuous mode [ 1353.168106][T28152] geneve1: entered allmulticast mode [ 1353.175842][T28163] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5248'. [ 1353.188051][T28152] team0: Port device geneve1 added [ 1353.206975][T28156] netlink: 'syz.2.5246': attribute type 21 has an invalid length. [ 1353.215531][T28156] netlink: 'syz.2.5246': attribute type 6 has an invalid length. [ 1353.238335][T28156] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5246'. [ 1353.682105][T28167] netlink: 'syz.2.5250': attribute type 25 has an invalid length. [ 1353.797943][T28176] validate_nla: 1 callbacks suppressed [ 1353.797984][T28176] netlink: 'syz.3.5252': attribute type 2 has an invalid length. [ 1355.222145][T28198] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.5256'. [ 1355.959180][T28216] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5262'. [ 1356.079026][T28219] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5262'. [ 1356.101772][T28219] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5262'. [ 1356.139562][T28216] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5262'. [ 1356.231926][T28223] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5264'. [ 1356.664663][T28228] netlink: 'syz.3.5266': attribute type 2 has an invalid length. [ 1357.274464][T28229] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.5265'. [ 1358.108262][T28232] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5265'. [ 1358.137195][T28234] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5269'. [ 1358.152198][T28234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1358.895567][T28256] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5276'. [ 1360.609624][T28286] Ÿë: port 1(hsr_slave_0) entered blocking state [ 1360.626356][T28286] Ÿë: port 1(hsr_slave_0) entered disabled state [ 1361.429534][T28302] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5287'. [ 1361.914046][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.920485][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.990100][T28313] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5289'. [ 1363.989380][T26000] Bluetooth: hci4: command 0x0406 tx timeout [ 1364.502347][T28325] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5292'. [ 1364.515412][T28325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1364.532544][T28321] netlink: 'syz.5.5292': attribute type 10 has an invalid length. [ 1364.553591][T28321] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5292'. [ 1364.577306][T28321] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1365.236447][T28344] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.5298'. [ 1365.386319][T28348] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5299'. [ 1365.692203][T28352] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5298'. [ 1366.572009][T28371] netlink: 'syz.1.5304': attribute type 4 has an invalid length. [ 1366.601610][T28371] netlink: 'syz.1.5304': attribute type 16 has an invalid length. [ 1366.610007][T28371] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5304'. [ 1366.982125][T28378] netlink: 'syz.2.5307': attribute type 27 has an invalid length. [ 1367.585134][T28381] bridge0: port 4(dummy0) entered disabled state [ 1367.690074][T28391] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.5310'. [ 1367.721813][T28381] hsr0: left allmulticast mode [ 1367.726650][T28381] hsr_slave_0: left allmulticast mode [ 1367.737471][T28381] hsr_slave_1: left allmulticast mode [ 1367.747467][T28381] bridge0: port 3(hsr0) entered disabled state [ 1367.764024][T28381] bridge_slave_1: left allmulticast mode [ 1367.770021][T28381] bridge_slave_1: left promiscuous mode [ 1367.780629][T28381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.792985][T28390] netlink: 3143 bytes leftover after parsing attributes in process `syz.2.5310'. [ 1367.826722][T28381] bridge_slave_0: left allmulticast mode [ 1367.837568][T28381] bridge_slave_0: left promiscuous mode [ 1367.843905][T28381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.958560][T28385] netlink: 'syz.5.5309': attribute type 21 has an invalid length. [ 1367.967092][T28358] rxe_eth0 speed is unknown, defaulting to 1000 [ 1367.978939][T28388] netlink: 16182 bytes leftover after parsing attributes in process `syz.2.5310'. [ 1368.071385][T28389] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5310'. [ 1368.614300][T28396] can: request_module (can-proto-0) failed. [ 1368.889259][T28407] netlink: 'syz.2.5313': attribute type 3 has an invalid length. [ 1369.613485][T28383] rxe_eth0 speed is unknown, defaulting to 1000 [ 1370.176807][T28425] __nla_validate_parse: 1 callbacks suppressed [ 1370.176828][T28425] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.5319'. [ 1370.906954][T28431] netlink: 'syz.2.5320': attribute