last executing test programs: 13.330793219s ago: executing program 3 (id=3318): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x8}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002dc0)={r2, 0xe0, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002b00)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000002b40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002b80)=[0x0], 0x0, 0xa8, &(0x7f0000002bc0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000002c00), &(0x7f0000002c40), 0x8, 0x37, 0x8, 0x8, &(0x7f0000002c80)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002f00)={0x6, 0x10, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@alu={0x7, 0x12f88eb5346beef4, 0x4, 0xb, 0x7, 0xffffffffffffffc0, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x5c41, 0x1000, &(0x7f0000001b00)=""/4096, 0x40f00, 0x71, '\x00', r4, 0x25, r0, 0x8, &(0x7f0000002e00)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000002e40)={0x3, 0x1, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000002e80)=[{0x1, 0x2, 0x5, 0x6}, {0x2, 0x4, 0x7, 0x9}, {0x0, 0x1, 0xf, 0x4}, {0x2, 0x2, 0xa, 0x6}, {0x4, 0x3, 0x10, 0xc}, {0x0, 0x3, 0x10, 0x3}], 0x10, 0xffffffff}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) setsockopt$sock_attach_bpf(r1, 0x88, 0xa, &(0x7f00000002c0)=r6, 0x4) sendmsg$sock(r1, &(0x7f0000000b80)={&(0x7f0000000380)=@in6={0xa, 0x4e02, 0x2, @loopback, 0x7f}, 0x80, 0x0}, 0x40001) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) r7 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r9, 0x0, 0x0}, 0x10) r10 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r10, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x8ed9, 0x4, 0x7, 0x0, 0x6, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90324fc6004001c", 0x17}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) 13.116029486s ago: executing program 3 (id=3321): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x21, 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8402, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e6, 0x5, 0x4, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200281, 0x0) socket$kcm(0x1e, 0x1, 0x0) socket$kcm(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, 0x50) 12.720605169s ago: executing program 3 (id=3325): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0xf3, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x6e}, 0x0, 0x0, 0x0, 0x0, 0x2fffffffffc, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffefffffffffffff, r0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300080c5) setsockopt$sock_attach_bpf(r2, 0x1, 0x9, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x214, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x4000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000004000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x4, 0x0) close(0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000008f0b000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000900)=r5, 0x4) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='v', 0x48}], 0x1}, 0x0) sendmsg$kcm(r3, 0x0, 0x20040880) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$ITER_CREATE(0x21, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x36500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x62, 0x2}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009000000", @ANYRES32], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890b, &(0x7f0000000000)) 9.662301767s ago: executing program 3 (id=3329): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) r2 = socket$kcm(0x10, 0x400000003, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071180b000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/time_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/time\x00') r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44c}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000980)=ANY=[@ANYBLOB='b *:', @ANYRESOCT=r8], 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x60) 9.309062499s ago: executing program 3 (id=3334): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) socket$kcm(0x2, 0x3, 0x106) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89ed, 0x0) getpid() syz_clone(0x40002000, &(0x7f0000000300)="b2468db2f6178ff0fc13f1a5bdeda0ea8de347024469a21a2c94155f9631ccb62a849536936d671f9caf62d22a0b59f02bd00d8bf951cbbbf43792ac044434da6c77221000a02d2050dd9887a4301c55399a17d9ef716adfe9b4802eac3cc2eb439c7b356833e3ae49213018a6b81fafa41d4d556595a1b575d71d901ed2df84d6ab255924fb40d44d239862eddb15a7260982e6c979c596bdeb0d7fb8", 0x9d, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000500)="9e2a248522e7ef685fa60053c676db2b36b7ed63c4d3ac7ff1a7286afa41e7a2f7ad183500aebe4e7faa34424a37d127d890dce2c4f0c3f7eab218baf1e7459bd475f1bc037d32460d2c0932491a4406d93248780585de82b1da4dc1edd55e11151f408c7792775d43abe14e33382f09b9a4e641dbd8ef97819c2ccb6e1e265e31f23a2e2625b382f6434aa1f85ef9ced85f9aa52845955006466c201bf0488b44a984d111f23059a9ae4fa7b5c8738f388ca7f8e828cda3b187ee6b821ac4c2237eebf5079cf6c09d3cfb9a9ad82360fd891b56696a92c169904f9653eddc1a33bfab021b8efe1df9d94a614ba75f") perf_event_open(&(0x7f0000000780)={0x3, 0x80, 0x8, 0xe, 0x6, 0x3, 0x0, 0x3, 0x8020, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x400, 0x0, @perf_config_ext={0x100010000, 0x7}, 0x8, 0x5, 0x2, 0x1, 0x7fffffff, 0xaa48, 0xcc, 0x0, 0xfffff800, 0x0, 0xb}, 0x0, 0xe, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x18000000000002a0, 0x13, 0x0, &(0x7f00000001c0)="b15dd7cf1c00000400000000000036af1747da", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.024928368s ago: executing program 0 (id=3336): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x29, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000400), 0x12) openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000100811208000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x407}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e7002f", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.910914089s ago: executing program 0 (id=3342): r0 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, 0x0) 5.796492022s ago: executing program 0 (id=3343): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1}, 0x40000004) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff6}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xd, 0x7fffffff, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000480)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000540)=[{0x3, 0x4, 0x3, 0x9}], 0x10, 0x400}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r2, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x27, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x17, &(0x7f0000000100)=r3, 0x4) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="bd30bc791f4860246406f853f8f0eadad664503b45fdb7b5c366689c837fdcf97beeb608f932e7f6b1064bf8eb2988e5258f75bbfc67db851fd69e822e11ddbc831f38ec6042f83c6b19e118b1008b9773f855e5fbe4992597", 0x59}, {&(0x7f0000002740)="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", 0x554}], 0x2}, 0x80) syz_clone(0x20800000, 0x0, 0x4b, 0x0, 0x0, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="8d", 0x1}], 0x1, 0x0, 0x0, 0x24008000}, 0x4000000) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r5, r3, 0x0, r3}, 0x10) 4.667173339s ago: executing program 2 (id=3348): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000700020000004b000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) 4.467926765s ago: executing program 2 (id=3350): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2200fc"], 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x48) 4.356552229s ago: executing program 0 (id=3351): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x29, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000400), 0x12) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000100811208000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x407}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e7002f", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.30777314s ago: executing program 1 (id=3352): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) write$cgroup_freezer_state(r1, &(0x7f0000000200)='THAWED\x00', 0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0x10, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000300000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_ttl={{0x14, 0x0, 0x2, 0xeb25}}], 0x18}, 0x4000000) 4.065129688s ago: executing program 1 (id=3353): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x382a, 0xffffffffffff8001}, 0x304, 0x3, 0x43a1bd76, 0x9, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="11000000040000000400", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24229, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 1.191754221s ago: executing program 2 (id=3354): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20000, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000ec0)=',$[(\x00') (async) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4000, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x63a7}, 0x102, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000017c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x3, 0x0, 0x3, 0x7c64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0xb42, 0x4}, 0xc) (async) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r3], 0xfe33) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001480)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000000)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000040)='GPL\x00', 0x3, 0x1000, &(0x7f0000000380)=""/4096, 0x41100, 0x60, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000013c0)={0x3, 0x1, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001400)=[r2, 0x1], &(0x7f0000001440)=[{0x4, 0x5, 0xd}, {0x3, 0x1, 0x2, 0xa}, {0x1, 0x3, 0xb, 0x8}], 0x10, 0x2}, 0x94) (async) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001580)=@o_path={&(0x7f0000001540)='./file0\x00', 0x0, 0x8000}, 0x18) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100e68, 0x0, 0x4000, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) (async) close(r7) (async) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000580)=ANY=[@ANYRES8=r7, @ANYBLOB="32ba"], 0x12) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0020000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26ffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c1f860d050d694cc7806d294d3665016a7b29da0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d40887c58559b7dcb98a6273b8c651e57f727041c62cea5b7bd24d9f679e4fbe948dfb4cc4a389469608241630459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b83720eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb89872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebed161980f2fde4f9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc3600040543a34b195c6a8fc054282cd41b264906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e4bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af41000000000000007f5ab0d534b8d63e4ca3be71f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733097f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99e85b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5359dbdfbf31a562395020becaf3fd1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4b28288e78980c1184d8223edbc4bf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b5524642c248aa813edaa626f0000000000000000000000000000000003ba5bac34b611569a451564d3a5400f9097ffe7a37e765bc652be71ee24250d6d9cf19878dd62c53062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89ad07963acbd4dd4dc5b4552591edde7a22ad06f7567e6fec2f65011b579bf609d61a3ff4d6f490824bb035995449fc34106ae6889f036d67b6aaee784f855ebc746ac871b5d2031ac0a252ac1f86e93e245f3793cea80b6de773899d49d11d3b1ed79163b111c976cf840a2ef6214a43338fba8c9edb6be26e68fcc5d47ed74a66ce8aba726ab955b9b32ab1890e84a5e2d7476252af25e5c95c5a8b2b1b5c8a2645b017d23c0f169d6ab529cc889bb07889d9e155114cf3e26a50c527ec6d4021cd2cacfea6d7e41e39e26b3967cad65c648b170f12ea9cc69dcee64be0c27b1f4f7f5ce3e62c35602c9d2921326891901661c85b9ee4a0a0b9636bef4c23788494f094abb91ed813b42828aa93105896e0aee851a8087e169a1d69e841257d9053d0cdc3a6ac4f12084cc6470abebe8b344b1f56690a2687b428686c854c21831da277e8b8a21b7b91a46d22ba083eca7b1f8268048cde7d6f237dca42035881b29ca9c8c2937971821b613894297ff6f7796053a4de1fd77e180cc22b205d43bb4a1b59962c1f605ea1b74587100e8d579f157cb45561c357f9976cec6a43388b3049a0d9c171ff6145266ba119d00000000001ef3794a930eb12f3a6215c510bf0bca70c127e9c70cc7bef921249a7f18a0034ce3264a9e96656b47233e2ed7c76520e649c3fd550bdafd77c5cd72b4446d3e157ddd97e7622a6891fb739acd3b2cdaf65ac78490f0641be6e8c6f55bf3d228786895ff5fd5970faacd8a5025aca0aa1931f477ba06aa60051298c8bf7f3b399194f98dc3f4e8513ad06da09dc393c1284515986b8c70ac69512f6c0c04f42edb3a097a11f2ab480e3e391abffae097752300576337c6dd24c4a98280684aa1fe8c7b43ee8bce05fe979b34da18cdb44dbb030b8009cd3b3b44fd8e7b534acd3f1839cb54817668ab446d3d47848429ea831a57f26c8b05dedddceb24483f8f998b05c3ddf85c3799c9000000000000000000000000001e57cf839eb3150d6a076fb7b86fae98dbb46014f483aecb4ec4f0877371bcae8912c78aff857c669760f0e55041563c5c3e8ee4a0eef885fd43fe34a1febc82370d1d07fdfe705ada4764320889000000000000000000000000000000a790af4fc17872b55b10db99e212d18193235659df45627da300959eafc8bfb44f70d250f8f2e86532700254c9a8b14999f59c8b9034c4bb2448eaeff5db21d4a7f3d974790d4c3cba7c402f50585b9289d86400679e5c2bcacb2841ca074d51fdb4a29e84d72b6c996cfbee06aa52cd632e82ba068e8e1572ef2eb414ba5fccfc3c03e64df6a9cc3936c604aa2c0e2ec7b777475023f29b146af003472ce146a5ff997ba53c51026c0096154f9280a34bbf21d66f57a250b5397766122fc86950ce5252e96868cd04df54764cf2082153d6cedd8aaf9700c734aa4a1cb33a2e0a13c5687be4de327511bff9816d13c3219dac1c1535f10243db6f96960ea6a621f5e1b7babbedf0a6bf0cf74123d2e78d01be2b048883a2459eec630fb0293d28d9799fd3a792caff693fd9f002f14c43fb5a1051cc686b7f114d7927eed559bdf2e8ddea3e61d5d942b63fe90230b2e1948fc563ef94d437281671d2fe5032d2a091fa842b0af2e116ba"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r12 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r12, 0x29, 0x6, &(0x7f0000000040), 0x4) (async) setsockopt$sock_attach_bpf(r12, 0x29, 0x6, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xffffffffffff8000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r11, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r13}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000015c0)={@fallback=r1, r4, 0x2c, 0x35, r5, @void, @void, @void, @value=r13}, 0x20) (async) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r14, 0x40305829, &(0x7f0000000040)) 1.071985805s ago: executing program 0 (id=3355): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x0, 0x10000, 0x0, 0x5, 