type 33 has an invalid length. [ 1370.931464][T28431] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5320'. [ 1370.971458][T13389] bridge0: port 3(dummy0) entered disabled state [ 1372.192533][T28448] netlink: 'syz.5.5333': attribute type 39 has an invalid length. [ 1372.420084][T28448] hsr_slave_1 (unregistering): left promiscuous mode [ 1372.610602][T28461] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5328'. [ 1372.629519][T28459] netlink: 'syz.1.5328': attribute type 12 has an invalid length. [ 1372.639850][T28459] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5328'. [ 1372.709670][T28466] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5329'. [ 1373.043597][T28477] netlink: 207684 bytes leftover after parsing attributes in process `syz.2.5332'. [ 1373.058208][T28477] netlink: 'syz.2.5332': attribute type 1 has an invalid length. [ 1373.066377][T28477] netlink: 'syz.2.5332': attribute type 2 has an invalid length. [ 1373.350064][T28478] rxe_eth0 speed is unknown, defaulting to 1000 [ 1374.440414][T28506] netlink: 'syz.2.5343': attribute type 1 has an invalid length. [ 1374.449261][T28506] netlink: 'syz.2.5343': attribute type 3 has an invalid length. [ 1374.467359][T28506] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5343'. [ 1374.609299][T28506] netlink: 'syz.2.5343': attribute type 21 has an invalid length. [ 1374.636045][T28506] netlink: 'syz.2.5343': attribute type 4 has an invalid length. [ 1374.654774][T28506] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5343'. [ 1375.398374][T28522] netlink: 'syz.5.5345': attribute type 10 has an invalid length. [ 1375.640123][T28527] syz_tun: entered promiscuous mode [ 1375.878941][T28527] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1375.969606][T28529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1375.984775][T28529] team0: Port device bond0 added [ 1376.383033][T28537] validate_nla: 2 callbacks suppressed [ 1376.383051][T28537] netlink: 'syz.3.5350': attribute type 29 has an invalid length. [ 1376.421473][T28537] netlink: 'syz.3.5350': attribute type 29 has an invalid length. [ 1376.444565][T28539] netlink: 'syz.3.5350': attribute type 29 has an invalid length. [ 1376.460087][T28537] netlink: 'syz.3.5350': attribute type 29 has an invalid length. [ 1376.474912][T28537] netlink: 'syz.3.5350': attribute type 29 has an invalid length. [ 1376.484901][T28537] netlink: 'syz.3.5350': attribute type 29 has an invalid length. [ 1379.868454][T28558] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5354'. [ 1379.878049][T28557] netlink: 'syz.3.5354': attribute type 21 has an invalid length. [ 1379.909695][T28557] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5354'. [ 1380.282634][T28572] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.5358'. [ 1381.062461][T28583] netlink: 'syz.5.5360': attribute type 10 has an invalid length. [ 1381.070367][T28583] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5360'. [ 1381.088055][T28583] netlink: 'syz.5.5360': attribute type 10 has an invalid length. [ 1381.103819][T28583] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5360'. [ 1381.273290][T28594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5362'. [ 1381.377412][T28598] netlink: 'syz.3.5364': attribute type 16 has an invalid length. [ 1381.385492][T28598] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5364'. [ 1381.955327][T28605] rxe_eth0 speed is unknown, defaulting to 1000 [ 1382.513935][T28625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5370'. [ 1382.688450][T28615] rxe_eth0 speed is unknown, defaulting to 1000 [ 1382.697670][T28625] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5370'. [ 1382.930604][T28628] syz.1.5371[28628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1382.930876][T28628] syz.1.5371[28628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1382.987549][T28613] rxe_eth0 speed is unknown, defaulting to 1000 [ 1384.490659][T28645] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.5378'. [ 1385.221324][T28670] netlink: 'syz.3.5383': attribute type 46 has an invalid length. [ 1385.236298][T28670] __nla_validate_parse: 1 callbacks suppressed [ 1385.236316][T28670] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5383'. [ 1385.411358][T28677] netlink: 'syz.3.5385': attribute type 49 has an invalid length. [ 1385.454241][T28677] netlink: 'syz.3.5385': attribute type 10 has an invalid length. [ 1385.514966][T28677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1385.542516][T28677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1385.578970][T28677] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1385.735273][T28679] netlink: 'syz.5.5387': attribute type 10 has an invalid length. [ 1386.036729][T28693] netlink: 'syz.3.5392': attribute