0x582, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x22}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x4, &(0x7f00000000c0)=""/4, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000200)=0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x19) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x13100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800, 0x0, 0xfffffffffffffffc}, 0x0, 0x5, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedd07910009875f37538e486dd"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x10000009, @mcast1, 0x9, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="f4000900062b2c05fe80000000000000dc8b850f693c66ccfe808100000000000000613a2eb0094401e0728f1dcb09b7", 0x30}], 0x1}, 0x20000884) close(0x3) socketpair(0x18, 0x5, 0x401, &(0x7f0000000000)) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="df", 0x1}], 0x1}, 0x20000114) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000102) 1.050566675s ago: executing program 1 (id=3356): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x23, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d80000001e0081054e81f78206000000e0ffff0006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000f01eb791433a5ee4ce1b14d6d930dfe1d9683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909fdffcace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93456a92954b43370e9703920706f9a941c6fd6d7ac2946af9fc2eb5", 0xd8}], 0x1, 0x0, 0x0, 0x1000000}, 0x44) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)=@phonet={0x23, 0xb, 0xf5, 0x8}, 0x80, &(0x7f0000000040)}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) socket$kcm(0x10, 0x7, 0x0) 943.628629ms ago: executing program 2 (id=3357): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc602f000e", 0x17}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) (async, rerun: 64) r0 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) sendmsg$kcm(r0, &(0x7f0000001580)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x0, 0x4, 0x3, 0x3}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="2e92ceddc4e7fba768d0e28301f69e6f26434f5ad08b3bd5fd3ad2eb2540df6b65e9418de54ef522d41875693c68fd0816cae0ba8f60947f04ff59db2fc858464e29eab798071dffaa0603727c9c31536b58c5436d68e82da76ab42a8e5be14d85caa2b644d644de3e1ddcb381d571f91b7ab336942b4ac07baae57568e32e42672350965f34391920270762aabc2da24a0023cdc1aa2d3dc49981cd597fb22b0e3a0e67268eccd3f25e27c0be306a20b846c791979e58eda07760e37d740ab205b33b76f39a67d8987d21f3bda53d77f708a58b6de427bec8049b0118c63816d40b324c51980abef678456ee2f5bb1933", 0xf1}, {&(0x7f00000003c0)="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", 0xfd}, {&(0x7f00000004c0)}], 0x3, &(0x7f0000000540)=[{0x1010, 0x112, 0x8, "291e38206404664bf89a3fb37cc0909a8d7eccf2ae48f10221071b06b6038a197f7c6cd6b5982a2b5b852e7426f2f1449018e43ceca2bc4d86d36126171a006598b0fa447b8fcb4a26b717826f7a82f1bccbf628781da24611abb121921c0430ed66b077479296be02c7a653393bb3f18eb9231aff4c958a87b349b7e42058494566f289a7aca2d0f696cea027d32c9d93601180b7d693d27da13a029f52316ba243af5320e03223186274ba48ed7b15c831085208fd76b69ac87ff50c0d3c7ae35bae15841f7eefb5ae80075c944eb40ebc14c375f9b59883b0f268dbbc731178cd8c6982389be619c791aebd156a9bb0c0d1d96f08215204ad2df599e7a5274809ed8eb0480e5e04d913801a1e048bc3bbb5d77951a4ddabdb18b3bd2fc644d50472665987e06e2414c5c1432efb93bf0aea51fd73612ec65d9df4ac3cc6fd77dc697c47ab983592f5b656e1304d79e5968a260ebf3f027f1c03bed3e329a34a2a1dd435ad723038cb0b4d200d8735c56d07387dd8308740afdeca2c04e424e02a23ad65dd8484884887509669ef322048157b278ff63bf59ca4c8672253acc771751b8129fa6cc4677665d83c70ba57328e9a810e0176c776fd4147f72cda6857f57fea58b23edb11cd34e76d1114871d0d38e33ca0aa82edd74b1c2e46f4352fdf6b52471c7ca3bdf7fd4b1d74fe28c5d06df19e4d8bde37df2bbe7a1858359ae1a1a8bbeebe439ed9edac49284a9088492ece8320095c35c4aeb25479890a5ce6ee1167f0e068308892bfab56fc710a4d91e21899465615a537e1debceea2ed4db5adb5f741023d44598a997768c477c0de994687b28ae2a5b5a3262c77971db6ee2a750a379dbed0807f647eb722171dcb1d27b0943854d1c250ab2706b23144bcd1a7048b0c6e2304bd1e49743cc5670f4f222b0b58e96e9e6b97ce88e21a8c900bf2da1df30c1e1342e9131078be9aed38236f0c1876890882dd6d5d2107a9d62c17cd033d6dc9367cfbe9bb938c72f5cb80e339f124c8b15440b7567a79a6b5e4850c9741508dfe1f49cbd95547b09741e519991edec0964f7c891742d718f14e23c266ed53f12819398fe08a3eede99e1e728887c393e6fbe8c40ba63e9ecd4d4c72d5b8dd3c2042000988461e1f5be7c70074905a98634e33bdcfcafd74cfc97efeb30ee8c4624c4c796caf74c7bcbecf08fcef2f33de402fc0c071b1057026a8a48b8c9e62bfd3a7b2ef324df42f40ce53b612b6728eaf45a854bb947d7752fe95d5a8fd1515f04b3ee6119c82413032d6cbe8aa62cf41841bc051a642aebae857bd000e4050ceb810b41e6d409b4f4af55939f7caf2f76c8d5e3b9593d09bab54a8d723c3aa16091232cb294026ae5c9f0db21b38f63a611fc9e5b639d8d250046b8279755f1a4472d79e90f5ce44dbc10133e518f42172f6934bca6231c03b51de00944398d3bf36e049d0729a004f9989dcea94391f4513f73880bdd742515c4d9954f77b530cfc4b29b377820aeef7f5c28f28594f88f53eb7258972a30443a3328857e381c331e6949a6b656e1709ddeaed1382dc64a5af0790157078ad8e4b9ac81ddf2868795149badfd3f447b100c1504d15144d30bc4c193b069630afbbe79b4832390642195f0825608fec44ebea4d35f6f4ac39e1d45e5230f72773d9082d03ec69b9ecdf371184dbf4429ae19fa5c3e377fa30a7d1d45c6a115a8193170a7749567623af755960b0f74c3f8dfca9e514563d10c5640fe511ceb3e8ac7bd520f61483d65c8e4dc688fafd5b5d55f117e0f6e9cc55f22b2000c01ef8b40e52f95bde34836e51e5b89a552f4869558a9dc675401d58e8f2a79eb1cd53d7f7a62111340801a783ab758958268b4e7262064cbb0b6377c4d0695c0816853845508e47a31b624a8667bccb57bd9d6281f21ea65f0ada74beac8cba88307df730dc162dbc6b452fedf57ab48eeb36150e2dae18c7ec732090e7882d20671d69defe718f161dd677db6c7423cd96a440157ffe9765f7d50c17d3d8efde8e9f52d3afb082436d19e8559c1b1100ff2463093b0c431b29795d913d82ab8398ce26800165978a29ea63f4c6049c39641194498a98278fffcadf43f3d0b3ae8c21e88a11bfd55f95232161e7511643a57ed157dda5627a30432703d1fb817151bb5b6c9541e598069debc233c7704bb67832abd845f0c76b93be04e4b55446aad71f8c1835b3cf8873e881281956fb51da05f22f9c5b7254d2e75dbd8348d95d920ec7e7c221912de20207ba9ead37c918b91d5e45afba99aead15e8987c07a99b9ef6c58af16696eb234530468c0a22ba59e2c5153573d0637eafabcdbd06eb39d06a06a90225c4389cd40769921b175cdff90658c0180b5c8d9d65de1827113ad6c86d63805a97dd69a782384706e76b8a40e7318de6e81c20796b0c94be8e4bbe2b261b34ac957bc218711176f235999077cd1779e5bbe6367c30cd9acce920f82f91bcd22dd11929e7695360a0f3780c36c008b3829976f880b318493db77e86fe5ac90e1b66107b3987acefc30b335b013078b8e0c9ae6fc01e9ed8cbcd498f3c23229c67eb1b08176595ada08537d4c9722c8bf0e04dd7f8663ae809e3fe56da1225b0df49b1613424457e4635bae7ffdec7b80a5d82d52e28bb5fcc2f7e260c16ba24e43d08ff92cd83eeac4f12f028948b003283eed316eccef8595df9b1ff03d74a3e7477e729253425e39139ab337053640d893cfd6d3d6372a9a14fa130884efbdb7a55e2f5593035d5c473bcc9e614c38a350b9b16343cc07783de9c665615edf92c180a15f3209a7ff4a459ecd93ee32120b60baaa19e31dd0f9f778ee85d2d97bb32c1a2f0539a31712935782e2921ca02de31fcc05832ee3f454cbbe6424c219b82cc949bc41849621a87c20a9ee53894c4a1b9bc3330889232b45d67c703e2cb2ca236c4bbd83cdd61931ad54ab29c32ca5efce818443ac16ec2e588478c211401afbf4a7c7e8d87b555337f74a0e02270b4322fa5b7cf0190267c41c460bfa8494508f599061544612aff5107819077fc0ce44822c998846f9f095e475b88a56c70fb3042ca4a3462ebe19c5e4a9e105bd5a4ad6d0e82759f0093f591e491f08c43b70beb9a3cc25b6d007538089589286bca8ed638de70636a8153d87a59755950cb5dc047e331ddc0617c8c88bd5caac8b5e2b02685b8c50e6095dc64a759bd8a121334ba493aef987ee7a87638f349cf2680097bac6b48f1a3dcae83b9a76b86b335075f195aca8534ed7428343ebcfb38a03083a7942046addd3f4b7bb357dc12ca3326652222a98174e1adbec801a8d2035f88c15cd59125d6a87783b55bb2c75048b837b2cea482ee3cc926980d8262d793ba350b0db3b0fd8e9006f09ea93cdf1f69c2035c9256f5faa4296d180964a7cd64d35fd49e4d22ee6e6dab8013717af5c24fcf58381136ea383bd67c65d635184bae488a3dfe074c3d934f718ff9ea2bb3433c5c9fdf5aae9c4214c5ba6c726ab7cabae86883ba9a1c469e89ba384d7c8387f1618cfe0d530afe48486f3c9a561aa4dde3ddc439c6cafc3543d4edea0894b7bf64f87fb3f9e9ede3562ac77586dd5c99dc2021cce384f08ed53e2957b6de401f2811d8b79f39b9c44281baf0f67ee3f8f631dc49da6d554d48d2ef583bb0784bed0d20ecc0616b32be017eb1fc11350499b191dfa17868f189a499269e90f9ea924ec04ef8727a62e75872208237f87cff898bc43a5d65a865a11e27efdc1c5093d0be4ee3c624ca9258666f0fa8fcf4b7bafa1ef8dc6f560f4ecd1f7f0a4235f2ee7498d48aa037097dfc8abe3084bd923ec059c20b4d3d853baf53b4a5d2639ebebc73a72d600404a4bf9fa1fbb5d462d9e0a3bb6d448b5aceb0057880fc2ce5e8ba8b3c2a9442aa6e035a161407f6916aea4568dcaf6bb844a07f64a04f06c8c479228365db580ae8815bf98a0956bff7ed11978bda79270e35b210c2a0b706dc9559d5780d19f9a0cc008f954ea389a965b031f9af12150ede7b37d9b0c1b957ad68d198c9ff16feb59f7ec1693d5a4ea2fc5168ba28bcd115b26b464b259d18983a55d96cb1c1b025a2a14afc42dc352a6fd2b11ae5e99a8d79809c91c2023376ffed6f9b21a49d424eab97703d9641aefe995f797ca7a422999575ca1e9d392edbcbb7a471fee2522ca7416717c617c51c0f5840fcead1cd4542f5e35261142cfd23e9a35abfe813420eeab1e0174ebc4b03ae1dffad4083df0864ff1267b9ceda48e5db5d94bf767e6a4cdfd1ca320aa8f9aad515561ce8f91d65e45f2ea3a0d57ea4b22cd08f7ab8ca12e9d943c7cbc66016b54de703d2ad0f3cc666f69f529baed9a0a03493809f6ada7d881f8a9730761c1697d332ee48831786b02f88b6b9bb3041f88251a83496dcb6939f7d907433cece0dd304e8bd333680cd36da019ce63e4c115284479b90c7e02745bee57bbe466742f0eb07db80e26a2454b4ecc9a88b765c67a38b83f8639488f4de7c516c42bde4f493f67eff23e25e4ab72d6f5f0591387d25561faacb7a64d02f18cf5434a92e169808f0bda12bfa668665bd8f89ba27555cf24f7d3b72e2dcedd8675a899208fcde10021e2b3a44b0d59d9f112879af5714af92870558b6cc61d7c7b7b83bebab62def688ac81d2bf3ecade329ae1df9252a6a629a123769deffd63e0cbe138677fe32e5e9d768898003a73f3c11ab9f1a7a373a9c411293fd6420d09f365fb6fe498f92067066270da15d45a0a5fc105d78d055c8a0d171a1ace1f956b9cf93c22d00dd5e5e27f5818a014da0e26d8f5555fe1473d8d40c523eb9928c0b8731f8837575d307fe703db17baf4cc5f61e2bceb9770cf85f3ceb9651ec2589d8b6b461fc35da9244ee0a2474eea3642d3e2a933744068613dacedb37ed71a2e4d0992d8c266f5f0177c68696da9c0e66ade3b3aaa3abae3072f90f5386fa96fa4c2e3d672eb0ffe741552ecc5d7f6ab36a63f2dbb9a8f69d1865fd437fe8ba421547aad45075223f6f0fa3ca37f5b293acdfd8f8637f0c448ea855bda377396cbb16098e99c0cf4858acaed204c8426a1207ac2f1180f7d8dd6544b3e2110c0c8f97486abd8a8d678e30eb18bf2e450fabae56202460038d1957b820f7e3020b5ddeed0aa6b41e93cbbbbef4cc347976c89b7db9b20bfbf264724df002a8f5b0edcc8026e1e0ea483e017bf9972c961ed06a028a232dab89f719b0b8ed70b633393d1056eaef780b57c8572204f04501fdd137ab59f143dc3cc71177b1cb84315d7cb6767aac1369717ae8a9abd232c81d2502e6889461c36d661e428b41102d655e617bb8ca4de38bc1c5a9ec3e606d6474e66cfd68097f25392a4590894da9fc99cbe2cdf7cedb388b3ce333c90c32247aa9a571081b6f42608c990d8288a3fd2d6ee4c2762ea2acf5042eb64f29aec28a3af15250eeed072633147aade8c2280317de01d53542e6273f45d679ac018dca9070db0305fa2dabbd668432ecffb5c99dbebafc7d2f810605ab5a95f0fb3088495fa4c8eb7872cb81fd017a580ffec6ce63938964757278197d2c145484db57f3bab323038e4592225c88dd8c4d0d19f9a4809393d2979876f669836cc690a21d662f9bc0f9ad04aa4088cebfe8d42ae21509a829395dc6c85f1894290396a36adaea43802fbbb0347b25a76974c0909a88c98092d2011ee1cd9f41372e493417d878b1298acf2213b1df66072711d6711c479fbce77949be08e8f4a67bd48fc"}], 0x1010}, 0x4800) (async, rerun: 32) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (rerun: 32) 754.378695ms ago: executing program 1 (id=3358): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000700020000004b000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) 522.340883ms ago: executing program 1 (id=3359): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x0, 0x0, 0xffffffffffffffff, 0xb) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8901, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02001100000a"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800005, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5f, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 271.826641ms ago: executing program 2 (id=3360): socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001540)={0xffffffffffffffff, 0x9, 0x1c}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008", 0x25}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d8", 0xc}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 100.484146ms ago: executing program 1 (id=3361): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x5, 0x4, 0x9, 0x0, 0x0, 0x7, 0x100, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x800, 0x7fffffff, 0x3, 0x5, 0xf, 0x6, 0x8, 0x0, 0x10, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0xb) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x5, 0x5ba, 0x0, 0x201}, 0x0, 0x1, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0xffeb}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=ANY=[], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r8) r9 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000003640)={0x5, 0xb, &(0x7f0000003580)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x98b}}]}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, &(0x7f0000000080)=ANY=[]) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB="0506000000000000000000d6c5136f00000000000000000000000040"]) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x8000401, 0x9f04}, 0x64c0, 0x98ca, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000040}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) 73.761537ms ago: executing program 2 (id=3362): socket$kcm(0x10, 0x0, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000010080)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xfffffffc, 0x0, 0x1, 0xb}, {0x10000002}], 0x10, 0x316bb6af}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0xfff, 0x0, 0x0, 0x200000, 0x3, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x1}, 0x28) socketpair(0x1, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socket$kcm(0x2, 0x5, 0x84) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x242b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x2b) sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r5) 4.54517ms ago: executing program 0 (id=3363): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x29, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000400), 0x12) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000100811208000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x407}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e7002f", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=3364): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x382a, 0xffffffffffff8001}, 0x304, 0x3, 0x43a1bd76, 0x9, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="11000000040000000400", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24229, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) kernel console output (not intermixed with test programs): eam0) entered blocking state [ 472.581335][T13619] bridge0: port 3(team0) entered disabled state [ 472.600687][ T5781] Bluetooth: hci4: command tx timeout [ 472.614313][T13612] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2479'. [ 473.145586][T13490] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 