type 3 has an invalid length. [ 1386.076928][T28693] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5392'. [ 1386.086838][T28694] netlink: 'syz.3.5392': attribute type 3 has an invalid length. [ 1386.127501][T28694] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5392'. [ 1386.268974][T28695] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5392'. [ 1386.311905][T28695] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5392'. [ 1386.371876][T28693] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5392'. [ 1386.383847][T28694] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5392'. [ 1386.821042][T28715] netlink: 'syz.1.5398': attribute type 1 has an invalid length. [ 1386.841865][T28715] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.5398'. [ 1386.861500][T26000] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1386.885618][T26000] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1386.902080][T26000] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1386.910274][T26000] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1386.918206][T26000] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1386.933399][T26000] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1387.040967][T13389] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.068492][T28722] netlink: 'syz.2.5401': attribute type 6 has an invalid length. [ 1387.077637][T28722] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5401'. [ 1387.190308][T28727] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.5402'. [ 1387.191267][T13389] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.288446][T28716] rxe_eth0 speed is unknown, defaulting to 1000 [ 1387.335645][T28733] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1387.395764][T13389] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.580970][T13389] netdevsim netdevsim5 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.513451][T28744] syzkaller0: entered promiscuous mode [ 1388.576088][T28748] hsr_slave_0: left promiscuous mode [ 1388.595354][T28748] hsr_slave_1: left promiscuous mode [ 1389.052120][T26000] Bluetooth: hci2: command tx timeout [ 1390.122270][T28756] netlink: 'syz.3.5409': attribute type 27 has an invalid length. [ 1390.331007][T28759] __nla_validate_parse: 4 callbacks suppressed [ 1390.331024][T28759] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5411'. [ 1390.389561][T28761] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5411'. [ 1390.785482][T28772] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5412'. [ 1390.810879][T28767] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5412'. [ 1390.995983][T28776] syzkaller0: entered allmulticast mode [ 1391.102061][T26000] Bluetooth: hci2: command tx timeout [ 1391.159696][T28716] chnl_net:caif_netlink_parms(): no params data found [ 1391.251355][T28776] can: request_module (can-proto-4) failed. [ 1392.339244][T28716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.347658][T28716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.355133][T28716] bridge_slave_0: entered allmulticast mode [ 1392.363533][T28716] bridge_slave_0: entered promiscuous mode [ 1392.638771][T28716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.649089][T28716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.671088][T28716] bridge_slave_1: entered allmulticast mode [ 1392.687259][T28716] bridge_slave_1: entered promiscuous mode [ 1392.759509][T28820] -1: renamed from syzkaller0 [ 1392.874576][T28850] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5425'. [ 1393.188871][T26000] Bluetooth: hci2: command tx timeout [ 1395.088442][T28851] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5425'. [ 1395.108121][T28716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1395.144598][T28716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1395.264370][T26000] Bluetooth: hci2: command tx timeout [ 1395.414867][T28716] team0: Port device team_slave_0 added [ 1395.445613][T26000] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 1395.473738][T28716] team0: Port device team_slave_1 added [ 1395.705755][T28716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1395.713360][T28716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1395.771730][T28716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1395.798987][T28884] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.5430'. [ 1395.879437][T28716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1395.886687][T28716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1395.942319][T28716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1396.204561][T28905] netlink: 'syz.2.5435': attribute type 10 has an invalid length. [ 1396.215174][T28905] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5435'. [ 1396.235296][T28905] ipvlan1: entered promiscuous mode [ 1396.254753][T28905] ipvlan1: entered allmulticast mode [ 1396.271950][T28905] veth0_vlan: entered allmulticast mode [ 1396.288099][T28905] bridge0: port 4(ipvlan1) entered blocking state [ 1396.301613][T28905] bridge0: port 4(ipvlan1) entered disabled state [ 1396.319162][T28905] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1396.359921][T28716] hsr_slave_0: entered promiscuous mode [ 1396.367612][T28716] hsr_slave_1: entered promiscuous mode [ 1396.729765][T13389] hsr_slave_0: left promiscuous mode [ 1397.024350][T13389] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1397.622607][T13389] team_slave_1 (unregistering): left promiscuous mode [ 1397.630448][T13389] team_slave_1 (unregistering): left allmulticast mode [ 1397.644507][T13389] team0 (unregistering): Port device team_slave_1 removed [ 1397.797634][T13389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1397.915403][T13389] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1398.208773][T13389] bond0 (unregistering): Released all slaves [ 1398.624889][T26000] Bluetooth: hci1: unexpected subevent 0x06 length: 150 > 10 [ 1398.636636][T28944] netlink: 191644 bytes leftover after parsing attributes in process `syz.1.5440'. [ 1398.766511][T28950] netlink: 'syz.1.5440': attribute type 27 has an invalid length. [ 1398.782593][T28950] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5440'. [ 1398.880657][T28949] netlink: 'syz.1.5440': attribute type 21 has an invalid length. [ 1398.909467][T28952] netlink: 'syz.3.5442': attribute type 29 has an invalid length. [ 1398.961868][T28949] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5440'. [ 1399.086773][T28952] netlink: 'syz.3.5442': attribute type 29 has an invalid length. [ 1399.970565][T28716] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1400.029445][T28716] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1400.055154][T28716] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1400.089225][T28716] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1400.367900][T28716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1400.454019][T29002] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5451'. [ 1400.456243][T28716] 8021q: adding VLAN 0 to HW filter on device team0 [ 1400.514027][T13365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.521278][T13365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1400.547110][T29002] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5451'. [ 1400.558828][T13365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.566035][T13365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1400.701858][T26000] Bluetooth: hci1: command tx timeout [ 1401.617279][T28716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1401.814010][T29048] netlink: 'syz.1.5457': attribute type 23 has an invalid length. [ 1402.101245][T29056] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5458'. [ 1402.131391][T29056] openvswitch: netlink: Flow key attribute not present in set flow. [ 1402.525567][T28716] veth0_vlan: entered promiscuous mode [ 1402.598095][T28716] veth1_vlan: entered promiscuous mode [ 1402.843471][T28716] veth0_macvtap: entered promiscuous mode [ 1402.879110][T28716] veth1_macvtap: entered promiscuous mode [ 1402.964824][T28716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1403.022881][T28716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.043643][T28716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1403.076866][T28716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.090668][T28716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1403.132177][T28716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1403.181777][T28716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.205825][T28716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1403.234733][T28716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.263919][T28716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1403.307688][T28716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.336654][T28716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1403.377928][T28716] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.399831][T28716] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.442059][T28716] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.468021][T28716] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.764037][T13377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.807159][T13377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.899976][T13377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.943794][T13377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1404.339731][T29114] netlink: 'syz.1.5468': attribute type 21 has an invalid length. [ 