473.206362][T13490] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 473.275299][T13490] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 473.359505][T13490] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 473.483348][T13639] sit0: left promiscuous mode [ 474.417773][T13490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.606140][T13490] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.660088][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.667413][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.683130][ T5781] Bluetooth: hci4: command tx timeout [ 474.887438][ T8081] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.894799][ T8081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.490614][T13690] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2490'. [ 475.737254][T13698] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2494'. [ 475.746144][T13490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.033968][ T5781] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 476.470680][T13705] netlink: 'syz.3.2495': attribute type 46 has an invalid length. [ 476.519731][T13490] veth0_vlan: entered promiscuous mode [ 476.587635][ T2935] hsr_slave_0: left promiscuous mode [ 476.599345][ T2935] hsr_slave_1: left promiscuous mode [ 476.632611][ T2935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.670031][ T2935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.721724][ T2935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.729215][ T2935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.776417][ T2935] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 476.784324][ T2935] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 476.794144][ T2935] bridge0: port 3(team0) entered disabled state [ 476.823665][ T2935] bridge_slave_0: left allmulticast mode [ 476.829406][ T2935] bridge_slave_0: left promiscuous mode [ 476.843078][ T2935] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.916321][ T2935] veth1_macvtap: left promiscuous mode [ 476.934762][ T2935] veth1_vlan: left allmulticast mode [ 476.963076][ T2935] veth1_vlan: left promiscuous mode [ 478.120434][ T5781] Bluetooth: hci1: command tx timeout [ 478.450131][ T2935] macvlan0 (unregistering): left promiscuous mode [ 478.459414][ T2935] macvlan0 (unregistering): left allmulticast mode [ 478.470577][ T2935] team0 (unregistering): Port device macvlan0 removed [ 478.549700][T13726] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2503'. [ 478.781331][ T2935] team_slave_1 (unregistering): left promiscuous mode [ 478.788176][ T2935] team_slave_1 (unregistering): left allmulticast mode [ 478.800557][ T2935] team0 (unregistering): Port device team_slave_1 removed [ 478.839512][ T2935] team_slave_0 (unregistering): left promiscuous mode [ 478.846358][ T2935] team_slave_0 (unregistering): left allmulticast mode [ 478.857630][ T2935] team0 (unregistering): Port device team_slave_0 removed [ 479.317483][T13723] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2501'. [ 479.362098][T13490] veth1_vlan: entered promiscuous mode [ 479.480784][T13490] veth0_macvtap: entered promiscuous mode [ 479.494680][T13490] veth1_macvtap: entered promiscuous mode [ 479.553361][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.564685][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.609105][T13490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.648501][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.667445][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.677960][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.697226][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.700359][T13741] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2506'. [ 479.712512][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.728561][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.747380][T13490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.774765][T13490] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.786593][T13490] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.798003][T13490] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.807649][T13490] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.828560][T13742] netlink: 'syz.0.2507': attribute type 10 has an invalid length. [ 480.375354][ T4547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.401929][ T4547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.524417][ T8074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.545871][ T8074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.571751][T13753] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2510'. [ 480.662453][T13756] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2511'. [ 481.076691][T13771] netlink: 'syz.0.2516': attribute type 29 has an invalid length. [ 481.101430][T13771] netlink: 'syz.0.2516': attribute type 29 has an invalid length. [ 481.122376][T13771] netlink: 'syz.0.2516': attribute type 29 has an invalid length. [ 481.445337][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 481.456871][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 481.465134][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 481.474580][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 481.484214][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 481.493206][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 483.247260][T13777] mac80211_hwsim hwsim77 wlan0: entered promiscuous mode [ 483.254973][T13777] mac80211_hwsim hwsim77 wlan0: entered allmulticast mode [ 483.551119][ T5781] Bluetooth: hci2: command tx timeout [ 483.602271][ T8074] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.755124][ T8074] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.879495][ T8074] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.958414][ T8074] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.154360][T13780] chnl_net:caif_netlink_parms(): no params data found [ 484.401785][T13780] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.421511][T13780] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.428696][T13780] bridge_slave_0: entered allmulticast mode [ 484.438442][T13780] bridge_slave_0: entered promiscuous mode [ 484.456162][T13815] FAULT_INJECTION: forcing a failure. [ 484.456162][T13815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.480534][T13815] CPU: 1 PID: 13815 Comm: syz.2.2525 Not tainted syzkaller #0 [ 484.488031][T13815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 484.498094][T13815] Call Trace: [ 484.501383][T13815] [ 484.504328][T13815] dump_stack_lvl+0x18c/0x250 [ 484.509022][T13815] ? show_regs_print_info+0x20/0x20 [ 484.514232][T13815] ? load_image+0x420/0x420 [ 484.518748][T13815] ? __lock_acquire+0x7d40/0x7d40 [ 484.523801][T13815] ? snprintf+0xe9/0x140 [ 484.528111][T13815] should_fail_ex+0x39d/0x4d0 [ 484.532812][T13815] _copy_to_user+0x2f/0xa0 [ 484.537239][T13815] simple_read_from_buffer+0xe7/0x150 [ 484.542625][T13815] proc_fail_nth_read+0x1e8/0x260 [ 484.547652][T13815] ? proc_fault_inject_write+0x360/0x360 [ 484.553290][T13815] ? proc_fault_inject_write+0x360/0x360 [ 484.558925][T13815] vfs_read+0x28b/0x970 [ 484.563096][T13815] ? kernel_read+0x1e0/0x1e0 [ 484.567689][T13815] ? __fget_files+0x28/0x4b0 [ 484.572294][T13815] ? __fget_files+0x28/0x4b0 [ 484.576905][T13815] ? __fget_files+0x43d/0x4b0 [ 484.581598][T13815] ? __fdget_pos+0x2a3/0x330 [ 484.586191][T13815] ? ksys_read+0x75/0x260 [ 484.590528][T13815] ksys_read+0x150/0x260 [ 484.594773][T13815] ? vfs_write+0x990/0x990 [ 484.599194][T13815] ? lockdep_hardirqs_on+0x98/0x150 [ 484.604396][T13815] do_syscall_64+0x55/0xb0 [ 484.608808][T13815] ? clear_bhb_loop+0x40/0x90 [ 484.613489][T13815] ? clear_bhb_loop+0x40/0x90 [ 484.618161][T13815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 484.624054][T13815] RIP: 0033:0x7fe41375d68e [ 484.628466][T13815] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 484.648165][T13815] RSP: 002b:00007fe4145acfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 484.656576][T13815] RAX: ffffffffffffffda RBX: 00007fe4145ad6c0 RCX: 00007fe41375d68e [ 484.664554][T13815] RDX: 000000000000000f RSI: 00007fe4145ad0a0 RDI: 0000000000000006 [ 484.672525][T13815] RBP: 00007fe4145ad090 R08: 0000000000000000 R09: 0000000000000000 [ 484.680495][T13815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.688468][T13815] R13: 00007fe413a16038 R14: 00007fe413a15fa0 R15: 00007ffef1c30058 [ 484.696452][T13815] [ 484.719846][T13780] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.736738][T13780] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.749480][T13780] bridge_slave_1: entered allmulticast mode [ 484.764650][T13780] bridge_slave_1: entered promiscuous mode [ 484.818436][T13780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.867491][T13780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.873537][T13823] netlink: 'syz.3.2527': attribute type 29 has an invalid length. [ 484.918489][T13823] netlink: 'syz.3.2527': attribute type 29 has an invalid length. [ 485.018079][T13780] team0: Port device team_slave_0 added [ 485.044278][T13827] netlink: 'syz.3.2527': attribute type 29 has an invalid length. [ 485.062760][T13780] team0: Port device team_slave_1 added [ 485.385566][T13825] netlink: 'syz.2.2528': attribute type 2 has an invalid length. [ 485.400497][T13825] netlink: 'syz.2.2528': attribute type 8 has an invalid length. [ 485.411052][T13825] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2528'. [ 485.436261][T13780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.447778][T13780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.474363][T13780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.486669][T13830] netlink: 'syz.2.2528': attribute type 11 has an invalid length. [ 485.631017][ T5781] Bluetooth: hci2: command tx timeout [ 485.770384][T13780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.786246][T13780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.829695][T13780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.987542][T13852] netlink: 'syz.3.2531': attribute type 1 has an invalid length. [ 485.997008][T13852] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2531'. [ 486.048311][T13780] hsr_slave_0: entered promiscuous mode [ 486.055778][T13780] hsr_slave_1: entered promiscuous mode [ 486.062633][T13780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 486.070220][T13780] Cannot create hsr debugfs directory [ 486.080742][T13852] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2531'. [ 487.172451][T13876] netlink: 'syz.2.2537': attribute type 29 has an invalid length. [ 487.209303][T13876] netlink: 'syz.2.2537': attribute type 29 has an invalid length. [ 487.294105][T13876] netlink: 'syz.2.2537': attribute type 29 has an invalid length. [ 487.710428][ T5781] Bluetooth: hci2: command tx timeout [ 488.455404][T13889] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2540'. [ 488.637321][T13904] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2544'. [ 489.073077][T13780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 489.226351][T13780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 489.259925][T13914] netlink: 201888 bytes leftover after parsing attributes in process `syz.2.2547'. [ 489.428905][T13780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 489.530172][T13780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 489.800343][ T5781] Bluetooth: hci2: command tx timeout [ 489.949170][T13928] validate_nla: 4 callbacks suppressed [ 489.949185][T13928] netlink: 'syz.0.2548': attribute type 29 has an invalid length. [ 490.050752][T13928] netlink: 'syz.0.2548': attribute type 29 has an invalid length. [ 490.145561][T13930] netlink: 'syz.0.2548': attribute type 29 has an invalid length. [ 490.167538][T13937] netlink: 'syz.3.2551': attribute type 27 has an invalid length. [ 490.243140][T13937] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2551'. [ 490.258460][T13941] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2552'. [ 490.355876][T13780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.609341][ T8074] hsr_slave_0: left promiscuous mode [ 490.624437][ T8074] hsr_slave_1: left promiscuous mode [ 490.644338][ T8074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.653100][ T8074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.663911][ T8074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.678031][ T8074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.687738][ T8074] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 490.697797][ T8074] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 490.707478][ T8074] bridge_slave_1: left allmulticast mode [ 490.714686][ T8074] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.368595][ T8074] bridge_slave_0: left allmulticast mode [ 492.376478][ T8074] bridge_slave_0: left promiscuous mode [ 492.400568][ T8074] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.440263][ T8074] veth0_macvtap: left promiscuous mode [ 492.445945][ T8074] veth1_vlan: left promiscuous mode [ 492.451429][ T8074] veth0_vlan: left promiscuous mode [ 494.617888][T13780] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.637621][T13954] mac80211_hwsim hwsim75 wlan0: entered promiscuous mode [ 494.644848][T13954] mac80211_hwsim hwsim75 wlan0: entered allmulticast mode [ 494.675225][T13944] netlink: 'syz.0.2554': attribute type 2 has an invalid length. [ 494.699348][T13944] netlink: 'syz.0.2554': attribute type 8 has an invalid length. [ 494.708418][T13944] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2554'. [ 494.724770][T13952] netlink: 'syz.0.2554': attribute type 11 has an invalid length. [ 494.782805][ T9409] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.789975][ T9409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.831283][ T9409] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.838443][ T9409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.558398][T13780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.767166][T13780] veth0_vlan: entered promiscuous mode [ 495.814895][T13780] veth1_vlan: entered promiscuous mode [ 496.242732][T13780] veth0_macvtap: entered promiscuous mode [ 496.294357][T13780] veth1_macvtap: entered promiscuous mode [ 496.400022][T13780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.428878][T14008] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2560'. [ 