1404.354026][T29114] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5468'. [ 1404.902876][T29129] -1: renamed from syzkaller0 [ 1405.268321][T29135] netlink: 'syz.1.5472': attribute type 3 has an invalid length. [ 1405.362460][T29137] netlink: 'syz.1.5472': attribute type 3 has an invalid length. [ 1405.371786][T29135] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5472'. [ 1405.410938][T29137] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5472'. [ 1405.469368][T29134] netlink: 'syz.1.5472': attribute type 2 has an invalid length. [ 1405.509155][T29134] netlink: 'syz.1.5472': attribute type 11 has an invalid length. [ 1405.540278][T29134] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5472'. [ 1405.859780][T29151] netlink: 'syz.2.5476': attribute type 27 has an invalid length. [ 1405.897982][T29151] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5476'. [ 1406.639844][T29174] syzkaller0: mtu greater than device maximum [ 1407.206715][T29197] netlink: 'syz.2.5484': attribute type 10 has an invalid length. [ 1407.252495][T29197] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5484'. [ 1407.346630][T29197] batman_adv: batadv0: Adding interface: veth0_vlan [ 1407.361948][T29197] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1407.429216][T29197] batman_adv: batadv0: Interface activated: veth0_vlan [ 1407.782333][T29223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5489'. [ 1408.078522][T29224] sit0: entered allmulticast mode [ 1408.193863][T29230] sit0: entered promiscuous mode [ 1411.300511][T29334] syzkaller0: entered promiscuous mode [ 1411.331798][T29334] syzkaller0: entered allmulticast mode [ 1411.524884][T29345] netlink: 'syz.2.5514': attribute type 2 has an invalid length. [ 1411.566622][T29345] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5514'. [ 1411.643095][T29339] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5512'. [ 1411.754943][T29344] wg2: entered promiscuous mode [ 1411.775401][T29344] wg2: entered allmulticast mode [ 1412.059809][T29355] netlink: 'syz.3.5517': attribute type 10 has an invalid length. [ 1412.087657][T29355] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5517'. [ 1412.160794][T29360] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5518'. [ 1414.860677][T29385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1414.886691][T29391] cgroup: fork rejected by pids controller in /syz5 [ 1415.002955][T29390] netlink: 'syz.3.5525': attribute type 21 has an invalid length. [ 1416.376050][T29425] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.5536'. [ 1416.454160][T29425] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1416.487860][T29425] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1416.564269][T13742] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1416.575038][T13742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1416.585804][T13742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1416.595066][T13742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1416.603015][T13742] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1416.610470][T13742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1416.657692][T29426] rxe_eth0 speed is unknown, defaulting to 1000 [ 1416.801406][T29430] netlink: 'syz.2.5537': attribute type 10 has an invalid length. [ 1417.552491][T29426] chnl_net:caif_netlink_parms(): no params data found [ 1417.726605][T29426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.735081][T29426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.742434][T29426] bridge_slave_0: entered allmulticast mode [ 1417.749958][T29426] bridge_slave_0: entered promiscuous mode [ 1417.759544][T29426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.766901][T29426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.774245][T29426] bridge_slave_1: entered allmulticast mode [ 1417.782265][T29426] bridge_slave_1: entered promiscuous mode [ 1417.831522][T29426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1417.851383][T29426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1417.935434][T29426] team0: Port device team_slave_0 added [ 1417.967309][T29426] team0: Port device team_slave_1 added [ 1418.036298][T29426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1418.049477][T29426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1418.094034][T29426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1418.129743][T29426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1418.147467][T29426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1418.208375][T29426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1418.375750][T29426] hsr_slave_0: entered promiscuous mode [ 1418.416419][T29426] hsr_slave_1: entered promiscuous mode [ 1418.425627][T29426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1418.441791][T29426] Cannot