496.438806][T13780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.467296][T13780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.483573][T13780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.498298][T13780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.542659][T13780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.559069][T13780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.575409][T13780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.587209][T13780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.605157][T13780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.617070][T13780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.639579][T13780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.662963][T13780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.681221][T13780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.690050][T13780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.706968][T13780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.810082][T14016] bridge0: port 3(team0) entered disabled state [ 496.879158][T14016] bridge_slave_1: left allmulticast mode [ 496.886352][T14016] bridge_slave_1: left promiscuous mode [ 496.905341][T14016] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.967679][T14016] bridge_slave_0: left allmulticast mode [ 496.982346][T14016] bridge_slave_0: left promiscuous mode [ 496.993342][T14016] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.269419][T14019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2563'. [ 497.324482][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.351639][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.430933][ T8081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.438869][ T8081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.771925][T14022] mac80211_hwsim hwsim73 wlan0: entered promiscuous mode [ 497.779145][T14022] mac80211_hwsim hwsim73 wlan0: entered allmulticast mode [ 497.856063][T14029] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2566'. [ 498.040128][T14033] bridge0: port 3(gretap0) entered blocking state [ 498.084399][T14033] bridge0: port 3(gretap0) entered disabled state [ 498.114471][T14033] gretap0: entered allmulticast mode [ 498.138186][T14033] gretap0: entered promiscuous mode [ 498.159743][T14033] bridge0: port 3(gretap0) entered blocking state [ 498.166371][T14033] bridge0: port 3(gretap0) entered forwarding state [ 500.704285][T14044] FAULT_INJECTION: forcing a failure. [ 500.704285][T14044] name failslab, interval 1, probability 0, space 0, times 0 [ 500.716027][T14045] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2569'. [ 500.725975][T14044] CPU: 0 PID: 14044 Comm: syz.1.2568 Not tainted syzkaller #0 [ 500.733444][T14044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 500.743492][T14044] Call Trace: [ 500.746757][T14044] [ 500.749674][T14044] dump_stack_lvl+0x18c/0x250 [ 500.754354][T14044] ? show_regs_print_info+0x20/0x20 [ 500.759551][T14044] ? load_image+0x420/0x420 [ 500.764041][T14044] ? __might_sleep+0xe0/0xe0 [ 500.768636][T14044] ? __lock_acquire+0x7d40/0x7d40 [ 500.773657][T14044] ? __lock_acquire+0x1273/0x7d40 [ 500.778667][T14044] ? ima_match_policy+0x108/0x1ff0 [ 500.783770][T14044] should_fail_ex+0x39d/0x4d0 [ 500.788445][T14044] should_failslab+0x9/0x20 [ 500.792952][T14044] slab_pre_alloc_hook+0x59/0x310 [ 500.798004][T14044] kmem_cache_alloc_node+0x60/0x320 [ 500.803222][T14044] ? __alloc_skb+0x103/0x2c0 [ 500.807804][T14044] __alloc_skb+0x103/0x2c0 [ 500.812211][T14044] alloc_skb_with_frags+0xca/0x7b0 [ 500.817314][T14044] ? mark_lock+0x94/0x320 [ 500.821645][T14044] sock_alloc_send_pskb+0x883/0x9a0 [ 500.826847][T14044] ? sock_kzfree_s+0x50/0x50 [ 500.831445][T14044] ? verify_lock_unused+0x140/0x140 [ 500.836643][T14044] ? dev_get_by_index+0x22/0x2d0 [ 500.841589][T14044] ? dev_get_by_index+0x22/0x2d0 [ 500.846798][T14044] packet_sendmsg+0x3017/0x4c30 [ 500.851672][T14044] ? __might_sleep+0xe0/0xe0 [ 500.856278][T14044] ? verify_lock_unused+0x140/0x140 [ 500.861471][T14044] ? mark_lock+0x94/0x320 [ 500.865792][T14044] ? __lock_acquire+0x1273/0x7d40 [ 500.870817][T14044] ? verify_lock_unused+0x140/0x140 [ 500.876019][T14044] ? aa_sk_perm+0x83c/0x970 [ 500.880515][T14044] ? packet_getsockopt+0xad0/0xad0 [ 500.885623][T14044] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 500.891080][T14044] ? aa_sock_msg_perm+0x94/0x150 [ 500.896010][T14044] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 500.901286][T14044] ? security_socket_sendmsg+0x80/0xa0 [ 500.906732][T14044] ? packet_getsockopt+0xad0/0xad0 [ 500.911835][T14044] ____sys_sendmsg+0x5ba/0x960 [ 500.916591][T14044] ? __lock_acquire+0x7d40/0x7d40 [ 500.921608][T14044] ? __asan_memset+0x22/0x40 [ 500.926189][T14044] ? __sys_sendmsg_sock+0x30/0x30 [ 500.931200][T14044] ? __import_iovec+0x5f2/0x850 [ 500.936052][T14044] ? import_iovec+0x73/0xa0 [ 500.940543][T14044] ___sys_sendmsg+0x2a6/0x360 [ 500.945207][T14044] ? get_pid_task+0x20/0x1e0 [ 500.949789][T14044] ? __sys_sendmsg+0x2a0/0x2a0 [ 500.954563][T14044] ? __lock_acquire+0x7d40/0x7d40 [ 500.959675][T14044] __se_sys_sendmsg+0x1c2/0x2b0 [ 500.964523][T14044] ? __x64_sys_sendmsg+0x80/0x80 [ 500.969474][T14044] ? lockdep_hardirqs_on+0x98/0x150 [ 500.974695][T14044] do_syscall_64+0x55/0xb0 [ 500.979109][T14044] ? clear_bhb_loop+0x40/0x90 [ 500.983779][T14044] ? clear_bhb_loop+0x40/0x90 [ 500.988440][T14044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.994327][T14044] RIP: 0033:0x7f2f0339ce59 [ 500.998731][T14044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.018328][T14044] RSP: 002b:00007f2f0430a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.026733][T14044] RAX: ffffffffffffffda RBX: 00007f2f03615fa0 RCX: 00007f2f0339ce59 [ 501.034693][T14044] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 501.042657][T14044] RBP: 00007f2f0430a090 R08: 0000000000000000 R09: 0000000000000000 [ 501.050617][T14044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.058595][T14044] R13: 00007f2f03616038 R14: 00007f2f03615fa0 R15: 00007ffef7f3aea8 [ 501.066570][T14044] [ 501.216694][T14051] bridge0: port 3(team0) entered disabled state [ 501.245711][T14051] bridge_slave_1: left allmulticast mode [ 501.252083][T14051] bridge_slave_1: left promiscuous mode [ 501.279228][T14051] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.304683][T14057] netlink: 'syz.1.2574': attribute type 29 has an invalid length. [ 501.557713][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.564532][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.586409][T14051] bridge_slave_0: left allmulticast mode [ 501.595659][T14051] bridge_slave_0: left promiscuous mode [ 501.627750][T14051] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.216496][T14059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2572'. [ 502.229719][T14057] netlink: 'syz.1.2574': attribute type 29 has an invalid length. [ 502.256453][T14062] netlink: 'syz.1.2574': attribute type 29 has an invalid length. [ 502.281893][T14068] netlink: 'syz.1.2574': attribute type 29 has an invalid length. [ 502.302618][T14066] netlink: 'syz.1.2574': attribute type 29 has an invalid length. [ 502.316241][T14075] netlink: 'syz.1.2574': attribute type 29 has an invalid length. [ 502.479096][T14084] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2582'. [ 503.634765][T14096] delete_channel: no stack [ 504.188771][T14086] mac80211_hwsim hwsim80 wlan0: entered promiscuous mode [ 504.198629][T14086] mac80211_hwsim hwsim80 wlan0: entered allmulticast mode [ 504.477821][T14107] bridge_slave_1: left allmulticast mode [ 504.483751][T14117] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2591'. [ 504.522660][T14107] bridge_slave_1: left promiscuous mode [ 504.556367][T14107] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.614724][T14107] bridge_slave_0: left allmulticast mode [ 504.628339][T14107] bridge_slave_0: left promiscuous mode [ 504.636622][T14107] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.865429][T14113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2587'. [ 504.887856][T14123] netlink: 'syz.3.2594': attribute type 10 has an invalid length. [ 504.920426][T14123] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2594'. [ 504.942009][T14123] batman_adv: batadv0: Adding interface: vlan1 [ 504.948754][T14123] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.989658][T14123] batman_adv: batadv0: Interface activated: vlan1 [ 504.992827][T14138] netlink: 'syz.0.2597': attribute type 29 has an invalid length. [ 505.030795][T14138] netlink: 'syz.0.2597': attribute type 29 has an invalid length. [ 505.042386][T14138] netlink: 'syz.0.2597': attribute type 29 has an invalid length. [ 506.508531][T14171] netlink: 'syz.3.2609': attribute type 29 has an invalid length. [ 506.535008][T14171] netlink: 'syz.3.2609': attribute type 29 has an invalid length. [ 506.552534][T14171] netlink: 'syz.3.2609': attribute type 29 has an invalid length. [ 506.621377][T14172] mac80211_hwsim hwsim78 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 508.011214][T14208] netlink: 'syz.0.2620': attribute type 29 has an invalid length. [ 508.042815][T14210] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2619'. [ 508.066606][T14210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.089126][T14208] netlink: 'syz.0.2620': attribute type 29 has an invalid length. [ 508.098061][T14213] netlink: 'syz.0.2620': attribute type 29 has an invalid length. [ 508.158546][T14214] mac80211_hwsim hwsim76 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 509.075917][T14225] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2626'. [ 509.089874][T14225] netlink: 'syz.3.2626': attribute type 29 has an invalid length. [ 509.112650][T14225] netlink: 'syz.3.2626': attribute type 29 has an invalid length. [ 509.134322][T14225] netlink: 'syz.3.2626': attribute type 29 has an invalid length. [ 509.527476][T14245] mac80211_hwsim hwsim73 wlan0: left promiscuous mode [ 509.543329][T14245] mac80211_hwsim hwsim73 wlan0: left allmulticast mode [ 509.563078][T14251] mac80211_hwsim hwsim73 wlan0: entered promiscuous mode [ 509.570175][T14251] mac80211_hwsim hwsim73 wlan0: entered allmulticast mode [ 509.953687][ T8081] wlan1: Trigger new scan to find an IBSS to join [ 512.410684][T14253] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 512.625428][T14268] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2640'. [ 512.628458][T14272] netlink: 'syz.0.2643': attribute type 29 has an invalid length. [ 512.648089][T14267] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2640'. [ 512.650875][T14272] netlink: 'syz.0.2643': attribute type 29 has an invalid length. [ 512.685395][T14273] netlink: 'syz.0.2643': attribute type 29 has an invalid length. [ 512.689474][T14267] netlink: 'syz.1.2640': attribute type 33 has an invalid length. [ 512.714348][T14267] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2640'. [ 512.729109][T14268] netlink: 'syz.1.2640': attribute type 33 has an invalid length. [ 512.737290][T14268] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2640'. [ 512.797817][T14267] netlink: set zone limit has 8 unknown bytes [ 512.865228][T14278] FAULT_INJECTION: forcing a failure. [ 512.865228][T14278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.892988][T14265] syzkaller0: entered promiscuous mode [ 512.898527][T14265] syzkaller0: entered allmulticast mode [ 512.900507][T14278] CPU: 1 PID: 14278 Comm: syz.0.2644 Not tainted syzkaller #0 [ 512.911582][T14278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 512.921664][T14278] Call Trace: [ 512.925060][T14278] [ 512.928015][T14278] dump_stack_lvl+0x18c/0x250 [ 512.932735][T14278] ? show_regs_print_info+0x20/0x20 [ 512.937969][T14278] ? load_image+0x420/0x420 [ 512.942505][T14278] ? __might_fault+0xaa/0x120 [ 512.947231][T14278] ? __lock_acquire+0x7d40/0x7d40 [ 512.952308][T14278] should_fail_ex+0x39d/0x4d0 [ 512.957046][T14278] _copy_from_iter+0x1d9/0x12e0 [ 512.961932][T14278] ? rep_movs_alternative+0x4a/0x90 [ 512.967169][T14278] ? _copy_from_iter+0x24e/0x12e0 [ 512.972228][T14278] ? __virt_addr_valid+0x18c/0x540 [ 512.977380][T14278] ? __lock_acquire+0x7d40/0x7d40 [ 512.982436][T14278] ? copyout_mc+0x70/0x70 [ 512.986804][T14278] ? copyout_mc+0x70/0x70 [ 512.991162][T14278] ? __virt_addr_valid+0x18c/0x540 [ 512.996319][T14278] ? page_copy_sane+0x4e/0x270 [ 513.001120][T14278] copy_page_from_iter+0x7b/0x100 [ 513.006178][T14278] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 513.012035][T14278] tun_get_user+0x15db/0x3ca0 [ 513.016766][T14278] ? aa_file_perm+0x11b/0xee0 [ 513.021485][T14278] ? rcu_read_unlock+0xa0/0xa0 [ 513.026300][T14278] ? tun_get+0x1c/0x2e0 [ 513.030488][T14278] ? __lock_acquire+0x7d40/0x7d40 [ 513.035555][T14278] ? tun_get+0x1c/0x2e0 [ 513.039759][T14278] tun_chr_write_iter+0x119/0x200 [ 513.044834][T14278] vfs_write+0x46c/0x990 [ 513.049554][T14278] ? file_end_write+0x250/0x250 [ 513.054446][T14278] ? __fget_files+0x43d/0x4b0 [ 513.059171][T14278] ? __fdget_pos+0x1d8/0x330 [ 513.063787][T14278] ? ksys_write+0x75/0x260 [ 513.068245][T14278] ksys_write+0x150/0x260 [ 513.072612][T14278] ? __ia32_sys_read+0x90/0x90 [ 513.077416][T14278] ? lockdep_hardirqs_on+0x98/0x150 [ 513.082653][T14278] do_syscall_64+0x55/0xb0 [ 513.087094][T14278] ? clear_bhb_loop+0x40/0x90 [ 513.091790][T14278] ? clear_bhb_loop+0x40/0x90 [ 513.096509][T14278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.102434][T14278] RIP: 0033:0x7fa6f699ce59 [ 513.106881][T14278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.126515][T14278] RSP: 002b:00007fa6f4bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 513.134967][T14278] RAX: ffffffffffffffda RBX: 00007fa6f6c15fa0 RCX: 00007fa6f699ce59 [ 513.142966][T14278] RDX: 000000000000fdef RSI: 0000200000000580 RDI: 00000000000000c8 [ 513.150966][T14278] RBP: 00007fa6f4bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 513.158965][T14278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 513.166962][T14278] R13: 00007fa6f6c16038 R14: 00007fa6f6c15fa0 R15: 00007ffe89e2d108 [ 513.174990][T14278] [ 513.231170][T14281] delete_channel: no stack [ 513.480611][T14290] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2648'. [ 513.829523][T14301] netlink: 'syz.1.2652': attribute type 29 has an invalid length. [ 514.992235][ T49] wlan1: Trigger new scan to find an IBSS to join [ 514.998807][ T8081] wlan1: Trigger new scan to find an IBSS to join [ 515.091869][ T49] wlan1: Creating new IBSS network, BSSID 9e:25:90:c2:3e:88 [ 515.427368][T14292] mac80211_hwsim hwsim74 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 515.442547][T14301] netlink: 'syz.1.2652': attribute type 29 has an invalid length. [ 515.553291][T14307] netlink: 'syz.1.2654': attribute type 17 has an invalid length. [ 515.580449][T14307] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2654'. [ 515.605334][T14307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.633659][T14305] mac80211_hwsim