create hsr debugfs directory [ 1418.702440][T26000] Bluetooth: hci2: command tx timeout [ 1418.985517][T29426] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.368494][T29468] ================================================================== [ 1419.376690][T29468] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 1419.384549][T29468] Write of size 48 at addr ffff88802e8f1e90 by task syz.3.5545/29468 [ 1419.392648][T29468] [ 1419.394999][T29468] CPU: 1 PID: 29468 Comm: syz.3.5545 Not tainted syzkaller #0 [ 1419.402492][T29468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1419.412579][T29468] Call Trace: [ 1419.415890][T29468] [ 1419.418859][T29468] dump_stack_lvl+0x18c/0x250 [ 1419.423570][T29468] ? read_lock_is_recursive+0x20/0x20 [ 1419.428964][T29468] ? show_regs_print_info+0x20/0x20 [ 1419.434171][T29468] ? load_image+0x420/0x420 [ 1419.438690][T29468] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1419.444169][T29468] ? __virt_addr_valid+0x10c/0x380 [ 1419.449320][T29468] ? __virt_addr_valid+0x10c/0x380 [ 1419.454451][T29468] ? __virt_addr_valid+0x10c/0x380 [ 1419.459577][T29468] print_report+0xa8/0x210 [ 1419.464015][T29468] ? __bpf_get_stackid+0x6c7/0x900 [ 1419.469137][T29468] kasan_report+0x117/0x150 [ 1419.473832][T29468] ? __bpf_get_stackid+0x6c7/0x900 [ 1419.478962][T29468] kasan_check_range+0x241/0x290 [ 1419.483912][T29468] ? __bpf_get_stackid+0x6c7/0x900 [ 1419.489034][T29468] __asan_memcpy+0x40/0x70 [ 1419.493469][T29468] __bpf_get_stackid+0x6c7/0x900 [ 1419.498420][T29468] bpf_get_stackid_pe+0x343/0x410 [ 1419.503489][T29468] bpf_prog_6611c23d801ea08d+0x29/0x3e [ 1419.508958][T29468] bpf_overflow_handler+0x43f/0x510 [ 1419.514177][T29468] ? perf_swevent_get_recursion_context+0xde/0x150 [ 1419.520870][T29468] ? bpf_overflow_handler+0xde/0x510 [ 1419.526174][T29468] ? tp_perf_event_destroy+0x20/0x20 [ 1419.531475][T29468] ? __perf_event_account_interrupt+0x187/0x280 [ 1419.537725][T29468] __perf_event_overflow+0x461/0x660 [ 1419.543026][T29468] perf_swevent_overflow+0x274/0x340 [ 1419.548328][T29468] ? perf_event_switch_output+0x790/0x790 [ 1419.554068][T29468] ? rcu_is_watching+0x15/0xb0 [ 1419.558844][T29468] perf_swevent_event+0x45c/0x570 [ 1419.563881][T29468] ? perf_tp_event+0x1550/0x1550 [ 1419.568857][T29468] ___perf_sw_event+0x4ab/0x730 [ 1419.573909][T29468] ? ___perf_sw_event+0x19e/0x730 [ 1419.578941][T29468] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1419.585371][T29468] ? __put_user_4+0x11/0x20 [ 1419.589901][T29468] ? lockdep_hardirqs_on+0x98/0x150 [ 1419.595127][T29468] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1419.601387][T29468] __perf_sw_event+0x139/0x270 [ 1419.606174][T29468] do_user_addr_fault+0x1242/0x12d0 [ 1419.611390][T29468] ? rcu_is_watching+0x15/0xb0 [ 1419.616171][T29468] exc_page_fault+0x64/0x100 [ 1419.620772][T29468] asm_exc_page_fault+0x26/0x30 [ 1419.625630][T29468] RIP: 0010:__put_user_4+0x11/0x20 [ 1419.630751][T29468] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 1419.650371][T29468] RSP: 0018:ffffc90003487c58 EFLAGS: 00050246 [ 1419.656457][T29468] RAX: 00000000000002f8 RBX: 0000000000000000 RCX: 0000000000000000 [ 1419.664527][T29468] RDX: 0000000000000000 RSI: ffffffff8acae160 RDI: ffffffff8b1d5160 [ 1419.672504][T29468] RBP: ffffc90003487d90 R08: ffffffff8f6c5aef R09: 1ffffffff1ed8b5d [ 1419.680489][T29468] R10: dffffc0000000000 R11: fffffbfff1ed8b5e R12: 1ffff92000690f94 [ 1419.688554][T29468] R13: dffffc0000000000 R14: 00000000ae12e400 R15: 00000000000002f8 [ 1419.696600][T29468] kernel_clone+0x36c/0x8a0 [ 1419.701140][T29468] ? create_io_thread+0x190/0x190 [ 1419.706180][T29468] __x64_sys_clone+0x1b7/0x230 [ 1419.710955][T29468] ? __ia32_sys_vfork+0x140/0x140 [ 1419.715999][T29468] ? lock_chain_count+0x20/0x20 [ 1419.720862][T29468] ? lockdep_hardirqs_on+0x98/0x150 [ 1419.726333][T29468] do_syscall_64+0x55/0xb0 [ 1419.730761][T29468] ? clear_bhb_loop+0x40/0x90 [ 1419.735444][T29468] ? clear_bhb_loop+0x40/0x90 [ 1419.740154][T29468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1419.746070][T29468] RIP: 0033:0x7f1fa8d9e559 [ 1419.750587][T29468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1419.770205][T29468] RSP: 002b:00007f1fa9c94fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1419.778628][T29468] RAX: ffffffffffffffda RBX: 00007f1fa9025fa0 RCX: 00007f1fa8d9e559 [ 1419.786638][T29468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ae12e400 [ 1419.794618][T29468] RBP: 00007f1fa8e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1419.802617][T29468] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1419.810687][T29468] R13: 00007f1fa9026038 R14: 00007f1fa9025fa0 R15: 00007ffcdf0e2c68 [ 1419.818674][T29468] [ 1419.821696][T29468] [ 