hwsim75 wlan0: left promiscuous mode [ 515.641377][T14305] mac80211_hwsim hwsim75 wlan0: left allmulticast mode [ 518.494785][T14310] mac80211_hwsim hwsim77 wlan0: left promiscuous mode [ 518.510636][T14310] mac80211_hwsim hwsim77 wlan0: left allmulticast mode [ 518.571210][T14313] mac80211_hwsim hwsim75 wlan0: entered promiscuous mode [ 518.593786][T14313] mac80211_hwsim hwsim75 wlan0: entered allmulticast mode [ 518.614326][T14314] mac80211_hwsim hwsim77 wlan0: entered promiscuous mode [ 518.630299][T14314] mac80211_hwsim hwsim77 wlan0: entered allmulticast mode [ 518.823663][T14335] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2663'. [ 518.865526][T14337] netlink: 'syz.3.2662': attribute type 29 has an invalid length. [ 518.896743][T14337] netlink: 'syz.3.2662': attribute type 29 has an invalid length. [ 518.906316][T14337] netlink: 'syz.3.2662': attribute type 29 has an invalid length. [ 518.990555][ T4547] wlan1: Trigger new scan to find an IBSS to join [ 519.388940][T14353] mac80211_hwsim hwsim80 wlan0: left promiscuous mode [ 519.403720][T14353] mac80211_hwsim hwsim80 wlan0: left allmulticast mode [ 519.456319][T14359] mac80211_hwsim hwsim80 wlan0: entered promiscuous mode [ 519.472582][T14359] mac80211_hwsim hwsim80 wlan0: entered allmulticast mode [ 519.545734][T14363] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2672'. [ 519.635051][T14365] netlink: 'syz.0.2673': attribute type 29 has an invalid length. [ 519.655261][T14365] netlink: 'syz.0.2673': attribute type 29 has an invalid length. [ 519.681634][T14365] netlink: 'syz.0.2673': attribute type 29 has an invalid length. [ 520.992210][ T4547] wlan1: Creating new IBSS network, BSSID 62:e5:92:e3:15:63 [ 522.461163][T14376] mac80211_hwsim hwsim77 wlan0: left promiscuous mode [ 522.468289][T14376] mac80211_hwsim hwsim77 wlan0: left allmulticast mode [ 522.505064][T14376] mac80211_hwsim hwsim77 wlan0: entered promiscuous mode [ 522.517424][T14376] mac80211_hwsim hwsim77 wlan0: entered allmulticast mode [ 525.528682][T14396] FAULT_INJECTION: forcing a failure. [ 525.528682][T14396] name failslab, interval 1, probability 0, space 0, times 0 [ 525.562782][T14396] CPU: 0 PID: 14396 Comm: syz.0.2683 Not tainted syzkaller #0 [ 525.570301][T14396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 525.580388][T14396] Call Trace: [ 525.583708][T14396] [ 525.586661][T14396] dump_stack_lvl+0x18c/0x250 [ 525.591671][T14396] ? show_regs_print_info+0x20/0x20 [ 525.596898][T14396] ? load_image+0x420/0x420 [ 525.601406][T14396] ? __lock_acquire+0x7d40/0x7d40 [ 525.606430][T14396] ? __asan_memset+0x22/0x40 [ 525.611023][T14396] should_fail_ex+0x39d/0x4d0 [ 525.615708][T14396] should_failslab+0x9/0x20 [ 525.620215][T14396] slab_pre_alloc_hook+0x59/0x310 [ 525.625251][T14396] kmem_cache_alloc+0x5a/0x2d0 [ 525.630014][T14396] ? security_inode_alloc+0x34/0x110 [ 525.635308][T14396] security_inode_alloc+0x34/0x110 [ 525.640421][T14396] inode_init_always+0x8fc/0xc90 [ 525.645359][T14396] new_inode_pseudo+0x95/0x1d0 [ 525.650125][T14396] __sock_create+0x12d/0x940 [ 525.654712][T14396] ? __might_fault+0xaa/0x120 [ 525.659385][T14396] ? __might_fault+0xc6/0x120 [ 525.664057][T14396] __sys_socketpair+0x1c1/0x550 [ 525.668907][T14396] __x64_sys_socketpair+0x9b/0xb0 [ 525.673924][T14396] do_syscall_64+0x55/0xb0 [ 525.678332][T14396] ? clear_bhb_loop+0x40/0x90 [ 525.683003][T14396] ? clear_bhb_loop+0x40/0x90 [ 525.687672][T14396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.693668][T14396] RIP: 0033:0x7fa6f699ce59 [ 525.698091][T14396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.717690][T14396] RSP: 002b:00007fa6f4bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 525.726357][T14396] RAX: ffffffffffffffda RBX: 00007fa6f6c15fa0 RCX: 00007fa6f699ce59 [ 525.734370][T14396] RDX: 000000000000000b RSI: 0000000000000002 RDI: 0000000000000010 [ 525.742335][T14396] RBP: 00007fa6f4bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 525.750746][T14396] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.759318][T14396] R13: 00007fa6f6c16038 R14: 00007fa6f6c15fa0 R15: 00007ffe89e2d108 [ 525.767318][T14396] [ 525.776575][T14399] mac80211_hwsim hwsim77 wlan0: left promiscuous mode [ 525.782363][T14400] netlink: 'syz.1.2682': attribute type 29 has an invalid length. [ 525.784044][T14399] mac80211_hwsim hwsim77 wlan0: left allmulticast mode [ 525.804207][T14396] socket: no more sockets [ 525.822596][T14401] mac80211_hwsim hwsim77 wlan0: entered promiscuous mode [ 525.834621][T14401] mac80211_hwsim hwsim77 wlan0: entered allmulticast mode [ 525.858231][T14400] netlink: 'syz.1.2682': attribute type 29 has an invalid length. [ 525.867432][T14404] netlink: 'syz.1.2682': attribute type 29 has an invalid length. [ 525.887642][T14403] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2685'. [ 529.116152][T14434] netlink: 'syz.1.2695': attribute type 29 has an invalid length. [ 531.357881][T14428] mac80211_hwsim hwsim75 wlan0: left promiscuous mode [ 531.369444][T14428] mac80211_hwsim hwsim75 wlan0: left allmulticast mode [ 531.421290][T14434] netlink: 'syz.1.2695': attribute type 29 has an invalid length. [ 531.431633][T14436] mac80211_hwsim hwsim75 wlan0: entered promiscuous mode [ 531.438738][T14436] mac80211_hwsim hwsim75 wlan0: entered allmulticast mode [ 531.583718][T14446] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2698'. [ 531.618266][T14449] netlink: 'syz.3.2702': attribute type 10 has an invalid length. [ 531.629818][T14449] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 531.728541][T14451] mac80211_hwsim hwsim77 wlan0: left promiscuous mode [ 531.735995][T14451] mac80211_hwsim hwsim77 wlan0: left allmulticast mode [ 531.891937][T14456] FAULT_INJECTION: forcing a failure. [ 531.891937][T14456] name failslab, interval 1, probability 0, space 0, times 0 [ 531.930551][T14456] CPU: 1 PID: 14456 Comm: syz.3.2703 Not tainted syzkaller #0 [ 531.938054][T14456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 531.948414][T14456] Call Trace: [ 531.951714][T14456] [ 531.954678][T14456] dump_stack_lvl+0x18c/0x250 [ 531.959380][T14456] ? show_regs_print_info+0x20/0x20 [ 531.964588][T14456] ? load_image+0x420/0x420 [ 531.969082][T14456] ? __might_sleep+0xe0/0xe0 [ 531.973665][T14456] ? __lock_acquire+0x7d40/0x7d40 [ 531.978689][T14456] should_fail_ex+0x39d/0x4d0 [ 531.983401][T14456] should_failslab+0x9/0x20 [ 531.987921][T14456] slab_pre_alloc_hook+0x59/0x310 [ 531.992961][T14456] ? tomoyo_encode+0x28b/0x540 [ 531.997730][T14456] ? tomoyo_encode+0x28b/0x540 [ 532.002495][T14456] __kmem_cache_alloc_node+0x53/0x250 [ 532.007878][T14456] ? tomoyo_encode+0x28b/0x540 [ 532.012637][T14456] __kmalloc+0xa4/0x230 [ 532.016796][T14456] tomoyo_encode+0x28b/0x540 [ 532.021388][T14456] tomoyo_realpath_from_path+0x592/0x5d0 [ 532.027110][T14456] tomoyo_path_number_perm+0x248/0x620 [ 532.032564][T14456] ? tomoyo_path_number_perm+0x217/0x620 [ 532.038196][T14456] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 532.043655][T14456] ? ksys_write+0x1c4/0x260 [ 532.048210][T14456] ? __fget_files+0x28/0x4b0 [ 532.052798][T14456] ? __fget_files+0x28/0x4b0 [ 532.057395][T14456] security_file_ioctl+0x70/0xa0 [ 532.062333][T14456] __se_sys_ioctl+0x48/0x170 [ 532.066924][T14456] do_syscall_64+0x55/0xb0 [ 532.071338][T14456] ? clear_bhb_loop+0x40/0x90 [ 532.076010][T14456] ? clear_bhb_loop+0x40/0x90 [ 532.080682][T14456] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 532.086584][T14456] RIP: 0033:0x7f829eb9ce59 [ 532.091003][T14456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.110604][T14456] RSP: 002b:00007f829f994028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.119010][T14456] RAX: ffffffffffffffda RBX: 00007f829ee16090 RCX: 00007f829eb9ce59 [ 532.126973][T14456] RDX: 0000200000000080 RSI: 0000000000008912 RDI: 0000000000000007 [ 532.134934][T14456] RBP: 00007f829f994090 R08: 0000000000000000 R09: 0000000000000000 [ 532.142900][T14456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.150862][T14456] R13: 00007f829ee16128 R14: 00007f829ee16090 R15: 00007ffd6f16d268 [ 532.158840][T14456] [ 532.177756][T14456] ERROR: Out of memory at tomoyo_realpath_from_path. [ 533.950403][ T8074] wlan1: Trigger new scan to find an IBSS to join [ 535.006596][T14477] netlink: 'syz.2.2708': attribute type 29 has an invalid length. [ 535.030483][T14477] netlink: 'syz.2.2708': attribute type 29 has an invalid length. [ 535.050874][T14477] netlink: 'syz.2.2708': attribute type 29 has an invalid length. [ 537.967017][T14485] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2713'. [ 537.983917][T14487] FAULT_INJECTION: forcing a failure. [ 537.983917][T14487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.010425][T14487] CPU: 0 PID: 14487 Comm: syz.2.2712 Not tainted syzkaller #0 [ 538.017941][T14487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 538.028015][T14487] Call Trace: [ 538.031312][T14487] [ 538.034256][T14487] dump_stack_lvl+0x18c/0x250 [ 538.038961][T14487] ? show_regs_print_info+0x20/0x20 [ 538.044184][T14487] ? load_image+0x420/0x420 [ 538.048728][T14487] ? __might_fault+0xaa/0x120 [ 538.053426][T14487] ? __lock_acquire+0x7d40/0x7d40 [ 538.058489][T14487] should_fail_ex+0x39d/0x4d0 [ 538.063197][T14487] _copy_from_iter+0x1d9/0x12e0 [ 538.068068][T14487] ? rep_movs_alternative+0x4a/0x90 [ 538.073294][T14487] ? _copy_from_iter+0x24e/0x12e0 [ 538.078341][T14487] ? __virt_addr_valid+0x18c/0x540 [ 538.083482][T14487] ? __lock_acquire+0x7d40/0x7d40 [ 538.088531][T14487] ? copyout_mc+0x70/0x70 [ 538.092889][T14487] ? copyout_mc+0x70/0x70 [ 538.097250][T14487] ? __virt_addr_valid+0x18c/0x540 [ 538.102376][T14487] ? page_copy_sane+0x4e/0x270 [ 538.107135][T14487] copy_page_from_iter+0x7b/0x100 [ 538.112163][T14487] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 538.117995][T14487] tun_get_user+0x15db/0x3ca0 [ 538.122702][T14487] ? aa_file_perm+0x11b/0xee0 [ 538.127923][T14487] ? rcu_read_unlock+0xa0/0xa0 [ 538.132714][T14487] ? tun_get+0x1c/0x2e0 [ 538.136892][T14487] ? __lock_acquire+0x7d40/0x7d40 [ 538.141939][T14487] ? tun_get+0x1c/0x2e0 [ 538.146120][T14487] tun_chr_write_iter+0x119/0x200 [ 538.151160][T14487] vfs_write+0x46c/0x990 [ 538.155424][T14487] ? file_end_write+0x250/0x250 [ 538.160298][T14487] ? __fget_files+0x43d/0x4b0 [ 538.164990][T14487] ? __fdget_pos+0x1d8/0x330 [ 538.169584][T14487] ? ksys_write+0x75/0x260 [ 538.174016][T14487] ksys_write+0x150/0x260 [ 538.178363][T14487] ? __ia32_sys_read+0x90/0x90 [ 538.183141][T14487] ? lockdep_hardirqs_on+0x98/0x150 [ 538.188359][T14487] do_syscall_64+0x55/0xb0 [ 538.192779][T14487] ? clear_bhb_loop+0x40/0x90 [ 538.197462][T14487] ? clear_bhb_loop+0x40/0x90 [ 538.202140][T14487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 538.208040][T14487] RIP: 0033:0x7fe41379ce59 [ 538.212468][T14487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.232078][T14487] RSP: 002b:00007fe4145ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 538.240504][T14487] RAX: ffffffffffffffda RBX: 00007fe413a15fa0 RCX: 00007fe41379ce59 [ 538.248479][T14487] RDX: 000000000000fdef RSI: 0000200000000580 RDI: 00000000000000c8 [ 538.256457][T14487] RBP: 00007fe4145ad090 R08: 0000000000000000 R09: 0000000000000000 [ 538.264431][T14487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 538.272408][T14487] R13: 00007fe413a16038 R14: 00007fe413a15fa0 R15: 00007ffef1c30058 [ 538.280399][T14487] [ 538.295067][T14491] mac80211_hwsim hwsim73 wlan0: left promiscuous mode [ 538.313246][T14491] mac80211_hwsim hwsim73 wlan0: left allmulticast mode [ 539.950512][ T8081] wlan1: Trigger new scan to find an IBSS to join [ 540.217931][T14506] netlink: 'syz.2.2719': attribute type 29 has an invalid length. [ 540.232684][T14506] netlink: 'syz.2.2719': attribute type 29 has an invalid length. [ 540.245892][T14506] netlink: 'syz.2.2719': attribute type 29 has an invalid length. [ 540.504657][T14517] netlink: 'syz.1.2723': attribute type 13 has an invalid length. [ 540.541063][T14517] netlink: 24643 bytes leftover after parsing attributes in process `syz.1.2723'. [ 540.566855][T14518] netlink: 'syz.1.2723': attribute type 13 has an invalid length. [ 540.595155][T14518] netlink: 24643 bytes leftover after parsing attributes in process `syz.1.2723'. [ 540.779095][T14530] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2726'. [ 540.881425][T14536] netlink: 'syz.2.2729': attribute type 29 has an invalid length. [ 540.889701][T14536] netlink: 'syz.2.2729': attribute type 29 has an invalid length. [ 540.899742][T14536] netlink: 'syz.2.2729': attribute type 29 has an invalid length. [ 540.939334][ T8074] wlan1: Creating new IBSS network, BSSID 86:9d:9b:32:f8:4f [ 541.064245][T14534] mac80211_hwsim hwsim75 wlan0: left promiscuous mode [ 541.080445][T14534] mac80211_hwsim hwsim75 wlan0: left allmulticast mode [ 541.183311][T14550] FAULT_INJECTION: forcing a failure. [ 541.183311][T14550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.249656][T14550] CPU: 1 PID: 14550 Comm: syz.0.2732 Not tainted syzkaller #0 [ 541.257169][T14550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 541.267239][T14550] Call Trace: [ 541.270523][T14550] [ 541.273448][T14550] dump_stack_lvl+0x18c/0x250 [ 541.278127][T14550] ? show_regs_print_info+0x20/0x20 [ 541.283321][T14550] ? load_image+0x420/0x420 [ 541.287821][T14550] ? __lock_acquire+0x7d40/0x7d40 [ 541.292845][T14550] should_fail_ex+0x39d/0x4d0 [ 541.297526][T14550] _copy_from_user+0x2f/0xe0 [ 541.302116][T14550] __copy_msghdr+0x3bb/0x580 [ 541.306718][T14550] ___sys_sendmsg+0x214/0x360 [ 541.311395][T14550] ? get_pid_task+0x20/0x1e0 [ 541.315989][T14550] ? __sys_sendmsg+0x2a0/0x2a0 [ 541.320763][T14550] ? __lock_acquire+0x7d40/0x7d40 [ 541.325803][T14550] __se_sys_sendmsg+0x1c2/0x2b0 [ 541.332565][T14550] ? __x64_sys_sendmsg+0x80/0x80 [ 541.337525][T14550] ? lockdep_hardirqs_on+0x98/0x150 [ 541.342731][T14550] do_syscall_64+0x55/0xb0 [ 541.347147][T14550] ? clear_bhb_loop+0x40/0x90 [ 541.351822][T14550] ? clear_bhb_loop+0x40/0x90 [ 541.356497][T14550] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 541.362390][T14550] RIP: 0033:0x7fa6f699ce59 [ 541.366798][T14550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.386401][T14550] RSP: 002b:00007fa6f4bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.394812][T14550] RAX: ffffffffffffffda RBX: 00007fa6f6c16090 RCX: 00007fa6f699ce59 [ 541.402778][T14550] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000006 [ 541.410750][T14550] RBP: 00007fa6f4bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 541.418718][T14550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.426680][T14550] R13: 00007fa6f6c16128 R14: 00007fa6f6c16090 R15: 00007ffe89e2d108 [ 541.434662][T14550] [ 541.683570][T14559] netlink: 'syz.1.2734': attribute type 8 has an invalid length. [ 541.704319][T14559] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2734'. [ 543.875464][T14558] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2734'. [ 543.901575][T14558] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2734'. [ 543.923370][T14558] bond0: (slave bond_slave_0): Releasing backup interface [ 543.947198][T14558] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 544.153831][T14571] netlink: 'syz.1.2739': attribute type 29 has an invalid length. [ 544.273581][T14575] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2740'. [ 544.430628][T14584] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2744'. [ 544.736312][T14582] syzkaller0: entered promiscuous mode [ 544.752930][T14582] syzkaller0: entered allmulticast mode [ 547.954500][T14608] validate_nla: 3 callbacks suppressed [ 547.954519][T14608] netlink: 'syz.3.2750': attribute type 29 has an invalid length. [ 549.266293][T14618] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2753'. [ 550.428748][T14608] netlink: 'syz.3.2750': attribute type 29 has an invalid length. [ 551.598565][T14643] netlink: 'syz.3.2762': attribute type 29 has an invalid length. [ 551.611312][T14643] netlink: 'syz.3.2762': attribute type 29 has an invalid length. [ 551.624212][T14643] netlink: 'syz.3.2762': attribute type 29 has an invalid length. [ 551.709361][T14645] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2763'. [ 552.307125][T14661] netlink: 'syz.3.2766': attribute type 39 has an invalid length. [ 553.599898][T14668] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2768'. [ 553.803848][T14678] netlink: 'syz.0.2771': attribute type 29 has an invalid length. [ 553.835814][T14678] netlink: 'syz.0.2771': attribute type 29 has an invalid length. [ 553.865043][T14678] netlink: 'syz.0.2771': attribute type 29 has an invalid length. [ 553.989691][T14684] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2775'. [ 555.232727][T14711] FAULT_INJECTION: forcing a failure. [ 555.232727][T14711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.272445][T14711] CPU: 0 PID: 14711 Comm: syz.0.2783 Not tainted syzkaller #0 [ 555.280012][T14711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 555.290111][T14711] Call Trace: [ 555.293440][T14711] [ 555.296409][T14711] dump_stack_lvl+0x18c/0x250 [ 555.301145][T14711] ? show_regs_print_info+0x20/0x20 [ 555.306390][T14711] ? load_image+0x420/0x420 [ 555.310941][T14711] ? __might_fault+0xaa/0x120 [ 555.315667][T14711] ? __lock_acquire+0x7d40/0x7d40 [ 555.320928][T14711] should_fail_ex+0x39d/0x4d0 [ 555.325673][T14711] _copy_from_iter+0x1d9/0x12e0 [ 555.330579][T14711] ? rep_movs_alternative+0x4a/0x90 [ 555.335827][T14711] ? _copy_from_iter+0x24e/0x12e0 [ 555.340902][T14711] ? __virt_addr_valid+0x18c/0x540 [ 555.346150][T14711] ? __lock_acquire+0x7d40/0x7d40 [ 555.351219][T14711] ? copyout_mc+0x70/0x70 [ 555.355612][T14711] ? copyout_mc+0x70/0x70 [ 555.359985][T14711] ? __virt_addr_valid+0x18c/0x540 [ 555.365162][T14711] ? page_copy_sane+0x16a/0x270 [ 555.370070][T14711] copy_page_from_iter+0x7b/0x100 [ 555.375151][T14711] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 555.381054][T14711] tun_get_user+0x15db/0x3ca0 [ 555.385837][T14711] ? aa_file_perm+0x11b/0xee0 [ 555.391112][T14711] ? rcu_read_unlock+0xa0/0xa0 [ 555.396024][T14711] ? tun_get+0x1c/0x2e0 [ 555.400339][T14711] ? __lock_acquire+0x7d40/0x7d40 [ 555.405447][T14711] ? tun_get+0x1c/0x2e0 [ 555.409698][T14711] tun_chr_write_iter+0x119/0x200 [ 555.414788][T14711] vfs_write+0x46c/0x990 [ 555.419105][T14711] ? file_end_write+0x250/0x250 [ 555.424023][T14711] ? __fget_files+0x43d/0x4b0 [ 555.428779][T14711] ? __fdget_pos+0x1d8/0x330 [ 555.433400][T14711] ? ksys_write+0x75/0x260 [ 555.437866][T14711] ksys_write+0x150/0x260 [ 555.442270][T14711] ? __ia32_sys_read+0x90/0x90 [ 555.447076][T14711] ? lockdep_hardirqs_on+0x98/0x150 [ 555.452312][T14711] do_syscall_64+0x55/0xb0 [ 555.456751][T14711] ? clear_bhb_loop+0x40/0x90 [ 555.461440][T14711] ? clear_bhb_loop+0x40/0x90 [ 555.466137][T14711] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 555.472052][T14711] RIP: 0033:0x7fa6f699ce59 [ 555.476486][T14711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.496105][T14711] RSP: 002b:00007fa6f4bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 555.504540][T14711] RAX: ffffffffffffffda RBX: 00007fa6f6c15fa0 RCX: 00007fa6f699ce59 [ 555.512521][T14711] RDX: 000000000000fdef RSI: 0000200000000580 RDI: 00000000000000c8 [ 555.520503][T14711] RBP: 00007fa6f4bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 555.528485][T14711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 555.536468][T14711] R13: 00007fa6f6c16038 R14: 00007fa6f6c15fa0 R15: 00007ffe89e2d108 [ 555.544490][T14711] [ 555.998638][T14702] syzkaller0: entered promiscuous mode [ 556.065880][T14702] syzkaller0: entered allmulticast mode [ 556.093044][T14708] netlink: 'syz.2.2780': attribute type 39 has an invalid length. [ 556.111720][T14716] netlink: 'syz.0.2784': attribute type 29 has an invalid length. [ 556.351887][T14716] netlink: 'syz.0.2784': attribute type 29 has an invalid length. [ 556.373444][T14717] netlink: 'syz.0.2784': attribute type 29 has an invalid length. [ 556.450519][T14721] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2786'. [ 558.539882][T14740] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2792'. [ 559.090685][T14739] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2792'. [ 559.981714][T14736] Bluetooth: hci0: command 0x0406 tx timeout [ 562.999892][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.006686][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.572568][T14739] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2792'. [ 564.781926][T14752] netlink: 'syz.1.2796': attribute type 29 has an invalid length. [ 564.798807][T14752] netlink: 'syz.1.2796': attribute type 29 has an invalid length. [ 564.820165][T14752] netlink: 'syz.1.2796': attribute type 29 has an invalid length. [ 565.085566][T14766] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2798'. [ 568.542420][T14778] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2804'. [ 568.695121][T14782] netlink: 'syz.3.2803': attribute type 3 has an invalid length. [ 568.768683][T14785] netlink: 'syz.2.2806': attribute type 29 has an invalid length. [ 568.798158][T14785] netlink: 'syz.2.2806': attribute type 29 has an invalid length. [ 568.850545][T14782] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2803'. [ 568.950011][T14781] syzkaller0: entered promiscuous mode [ 568.960842][T14781] syzkaller0: entered allmulticast mode [ 568.969817][T14788] netlink: 'syz.2.2806': attribute type 29 has an invalid length. [ 568.980142][T14789] netlink: 'syz.0.2805': attribute type 39 has an invalid length. [ 573.242247][ T4547] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 575.151807][T14802] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2812'. [ 575.310995][T14736] Bluetooth: hci1: command 0x0406 tx timeout [ 575.470859][T14818] netlink: 'syz.3.2816': attribute type 29 has an invalid length. [ 575.487629][T14819] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2815'. [ 575.498818][T14818] netlink: 'syz.3.2816': attribute type 29 has an invalid length. [ 575.514159][T14818] netlink: 'syz.3.2816': attribute type 29 has an invalid length. [ 575.743311][T14827] mac80211_hwsim hwsim73 wlan0: entered promiscuous mode [ 575.760835][T14827] mac80211_hwsim hwsim73 wlan0: entered allmulticast mode [ 576.024051][T14834] netlink: 'syz.2.2820': attribute type 3 has an invalid length. [ 576.040569][T14834] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2820'. [ 579.108186][T14847] netlink: 'syz.2.2826': attribute type 29 has an invalid length. [ 579.157185][T14847] netlink: 'syz.2.2826': attribute type 29 has an invalid length. [ 579.187955][T14847] netlink: 'syz.2.2826': attribute type 29 has an invalid length. [ 580.233992][T14856] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2829'. [ 580.371760][T14862] mac80211_hwsim hwsim77 wlan0: entered promiscuous mode [ 580.380932][T14862] mac80211_hwsim hwsim77 wlan0: entered allmulticast mode [ 581.164288][T14868] netlink: 'syz.0.2833': attribute type 3 has an invalid length. [ 581.184734][T14868] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2833'. [ 582.035610][T14874] netlink: 'syz.1.2835': attribute type 29 has an invalid length. [ 582.090828][T14874] netlink: 'syz.1.2835': attribute type 29 has an invalid length. [ 582.099247][T14875] netlink: 'syz.1.2835': attribute type 29 has an invalid length. [ 583.386039][T14880] netlink: 'syz.3.2837': attribute type 29 has an invalid length. [ 583.399077][T14880] netlink: 'syz.3.2837': attribute type 29 has an invalid length. [ 583.415277][T14880] netlink: 'syz.3.2837': attribute type 29 has an invalid length. [ 583.642728][T14885] FAULT_INJECTION: forcing a failure. [ 583.642728][T14885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.684775][T14885] CPU: 1 PID: 14885 Comm: syz.2.2839 Not tainted syzkaller #0 [ 583.692325][T14885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 583.702403][T14885] Call Trace: [ 583.705704][T14885] [ 583.708225][T14890] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2841'. [ 583.708634][T14885] dump_stack_lvl+0x18c/0x250 [ 583.722608][T14885] ? show_regs_print_info+0x20/0x20 [ 583.727826][T14885] ? load_image+0x420/0x420 [ 583.732359][T14885] ? __might_fault+0xaa/0x120 [ 583.737062][T14885] ? __lock_acquire+0x7d40/0x7d40 [ 583.742120][T14885] should_fail_ex+0x39d/0x4d0 [ 583.746833][T14885] _copy_from_iter+0x1d9/0x12e0 [ 583.751694][T14885] ? rep_movs_alternative+0x4a/0x90 [ 583.756899][T14885] ? _copy_from_iter+0x24e/0x12e0 [ 583.761930][T14885] ? __virt_addr_valid+0x18c/0x540 [ 583.767041][T14885] ? __lock_acquire+0x7d40/0x7d40 [ 583.772066][T14885] ? copyout_mc+0x70/0x70 [ 583.776401][T14885] ? copyout_mc+0x70/0x70 [ 583.780821][T14885] ? __virt_addr_valid+0x18c/0x540 [ 583.785937][T14885] ? page_copy_sane+0x16a/0x270 [ 583.790798][T14885] copy_page_from_iter+0x7b/0x100 [ 583.795825][T14885] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 583.801640][T14885] tun_get_user+0x15db/0x3ca0 [ 583.806329][T14885] ? aa_file_perm+0x11b/0xee0 [ 583.811143][T14885] ? rcu_read_unlock+0xa0/0xa0 [ 583.816022][T14885] ? tun_get+0x1c/0x2e0 [ 583.820288][T14885] ? __lock_acquire+0x7d40/0x7d40 [ 583.825326][T14885] ? tun_get+0x1c/0x2e0 [ 583.829493][T14885] tun_chr_write_iter+0x119/0x200 [ 583.834531][T14885] vfs_write+0x46c/0x990 [ 583.838793][T14885] ? file_end_write+0x250/0x250 [ 583.843654][T14885] ? __fget_files+0x43d/0x4b0 [ 583.848369][T14885] ? __fdget_pos+0x1d8/0x330 [ 583.852984][T14885] ? ksys_write+0x75/0x260 [ 583.857502][T14885] ksys_write+0x150/0x260 [ 583.861838][T14885] ? __ia32_sys_read+0x90/0x90 [ 583.866612][T14885] ? lockdep_hardirqs_on+0x98/0x150 [ 583.871832][T14885] do_syscall_64+0x55/0xb0 [ 583.876251][T14885] ? clear_bhb_loop+0x40/0x90 [ 583.880924][T14885] ? clear_bhb_loop+0x40/0x90 [ 583.885596][T14885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 583.891513][T14885] RIP: 0033:0x7fe41379ce59 [ 583.895925][T14885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.915528][T14885] RSP: 002b:00007fe4145ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 583.924112][T14885] RAX: ffffffffffffffda RBX: 00007fe413a15fa0 RCX: 00007fe41379ce59 [ 583.932079][T14885] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 583.940043][T14885] RBP: 00007fe4145ad090 R08: 0000000000000000 R09: 0000000000000000 [ 583.948024][T14885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 583.956005][T14885] R13: 00007fe413a16038 R14: 00007fe413a15fa0 R15: 00007ffef1c30058 [ 583.964000][T14885] [ 584.423407][T14900] netlink: 'syz.0.2844': attribute type 29 has an invalid length. [ 584.441890][T14900] netlink: 'syz.0.2844': attribute type 29 has an invalid length. [ 584.463939][T14900] netlink: 'syz.0.2844': attribute type 29 has an invalid length. [ 584.882572][T14909] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.2848'. [ 585.094754][T14912] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2849'. [ 585.143085][T14913] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2849'. [ 585.652416][T14912] netlink: 192188 bytes leftover after parsing attributes in process `syz.2.2849'. [ 585.710903][T14912] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 586.035073][T14925] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2852'. [ 586.275611][T14931] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.2855'. [ 586.868553][T14951] batman_adv: The newly added mac address (6e:3a:20:30:0a:62) already exists on: batadv_slave_0 [ 586.892744][T14951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.987946][T14959] validate_nla: 5 callbacks suppressed [ 587.987965][T14959] netlink: 'syz.3.2863': attribute type 29 has an invalid length. [ 588.087052][T14959] netlink: 'syz.3.2863': attribute type 29 has an invalid length. [ 588.151458][T14960] netlink: 'syz.3.2863': attribute type 29 has an invalid length. [ 588.777635][T14964] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2865'. [ 589.433934][T14966] FAULT_INJECTION: forcing a failure. [ 589.433934][T14966] name failslab, interval 1, probability 0, space 0, times 0 [ 589.447427][T14966] CPU: 1 PID: 14966 Comm: syz.3.2867 Not tainted syzkaller #0 [ 589.454959][T14966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 589.465091][T14966] Call Trace: [ 589.468427][T14966] [ 589.471424][T14966] dump_stack_lvl+0x18c/0x250 [ 589.476187][T14966] ? show_regs_print_info+0x20/0x20 [ 589.481442][T14966] ? load_image+0x420/0x420 [ 589.485985][T14966] ? mark_lock+0x94/0x320 [ 589.490382][T14966] ? __lock_acquire+0x1347/0x7d40 [ 589.495485][T14966] should_fail_ex+0x39d/0x4d0 [ 589.500247][T14966] should_failslab+0x9/0x20 [ 589.504808][T14966] slab_pre_alloc_hook+0x59/0x310 [ 589.509912][T14966] kmem_cache_alloc+0x5a/0x2d0 [ 589.514730][T14966] ? radix_tree_node_alloc+0x7e/0x3a0 [ 589.520208][T14966] radix_tree_node_alloc+0x7e/0x3a0 [ 589.525683][T14966] idr_get_free+0x2b3/0xa60 [ 589.530327][T14966] idr_alloc_cyclic+0x27b/0x5d0 [ 589.535267][T14966] ? idr_alloc+0x2f0/0x2f0 [ 589.539735][T14966] ? do_raw_spin_lock+0x11f/0x2c0 [ 589.544830][T14966] ? __radix_tree_preload+0x82/0x880 [ 589.550179][T14966] ? btf_alloc_id+0x30/0x2d0 [ 589.554843][T14966] btf_alloc_id+0x4f/0x2d0 [ 589.559311][T14966] btf_new_fd+0x81b/0x9f0 [ 589.563727][T14966] ? bpf_btf_show_fdinfo+0x80/0x80 [ 589.568897][T14966] ? capable+0x88/0xe0 [ 589.573036][T14966] __sys_bpf+0x670/0x890 [ 589.577331][T14966] ? bpf_link_show_fdinfo+0x390/0x390 [ 589.582818][T14966] ? lock_chain_count+0x20/0x20 [ 589.587779][T14966] __x64_sys_bpf+0x7c/0x90 [ 589.592243][T14966] do_syscall_64+0x55/0xb0 [ 589.596691][T14966] ? clear_bhb_loop+0x40/0x90 [ 589.601398][T14966] ? clear_bhb_loop+0x40/0x90 [ 589.606125][T14966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 589.612061][T14966] RIP: 0033:0x7f829eb9ce59 [ 589.616520][T14966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.636164][T14966] RSP: 002b:00007f829f9b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 589.644625][T14966] RAX: ffffffffffffffda RBX: 00007f829ee15fa0 RCX: 00007f829eb9ce59 [ 589.652631][T14966] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000012 [ 589.660637][T14966] RBP: 00007f829f9b5090 R08: 0000000000000000 R09: 0000000000000000 [ 589.668639][T14966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 589.676640][T14966] R13: 00007f829ee16038 R14: 00007f829ee15fa0 R15: 00007ffd6f16d268 [ 589.684719][T14966] [ 590.374689][T14974] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2869'. [ 590.704874][T14736] Bluetooth: hci4: command 0x0406 tx timeout [ 590.712860][T14974] netlink: zone id is out of range [ 590.718008][T14974] netlink: zone id is out of range [ 590.738804][T14974] netlink: zone id is out of range [ 590.756932][T14974] netlink: zone id is out of range [ 590.768805][T14974] netlink: zone id is out of range [ 590.775993][T14974] netlink: zone id is out of range [ 590.783394][T14974] netlink: zone id is out of range [ 590.788757][T14974] netlink: zone id is out of range [ 590.795649][T14974] netlink: zone id is out of range [ 590.802269][T14974] netlink: zone id is out of range [ 590.807780][T14974] netlink: zone id is out of range [ 590.818594][T14974] netlink: zone id is out of range [ 591.378788][T14992] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2874'. [ 591.707451][T14999] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2877'. [ 591.880933][T15004] netlink: 'syz.3.2877': attribute type 7 has an invalid length. [ 592.697405][T15023] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2885'. [ 593.214568][T15025] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2886'. [ 593.764008][T15034] sctp: [Deprecated]: syz.0.2890 (pid 15034) Use of int in maxseg socket option. [ 593.764008][T15034] Use struct sctp_assoc_value instead [ 593.780980][T15035] sctp: [Deprecated]: syz.0.2890 (pid 15035) Use of int in maxseg socket option. [ 593.780980][T15035] Use struct sctp_assoc_value instead [ 594.234748][T15050] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2897'. [ 594.496974][T15055] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2899'. [ 594.668617][T15059] FAULT_INJECTION: forcing a failure. [ 594.668617][T15059] name failslab, interval 1, probability 0, space 0, times 0 [ 594.681617][T15059] CPU: 0 PID: 15059 Comm: syz.3.2901 Not tainted syzkaller #0 [ 594.689098][T15059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 594.699169][T15059] Call Trace: [ 594.702461][T15059] [ 594.705407][T15059] dump_stack_lvl+0x18c/0x250 [ 594.710092][T15059] ? show_regs_print_info+0x20/0x20 [ 594.715293][T15059] ? load_image+0x420/0x420 [ 594.719791][T15059] ? perf_tp_event+0x13d7/0x1520 [ 594.724732][T15059] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 594.730553][T15059] should_fail_ex+0x39d/0x4d0 [ 594.735261][T15059] should_failslab+0x9/0x20 [ 594.739776][T15059] slab_pre_alloc_hook+0x59/0x310 [ 594.744810][T15059] kmem_cache_alloc+0x5a/0x2d0 [ 594.749575][T15059] ? skb_clone+0x1eb/0x370 [ 594.753994][T15059] skb_clone+0x1eb/0x370 [ 594.758236][T15059] bpf_clone_redirect+0x167/0x4a0 [ 594.763266][T15059] bpf_prog_64e505a7b7f97a05+0x5d/0x62 [ 594.768724][T15059] ? perf_output_sample+0x220/0x2130 [ 594.774012][T15059] ? perf_trace_preemptirq_template+0x269/0x330 [ 594.780257][T15059] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 594.786231][T15059] ? lockdep_softirqs_on+0x580/0x580 [ 594.791512][T15059] ? lock_chain_count+0x20/0x20 [ 594.796360][T15059] ? __local_bh_disable_ip+0x108/0x1a0 [ 594.801816][T15059] ? __cant_sleep+0x220/0x220 [ 594.806491][T15059] ? __local_bh_enable_ip+0x13a/0x1c0 [ 594.811861][T15059] ? _local_bh_enable+0xa0/0xa0 [ 594.816704][T15059] ? bpf_test_timer_continue+0x135/0x380 [ 594.822345][T15059] ? bpf_test_run+0x174/0x870 [ 594.827211][T15059] bpf_test_run+0x2df/0x870 [ 594.831739][T15059] ? bpf_test_run+0x174/0x870 [ 594.836428][T15059] ? dst_hold+0x70/0x70 [ 594.840587][T15059] ? eth_get_headlen+0x210/0x210 [ 594.845536][T15059] bpf_prog_test_run_skb+0xdc8/0x18c0 [ 594.850950][T15059] ? cpu_online+0x60/0x60 [ 594.855296][T15059] bpf_prog_test_run+0x321/0x390 [ 594.860247][T15059] __sys_bpf+0x49d/0x890 [ 594.864498][T15059] ? bpf_link_show_fdinfo+0x390/0x390 [ 594.869881][T15059] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 594.876055][T15059] __x64_sys_bpf+0x7c/0x90 [ 594.880469][T15059] do_syscall_64+0x55/0xb0 [ 594.884891][T15059] ? clear_bhb_loop+0x40/0x90 [ 594.889557][T15059] ? clear_bhb_loop+0x40/0x90 [ 594.894252][T15059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 594.900160][T15059] RIP: 0033:0x7f829eb9ce59 [ 594.904579][T15059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.924187][T15059] RSP: 002b:00007f829f9b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 594.933038][T15059] RAX: ffffffffffffffda RBX: 00007f829ee15fa0 RCX: 00007f829eb9ce59 [ 594.941009][T15059] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 594.948974][T15059] RBP: 00007f829f9b5090 R08: 0000000000000000 R09: 0000000000000000 [ 594.956938][T15059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.964906][T15059] R13: 00007f829ee16038 R14: 00007f829ee15fa0 R15: 00007ffd6f16d268 [ 594.972887][T15059] [ 595.735679][T15073] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2907'. [ 596.129069][T15087] mac80211_hwsim hwsim75 wlan0: entered promiscuous mode [ 596.136924][T15087] mac80211_hwsim hwsim75 wlan0: entered allmulticast mode [ 599.752788][T15097] netlink: 'syz.2.2916': attribute type 2 has an invalid length. [ 599.773578][T15097] netlink: 'syz.2.2916': attribute type 8 has an invalid length. [ 599.791455][T15097] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2916'. [ 599.864675][T15102] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2918'. [ 600.033850][T15109] netlink: 'syz.0.2920': attribute type 4 has an invalid length. [ 600.042327][T15109] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2920'. [ 601.082458][T15128] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2927'. [ 601.099046][T15128] net_ratelimit: 330 callbacks suppressed [ 601.099078][T15128] netlink: zone id is out of range [ 601.118841][T15128] netlink: zone id is out of range [ 601.126348][T15128] netlink: zone id is out of range [ 601.137012][T15128] netlink: zone id is out of range [ 601.143059][T15128] netlink: zone id is out of range [ 601.148607][T15128] netlink: zone id is out of range [ 601.162141][T15128] netlink: zone id is out of range [ 601.167640][T15128] netlink: zone id is out of range [ 601.181999][T15128] netlink: zone id is out of range [ 601.197785][T15128] netlink: zone id is out of range [ 603.485232][T15140] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2932'. [ 605.231261][ T8074] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 606.030474][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 607.594460][T15163] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2940'. [ 607.609962][T15163] net_ratelimit: 331 callbacks suppressed [ 607.610007][T15163] netlink: zone id is out of range [ 607.627738][T15163] netlink: zone id is out of range [ 607.636338][T15163] netlink: zone id is out of range [ 607.647066][T15163] netlink: zone id is out of range [ 607.652881][T15163] netlink: zone id is out of range [ 607.658460][T15163] netlink: zone id is out of range [ 607.668907][T15163] netlink: zone id is out of range [ 607.676266][T15163] netlink: zone id is out of range [ 607.685960][T15163] netlink: zone id is out of range [ 607.691874][T15163] netlink: zone id is out of range [ 609.670489][T15169] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2943'. [ 613.164901][T15199] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2954'. [ 613.213349][T15203] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2955'. [ 613.231351][T15203] net_ratelimit: 331 callbacks suppressed [ 613.231394][T15203] netlink: zone id is out of range [ 613.247659][T15203] netlink: zone id is out of range [ 613.253692][T15203] netlink: zone id is out of range [ 613.271309][T15203] netlink: zone id is out of range [ 613.286895][T15203] netlink: zone id is out of range [ 613.300523][T15203] netlink: zone id is out of range [ 613.306586][T15203] netlink: zone id is out of range [ 613.322527][T15208] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 613.328589][T15208] syzkaller1: linktype set to 786 [ 613.354237][T15203] netlink: zone id is out of range [ 613.359606][T15203] netlink: zone id is out of range [ 613.401083][T15203] netlink: zone id is out of range [ 616.835719][T15230] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2967'. [ 616.935708][T15232] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2968'. [ 617.053643][T15240] FAULT_INJECTION: forcing a failure. [ 617.053643][T15240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.170574][T15240] CPU: 0 PID: 15240 Comm: syz.0.2971 Not tainted syzkaller #0 [ 617.178089][T15240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 617.188157][T15240] Call Trace: [ 617.191446][T15240] [ 617.194389][T15240] dump_stack_lvl+0x18c/0x250 [ 617.199088][T15240] ? show_regs_print_info+0x20/0x20 [ 617.204308][T15240] ? load_image+0x420/0x420 [ 617.208831][T15240] ? __might_fault+0xaa/0x120 [ 617.213524][T15240] ? __lock_acquire+0x7d40/0x7d40 [ 617.218566][T15240] ? tomoyo_path_number_perm+0x5b4/0x620 [ 617.224231][T15240] should_fail_ex+0x39d/0x4d0 [ 617.228938][T15240] _copy_from_user+0x2f/0xe0 [ 617.233554][T15240] wext_handle_ioctl+0xc8/0x1d0 [ 617.238406][T15240] ? call_commit_handler+0xf0/0xf0 [ 617.243522][T15240] sock_ioctl+0x15d/0x7e0 [ 617.247848][T15240] ? sock_poll+0x3e0/0x3e0 [ 617.252267][T15240] ? bpf_lsm_file_ioctl+0x9/0x10 [ 617.257196][T15240] ? security_file_ioctl+0x80/0xa0 [ 617.262313][T15240] ? sock_poll+0x3e0/0x3e0 [ 617.266723][T15240] __se_sys_ioctl+0xfd/0x170 [ 617.271309][T15240] do_syscall_64+0x55/0xb0 [ 617.275714][T15240] ? clear_bhb_loop+0x40/0x90 [ 617.280383][T15240] ? clear_bhb_loop+0x40/0x90 [ 617.285052][T15240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 617.290945][T15240] RIP: 0033:0x7fa6f699ce59 [ 617.295352][T15240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.314954][T15240] RSP: 002b:00007fa6f4bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 617.323359][T15240] RAX: ffffffffffffffda RBX: 00007fa6f6c15fa0 RCX: 00007fa6f699ce59 [ 617.331327][T15240] RDX: 0000200000000000 RSI: 0000000000008b32 RDI: 0000000000000003 [ 617.339288][T15240] RBP: 00007fa6f4bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 617.347251][T15240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.355213][T15240] R13: 00007fa6f6c16038 R14: 00007fa6f6c15fa0 R15: 00007ffe89e2d108 [ 617.363193][T15240] [ 617.464183][T15237] netlink: 'syz.2.2970': attribute type 33 has an invalid length. [ 617.493864][T15237] netlink: 'syz.2.2970': attribute type 3 has an invalid length. [ 617.507224][T15247] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2974'. [ 617.523854][T15237] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.2970'. [ 617.831974][T15257] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2979'. [ 618.012967][T15264] netlink: 'syz.2.2982': attribute type 29 has an invalid length. [ 618.028193][T15264] netlink: 'syz.2.2982': attribute type 29 has an invalid length. [ 618.051028][T15264] netlink: 'syz.2.2982': attribute type 29 has an invalid length. [ 618.069995][T15264] netlink: 'syz.2.2982': attribute type 29 has an invalid length. [ 618.086467][T15264] netlink: 'syz.2.2982': attribute type 29 has an invalid length. [ 618.275986][T15271] netlink: 'syz.0.2984': attribute type 39 has an invalid length. [ 621.152701][T15287] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2991'. [ 621.522164][T15306] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 621.528419][T15306] syzkaller1: linktype set to 786 [ 624.436633][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.443117][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.951532][T15318] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3001'. [ 625.010126][T15316] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3000'. [ 625.021689][T15316] net_ratelimit: 331 callbacks suppressed [ 625.021737][T15316] openvswitch: netlink: Key type 4112 is out of range max 32 [ 625.576759][T15336] netlink: 'syz.3.3007': attribute type 33 has an invalid length. [ 625.590397][T15341] netlink: 'syz.0.3010': attribute type 39 has an invalid length. [ 625.617840][T15341] FAULT_INJECTION: forcing a failure. [ 625.617840][T15341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.638728][T15336] netlink: 'syz.3.3007': attribute type 3 has an invalid length. [ 625.663703][T15341] CPU: 1 PID: 15341 Comm: syz.0.3010 Not tainted syzkaller #0 [ 625.671206][T15341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 625.681278][T15341] Call Trace: [ 625.684573][T15341] [ 625.687527][T15341] dump_stack_lvl+0x18c/0x250 [ 625.692230][T15341] ? show_regs_print_info+0x20/0x20 [ 625.697449][T15341] ? load_image+0x420/0x420 [ 625.701978][T15341] ? __lock_acquire+0x7d40/0x7d40 [ 625.707024][T15341] ? snprintf+0xe9/0x140 [ 625.711295][T15341] should_fail_ex+0x39d/0x4d0 [ 625.716005][T15341] _copy_to_user+0x2f/0xa0 [ 625.720444][T15341] simple_read_from_buffer+0xe7/0x150 [ 625.726023][T15341] proc_fail_nth_read+0x1e8/0x260 [ 625.731073][T15341] ? proc_fault_inject_write+0x360/0x360 [ 625.736732][T15341] ? fsnotify_perm+0x271/0x5e0 [ 625.741530][T15341] ? proc_fault_inject_write+0x360/0x360 [ 625.747185][T15341] vfs_read+0x28b/0x970 [ 625.751373][T15341] ? kernel_read+0x1e0/0x1e0 [ 625.755989][T15341] ? __fget_files+0x28/0x4b0 [ 625.760617][T15341] ? __fget_files+0x28/0x4b0 [ 625.765318][T15341] ? __fget_files+0x43d/0x4b0 [ 625.770027][T15341] ? __fdget_pos+0x2a3/0x330 [ 625.774640][T15341] ? ksys_read+0x75/0x260 [ 625.778994][T15341] ksys_read+0x150/0x260 [ 625.783262][T15341] ? vfs_write+0x990/0x990 [ 625.787706][T15341] ? lockdep_hardirqs_on+0x98/0x150 [ 625.793282][T15341] do_syscall_64+0x55/0xb0 [ 625.797718][T15341] ? clear_bhb_loop+0x40/0x90 [ 625.802411][T15341] ? clear_bhb_loop+0x40/0x90 [ 