1419.824021][T29468] Allocated by task 29468: [ 1419.828518][T29468] kasan_set_track+0x4e/0x70 [ 1419.833128][T29468] __kasan_kmalloc+0x8f/0xa0 [ 1419.837752][T29468] __kmalloc_node+0xb6/0x240 [ 1419.842363][T29468] bpf_map_area_alloc+0x5e/0x110 [ 1419.847333][T29468] prealloc_elems_and_freelist+0x86/0x1c0 [ 1419.853068][T29468] stack_map_alloc+0x32b/0x4b0 [ 1419.857841][T29468] map_create+0x877/0x12f0 [ 1419.862262][T29468] __sys_bpf+0x651/0x890 [ 1419.866509][T29468] __x64_sys_bpf+0x7c/0x90 [ 1419.870932][T29468] do_syscall_64+0x55/0xb0 [ 1419.875349][T29468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1419.881260][T29468] [ 1419.883583][T29468] Last potentially related work creation: [ 1419.889294][T29468] kasan_save_stack+0x3e/0x60 [ 1419.893975][T29468] __kasan_record_aux_stack+0xaf/0xc0 [ 1419.899359][T29468] call_rcu+0x153/0x900 [ 1419.903532][T29468] __nf_register_net_hook+0x787/0x910 [ 1419.909045][T29468] nf_register_net_hook+0xb2/0x190 [ 1419.914166][T29468] nf_register_net_hooks+0x44/0x1b0 [ 1419.919369][T29468] ebt_register_table+0xd12/0x10e0 [ 1419.924540][T29468] find_inlist_lock_noload+0x16a/0x250 [ 1419.930055][T29468] do_ebt_get_ctl+0x2d6/0x1d30 [ 1419.934860][T29468] nf_getsockopt+0x262/0x280 [ 1419.939473][T29468] ip_getsockopt+0x19f/0x230 [ 1419.944121][T29468] do_sock_getsockopt+0x379/0x450 [ 1419.949165][T29468] __x64_sys_getsockopt+0x1d6/0x280 [ 1419.954376][T29468] do_syscall_64+0x55/0xb0 [ 1419.958803][T29468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1419.964708][T29468] [ 1419.967041][T29468] Second to last potentially related work creation: [ 1419.973708][T29468] kasan_save_stack+0x3e/0x60 [ 1419.978393][T29468] __kasan_record_aux_stack+0xaf/0xc0 [ 1419.983774][T29468] call_rcu+0x153/0x900 [ 1419.987954][T29468] nf_unregister_net_hooks+0xcb/0x130 [ 1419.993507][T29468] nf_defrag_ipv4_disable+0x95/0xe0 [ 1419.998780][T29468] nf_ct_netns_put+0x2da/0x520 [ 1420.003559][T29468] nf_conncount_destroy+0x41/0x150 [ 1420.008731][T29468] ovs_ct_exit_finish+0xa5/0x210 [ 1420.013709][T29468] ovs_exit_net+0xed/0x7a0 [ 1420.018168][T29468] cleanup_net+0x6f7/0xb00 [ 1420.022606][T29468] process_scheduled_works+0xa60/0x1600 [ 1420.028162][T29468] worker_thread+0xa5e/0xfe0 [ 1420.032785][T29468] kthread+0x2fa/0x390 [ 1420.036859][T29468] ret_from_fork+0x48/0x80 [ 1420.041285][T29468] ret_from_fork_asm+0x11/0x20 [ 1420.046081][T29468] [ 1420.048411][T29468] The buggy address belongs to the object at ffff88802e8f1e80 [ 1420.048411][T29468] which belongs to the cache kmalloc-cg-64 of size 64 [ 1420.062643][T29468] The buggy address is located 16 bytes inside of [ 1420.062643][T29468] allocated 40-byte region [ffff88802e8f1e80, ffff88802e8f1ea8) [ 1420.076634][T29468] [ 1420.078962][T29468] The buggy address belongs to the physical page: [ 1420.085426][T29468] page:ffffea0000ba3c40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e8f1 [ 1420.095583][T29468] memcg:ffff888032639401 [ 1420.099820][T29468] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1420.107797][T29468] page_type: 0xffffffff() [ 1420.112132][T29468] raw: 00fff00000000800 ffff88801884da00 ffffea00018413c0 dead000000000005 [ 1420.120722][T29468] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888032639401 [ 1420.129408][T29468] page dumped because: kasan: bad access detected [ 1420.135986][T29468] page_owner tracks the page as allocated [ 1420.141711][T29468] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 23559319280, free_ts 0 [ 1420.158401][T29468] post_alloc_hook+0x1c1/0x200 [ 1420.163192][T29468] get_page_from_freelist+0x2181/0x22a0 [ 1420.168766][T29468] __alloc_pages+0x1f0/0x460 [ 1420.173363][T29468] alloc_page_interleave+0x24/0x1e0 [ 1420.178596][T29468] alloc_slab_page+0x5d/0x180 [ 1420.183291][T29468] new_slab+0x87/0x2d0 [ 1420.187369][T29468] ___slab_alloc+0xc5c/0x12f0 [ 1420.192140][T29468] __kmem_cache_alloc_node+0x11f/0x250 [ 1420.197618][T29468] __kmalloc_node+0xa6/0x240 [ 1420.202223][T29468] kvmalloc_node+0x70/0x180 [ 1420.206737][T29468] nf_hook_entries_grow+0x27c/0x710 [ 1420.211940][T29468] __nf_register_net_hook+0x2c9/0x910 [ 1420.217320][T29468] nf_register_net_hook+0xb2/0x190 [ 1420.222439][T29468] nf_register_net_hooks+0x44/0x1b0 [ 1420.227643][T29468] nf_defrag_ipv4_enable+0x87/0x110 [ 1420.232850][T29468] nf_ct_netns_do_get+0x18d/0x5c0 [ 1420.237880][T29468] page_owner free stack trace missing [ 1420.243249][T29468] [ 1420.245578][T29468] Memory state around the buggy address: [ 1420.251216][T29468] ffff88802e8f1d80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1420.259282][T29468] ffff88802e8f1e00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1420.267351][T29468] >ffff88802e8f1e80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1420.275445][T29468] ^ [ 1420.280903][T29468] ffff88802e8f1f00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1420.288968][T29468] ffff88802e8f1f80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1420.297031][T29468] ================================================================== [ 1420.305100][T29468] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1420.312298][T29468] CPU: 1 PID: 29468 Comm: syz.3.5545 Not tainted syzkaller #0 [ 1420.319785][T29468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1420.329854][T29468] Call Trace: [ 1420.333149][T29468] [ 1420.336180][T29468] dump_stack_lvl+0x18c/0x250 [ 1420.340880][T29468] ? show_regs_print_info+0x20/0x20 [ 1420.346087][T29468] ? load_image+0x420/0x420 [ 1420.350606][T29468] panic+0x2ca/0x720 [ 1420.354510][T29468] ? __lock_acquire+0x7eb0/0x7eb0 [ 1420.359546][T29468] ? bpf_jit_dump+0xd0/0xd0 [ 1420.364066][T29468] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1420.369973][T29468] ? _raw_spin_unlock+0x40/0x40 [ 1420.374839][T29468] ? __bpf_get_stackid+0x6c7/0x900 [ 1420.379966][T29468] check_panic_on_warn+0x84/0xa0 [ 1420.384918][T29468] ? __bpf_get_stackid+0x6c7/0x900 [ 1420.390043][T29468] end_report+0x6f/0x130 [ 1420.394295][T29468] kasan_report+0x128/0x150 [ 1420.398808][T29468] ? __bpf_get_stackid+0x6c7/0x900 [ 1420.404023][T29468] kasan_check_range+0x241/0x290 [ 1420.408979][T29468] ? __bpf_get_stackid+0x6c7/0x900 [ 1420.414104][T29468] __asan_memcpy+0x40/0x70 [ 1420.418534][T29468] __bpf_get_stackid+0x6c7/0x900 [ 1420.423490][T29468] bpf_get_stackid_pe+0x343/0x410 [ 1420.428529][T29468] bpf_prog_6611c23d801ea08d+0x29/0x3e [ 1420.433997][T29468] bpf_overflow_handler+0x43f/0x510 [ 1420.439209][T29468] ? perf_swevent_get_recursion_context+0xde/0x150 [ 1420.445722][T29468] ? bpf_overflow_handler+0xde/0x510 [ 1420.451021][T29468] ? tp_perf_event_destroy+0x20/0x20 [ 1420.456370][T29468] ? __perf_event_account_interrupt+0x187/0x280 [ 1420.462629][T29468] __perf_event_overflow+0x461/0x660 [ 1420.468100][T29468] perf_swevent_overflow+0x274/0x340 [ 1420.473400][T29468] ? perf_event_switch_output+0x790/0x790 [ 1420.479135][T29468] ? rcu_is_watching+0x15/0xb0 [ 1420.483919][T29468] perf_swevent_event+0x45c/0x570 [ 1420.489138][T29468] ? perf_tp_event+0x1550/0x1550 [ 1420.494088][T29468] ___perf_sw_event+0x4ab/0x730 [ 1420.498993][T29468] ? ___perf_sw_event+0x19e/0x730 [ 1420.504032][T29468] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1420.510457][T29468] ? __put_user_4+0x11/0x20 [ 1420.514982][T29468] ? lockdep_hardirqs_on+0x98/0x150 [ 1420.520186][T29468] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1420.526346][T29468] __perf_sw_event+0x139/0x270 [ 1420.531118][T29468] do_user_addr_fault+0x1242/0x12d0 [ 1420.536328][T29468] ? rcu_is_watching+0x15/0xb0 [ 1420.541105][T29468] exc_page_fault+0x64/0x100 [ 1420.545712][T29468] asm_exc_page_fault+0x26/0x30 [ 1420.550571][T29468] RIP: 0010:__put_user_4+0x11/0x20 [ 1420.555688][T29468] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 1420.575304][T29468] RSP: 0018:ffffc90003487c58 EFLAGS: 00050246 [ 1420.581379][T29468] RAX: 00000000000002f8 RBX: 0000000000000000 RCX: 0000000000000000 [ 1420.589358][T29468] RDX: 0000000000000000 RSI: ffffffff8acae160 RDI: ffffffff8b1d5160 [ 1420.597355][T29468] RBP: ffffc90003487d90 R08: ffffffff8f6c5aef R09: 1ffffffff1ed8b5d [ 1420.605359][T29468] R10: dffffc0000000000 R11: fffffbfff1ed8b5e R12: 1ffff92000690f94 [ 1420.613344][T29468] R13: dffffc0000000000 R14: 00000000ae12e400 R15: 00000000000002f8 [ 1420.621338][T29468] kernel_clone+0x36c/0x8a0 [ 1420.625857][T29468] ? create_io_thread+0x190/0x190 [ 1420.630897][T29468] __x64_sys_clone+0x1b7/0x230 [ 1420.635674][T29468] ? __ia32_sys_vfork+0x140/0x140 [ 1420.640736][T29468] ? lock_chain_count+0x20/0x20 [ 1420.645595][T29468] ? lockdep_hardirqs_on+0x98/0x150 [ 1420.650806][T29468] do_syscall_64+0x55/0xb0 [ 1420.655230][T29468] ? clear_bhb_loop+0x40/0x90 [ 1420.659912][T29468] ? clear_bhb_loop+0x40/0x90 [ 1420.664605][T29468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1420.670531][T29468] RIP: 0033:0x7f1fa8d9e559 [ 1420.674956][T29468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1420.694570][T29468] RSP: 002b:00007f1fa9c94fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1420.703001][T29468] RAX: ffffffffffffffda RBX: 00007f1fa9025fa0 RCX: 00007f1fa8d9e559 [ 1420.711022][T29468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ae12e400 [ 1420.719041][T29468] RBP: 00007f1fa8e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1420.727020][T29468] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1420.735032][T29468] R13: 00007f1fa9026038 R14: 00007f1fa9025fa0 R15: 00007ffcdf0e2c68 [ 1420.743017][T29468] [ 1420.746178][T29468] Kernel Offset: disabled [ 1420.750496][T29468] Rebooting in 86400 seconds..