625.807110][T15341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 625.813114][T15341] RIP: 0033:0x7fa6f695d68e [ 625.817548][T15341] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 625.837204][T15341] RSP: 002b:00007fa6f4bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 625.845645][T15341] RAX: ffffffffffffffda RBX: 00007fa6f4bf66c0 RCX: 00007fa6f695d68e [ 625.853638][T15341] RDX: 000000000000000f RSI: 00007fa6f4bf60a0 RDI: 0000000000000004 [ 625.861636][T15341] RBP: 00007fa6f4bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 625.869629][T15341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 625.877630][T15341] R13: 00007fa6f6c16038 R14: 00007fa6f6c15fa0 R15: 00007ffe89e2d108 [ 625.885737][T15341] [ 625.908973][T15336] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.3007'. [ 626.252743][T15346] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3012'. [ 626.302219][T15344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 626.577894][T15354] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.3014'. [ 626.617857][T15354] netlink: 'syz.0.3014': attribute type 2 has an invalid length. [ 629.708462][T15370] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 629.729892][T15370] syzkaller1: linktype set to 786 [ 629.738858][T15375] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3023'. [ 629.934050][T15378] netlink: 'syz.3.3024': attribute type 2 has an invalid length. [ 629.947472][T15378] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3024'. [ 633.369451][T15405] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3033'. [ 633.577983][T15409] FAULT_INJECTION: forcing a failure. [ 633.577983][T15409] name failslab, interval 1, probability 0, space 0, times 0 [ 633.590673][T15409] CPU: 0 PID: 15409 Comm: syz.0.3035 Not tainted syzkaller #0 [ 633.598150][T15409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 633.608214][T15409] Call Trace: [ 633.611503][T15409] [ 633.614534][T15409] dump_stack_lvl+0x18c/0x250 [ 633.619263][T15409] ? show_regs_print_info+0x20/0x20 [ 633.624472][T15409] ? load_image+0x420/0x420 [ 633.628983][T15409] ? netdev_core_pick_tx+0x340/0x340 [ 633.634276][T15409] ? rcu_is_watching+0x15/0xb0 [ 633.639050][T15409] should_fail_ex+0x39d/0x4d0 [ 633.643741][T15409] should_failslab+0x9/0x20 [ 633.648252][T15409] slab_pre_alloc_hook+0x59/0x310 [ 633.653284][T15409] kmem_cache_alloc+0x5a/0x2d0 [ 633.658053][T15409] ? skb_clone+0x1eb/0x370 [ 633.662475][T15409] skb_clone+0x1eb/0x370 [ 633.666723][T15409] bpf_clone_redirect+0x167/0x4a0 [ 633.671766][T15409] bpf_prog_c6f54bbad6dab1ee+0x5e/0x63 [ 633.677248][T15409] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 633.683243][T15409] ? lock_chain_count+0x20/0x20 [ 633.688098][T15409] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 633.694078][T15409] ? lockdep_softirqs_on+0x580/0x580 [ 633.699364][T15409] ? lock_chain_count+0x20/0x20 [ 633.704215][T15409] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 633.710461][T15409] ? __local_bh_disable_ip+0x108/0x1a0 [ 633.715919][T15409] ? __cant_sleep+0x220/0x220 [ 633.720594][T15409] ? __local_bh_enable_ip+0x13a/0x1c0 [ 633.725959][T15409] ? _local_bh_enable+0xa0/0xa0 [ 633.731245][T15409] ? bpf_test_timer_continue+0x135/0x380 [ 633.736880][T15409] ? bpf_test_run+0x174/0x870 [ 633.741558][T15409] bpf_test_run+0x2df/0x870 [ 633.746099][T15409] ? bpf_test_run+0x174/0x870 [ 633.750775][T15409] ? dst_hold+0x70/0x70 [ 633.754928][T15409] ? eth_get_headlen+0x210/0x210 [ 633.759865][T15409] ? slab_build_skb+0x25f/0x3f0 [ 633.764715][T15409] ? convert___skb_to_skb+0x3d/0x590 [ 633.769996][T15409] bpf_prog_test_run_skb+0xdc8/0x18c0 [ 633.775382][T15409] ? cpu_online+0x60/0x60 [ 633.779711][T15409] bpf_prog_test_run+0x321/0x390 [ 633.784682][T15409] __sys_bpf+0x49d/0x890 [ 633.788936][T15409] ? bpf_link_show_fdinfo+0x390/0x390 [ 633.794319][T15409] ? lock_chain_count+0x20/0x20 [ 633.799176][T15409] __x64_sys_bpf+0x7c/0x90 [ 633.803588][T15409] do_syscall_64+0x55/0xb0 [ 633.808002][T15409] ? clear_bhb_loop+0x40/0x90 [ 633.812672][T15409] ? clear_bhb_loop+0x40/0x90 [ 633.817346][T15409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 633.823238][T15409] RIP: 0033:0x7fa6f699ce59 [ 633.827647][T15409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.847254][T15409] RSP: 002b:00007fa6f4bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 633.855682][T15409] RAX: ffffffffffffffda RBX: 00007fa6f6c15fa0 RCX: 00007fa6f699ce59 [ 633.863733][T15409] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 633.871721][T15409] RBP: 00007fa6f4bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 633.879693][T15409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 633.887666][T15409] R13: 00007fa6f6c16038 R14: 00007fa6f6c15fa0 R15: 00007ffe89e2d108 [ 633.895652][T15409] [ 634.091074][T15416] netlink: 'syz.0.3038': attribute type 29 has an invalid length. [ 634.124954][T15416] netlink: 'syz.0.3038': attribute type 29 has an invalid length. [ 634.510786][T15420] netlink: 'syz.0.3038': attribute type 29 has an invalid length. [ 635.061865][T15421] netlink: 'syz.1.3040': attribute type 33 has an invalid length. [ 635.084848][T15421] netlink: 'syz.1.3040': attribute type 3 has an invalid length. [ 635.101535][T15421] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.3040'. [ 635.667004][T15434] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3043'. [ 636.216063][T15441] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.3046'. [ 637.239264][ T8081] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 647.890049][T15500] netlink: 'syz.2.3069': attribute type 33 has an invalid length. [ 647.902809][T15500] netlink: 'syz.2.3069': attribute type 3 has an invalid length. [ 647.920300][T15500] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.3069'. [ 648.245890][T15514] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.3074'. [ 648.259104][T15514] mac80211_hwsim hwsim78 ..c~ZDցmv: renamed from wlan1 (while UP) [ 650.977071][T15519] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3076'. [ 654.803678][T15559] netlink: 'syz.0.3088': attribute type 1 has an invalid length. [ 654.817614][T15559] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3088'. [ 654.827749][T15559] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3088'. [ 657.573471][T15563] FAULT_INJECTION: forcing a failure. [ 657.573471][T15563] name failslab, interval 1, probability 0, space 0, times 0 [ 657.600307][T15563] CPU: 1 PID: 15563 Comm: syz.2.3093 Not tainted syzkaller #0 [ 657.607840][T15563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 657.617936][T15563] Call Trace: [ 657.621247][T15563] [ 657.624458][T15563] dump_stack_lvl+0x18c/0x250 [ 657.629150][T15563] ? sctp_sendmsg+0x15d2/0x2910 [ 657.634079][T15563] ? ___sys_sendmsg+0x2a6/0x360 [ 657.638952][T15563] ? show_regs_print_info+0x20/0x20 [ 657.644157][T15563] ? load_image+0x420/0x420 [ 657.648671][T15563] should_fail_ex+0x39d/0x4d0 [ 657.653370][T15563] should_failslab+0x9/0x20 [ 657.657881][T15563] slab_pre_alloc_hook+0x59/0x310 [ 657.662915][T15563] ? sctp_add_bind_addr+0x8c/0x360 [ 657.668030][T15563] __kmem_cache_alloc_node+0x53/0x250 [ 657.673425][T15563] ? sctp_add_bind_addr+0x8c/0x360 [ 657.678538][T15563] kmalloc_trace+0x2a/0xe0 [ 657.682962][T15563] sctp_add_bind_addr+0x8c/0x360 [ 657.687906][T15563] sctp_copy_local_addr_list+0x315/0x4f0 [ 657.693543][T15563] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 657.699263][T15563] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 657.705350][T15563] ? sctp_v4_is_any+0x35/0x60 [ 657.710029][T15563] ? sctp_copy_one_addr+0x8c/0x350 [ 657.715147][T15563] sctp_bind_addr_copy+0xb3/0x3c0 [ 657.720190][T15563] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 657.726615][T15563] sctp_connect_new_asoc+0x2f9/0x6a0 [ 657.731904][T15563] ? __sctp_connect+0xd80/0xd80 [ 657.736758][T15563] ? __local_bh_enable_ip+0x13a/0x1c0 [ 657.742133][T15563] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 657.747697][T15563] ? security_sctp_bind_connect+0x89/0xb0 [ 657.753440][T15563] sctp_sendmsg+0x15d2/0x2910 [ 657.758138][T15563] ? sctp_getsockopt+0xb60/0xb60 [ 657.763078][T15563] ? aa_sk_perm+0x83c/0x970 [ 657.767600][T15563] ? aa_af_perm+0x330/0x330 [ 657.772100][T15563] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 657.778865][T15563] ? sock_rps_record_flow+0x19/0x3f0 [ 657.784165][T15563] ? inet_sendmsg+0xe9/0x2f0 [ 657.788758][T15563] ? inet_send_prepare+0x260/0x260 [ 657.793871][T15563] ____sys_sendmsg+0x5ba/0x960 [ 657.798638][T15563] ? __lock_acquire+0x7d40/0x7d40 [ 657.803665][T15563] ? __asan_memset+0x22/0x40 [ 657.808255][T15563] ? __sys_sendmsg_sock+0x30/0x30 [ 657.813279][T15563] ? __import_iovec+0x5f2/0x850 [ 657.818134][T15563] ? import_iovec+0x73/0xa0 [ 657.822638][T15563] ___sys_sendmsg+0x2a6/0x360 [ 657.827318][T15563] ? get_pid_task+0x20/0x1e0 [ 657.832177][T15563] ? __sys_sendmsg+0x2a0/0x2a0 [ 657.836970][T15563] ? __lock_acquire+0x7d40/0x7d40 [ 657.842014][T15563] __se_sys_sendmsg+0x1c2/0x2b0 [ 657.846870][T15563] ? __x64_sys_sendmsg+0x80/0x80 [ 657.851817][T15563] ? lockdep_hardirqs_on+0x98/0x150 [ 657.857019][T15563] do_syscall_64+0x55/0xb0 [ 657.861430][T15563] ? clear_bhb_loop+0x40/0x90 [ 657.866120][T15563] ? clear_bhb_loop+0x40/0x90 [ 657.870809][T15563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 657.876720][T15563] RIP: 0033:0x7fe41379ce59 [ 657.881141][T15563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.900750][T15563] RSP: 002b:00007fe4145ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.909166][T15563] RAX: ffffffffffffffda RBX: 00007fe413a15fa0 RCX: 00007fe41379ce59 [ 657.917138][T15563] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 657.925107][T15563] RBP: 00007fe4145ad090 R08: 0000000000000000 R09: 0000000000000000 [ 657.933091][T15563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 657.941070][T15563] R13: 00007fe413a16038 R14: 00007fe413a15fa0 R15: 00007ffef1c30058 [ 657.949065][T15563] [ 657.983996][T15567] netlink: 'syz.1.3092': attribute type 10 has an invalid length. [ 658.014865][T15567] syz_tun: entered promiscuous mode [ 658.175770][T15567] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 658.439574][T15579] syzkaller0: entered promiscuous mode [ 658.445226][T15579] syzkaller0: entered allmulticast mode [ 664.474978][T15622] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3106'. [ 668.951641][T15657] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3121'. [ 668.974071][T15657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 669.005780][T15666] FAULT_INJECTION: forcing a failure. [ 669.005780][T15666] name failslab, interval 1, probability 0, space 0, times 0 [ 669.026290][T15666] CPU: 1 PID: 15666 Comm: syz.1.3123 Not tainted syzkaller #0 [ 669.033788][T15666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 669.043854][T15666] Call Trace: [ 669.047145][T15666] [ 669.050086][T15666] dump_stack_lvl+0x18c/0x250 [ 669.054791][T15666] ? show_regs_print_info+0x20/0x20 [ 669.060008][T15666] ? load_image+0x420/0x420 [ 669.064530][T15666] ? __might_sleep+0xe0/0xe0 [ 669.069138][T15666] ? __lock_acquire+0x7d40/0x7d40 [ 669.074194][T15666] should_fail_ex+0x39d/0x4d0 [ 669.078900][T15666] should_failslab+0x9/0x20 [ 669.083424][T15666] slab_pre_alloc_hook+0x59/0x310 [ 669.088473][T15666] ? kvmalloc_node+0x70/0x180 [ 669.093173][T15666] ? kvmalloc_node+0x70/0x180 [ 669.097882][T15666] __kmem_cache_alloc_node+0x53/0x250 [ 669.103254][T15666] ? kvmalloc_node+0x70/0x180 [ 669.107921][T15666] __kmalloc_node+0xa4/0x230 [ 669.112505][T15666] kvmalloc_node+0x70/0x180 [ 669.117003][T15666] page_pool_create+0x1eb/0x5c0 [ 669.121849][T15666] bpf_test_run_xdp_live+0x203/0x1b20 [ 669.127308][T15666] ? 0xffffffffa0004740 [ 669.131461][T15666] ? 0xffffffffa0004740 [ 669.135626][T15666] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 669.141536][T15666] ? 0xffffffffa0004740 [ 669.145709][T15666] ? xdp_convert_md_to_buff+0x330/0x330 [ 669.151302][T15666] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 669.157573][T15666] ? _copy_from_user+0xa5/0xe0 [ 669.162356][T15666] ? bpf_test_init+0x119/0x140 [ 669.167135][T15666] ? xdp_convert_md_to_buff+0x5b/0x330 [ 669.172619][T15666] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 669.178026][T15666] ? dev_put+0x80/0x80 [ 669.182128][T15666] ? dev_put+0x80/0x80 [ 669.186222][T15666] bpf_prog_test_run+0x321/0x390 [ 669.191190][T15666] __sys_bpf+0x49d/0x890 [ 669.195458][T15666] ? bpf_link_show_fdinfo+0x390/0x390 [ 669.200946][T15666] ? lock_chain_count+0x20/0x20 [ 669.205818][T15666] __x64_sys_bpf+0x7c/0x90 [ 669.210244][T15666] do_syscall_64+0x55/0xb0 [ 669.214671][T15666] ? clear_bhb_loop+0x40/0x90 [ 669.219355][T15666] ? clear_bhb_loop+0x40/0x90 [ 669.224037][T15666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 669.229944][T15666] RIP: 0033:0x7f2f0339ce59 [ 669.234370][T15666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.253997][T15666] RSP: 002b:00007f2f0430a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 669.262423][T15666] RAX: ffffffffffffffda RBX: 00007f2f03615fa0 RCX: 00007f2f0339ce59 [ 669.270403][T15666] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 669.278376][T15666] RBP: 00007f2f0430a090 R08: 0000000000000000 R09: 0000000000000000 [ 669.286353][T15666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.294502][T15666] R13: 00007f2f03616038 R14: 00007f2f03615fa0 R15: 00007ffef7f3aea8 [ 669.302495][T15666] [ 669.330505][T15666] page_pool_create() gave up with errno -12 [ 669.727057][T15691] netlink: 'syz.0.3131': attribute type 33 has an invalid length. [ 669.735380][T15691] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3131'. [ 669.748576][T15691] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 669.785864][T15691] syz.0.3131[15691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 669.786037][T15691] syz.0.3131[15691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 671.263243][T15727] netlink: 'syz.2.3144': attribute type 33 has an invalid length. [ 671.283584][T15727] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3144'. [ 671.308770][T15727] syz.2.3144[15727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 671.308954][T15727] syz.2.3144[15727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 671.651482][T15735] netlink: 'syz.1.3146': attribute type 21 has an invalid length. [ 671.678904][T15735] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3146'. [ 672.118901][T15743] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3149'. [ 672.274319][T15746] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3150'. [ 672.917990][T15758] netlink: 26 bytes leftover after parsing attributes in process `syz.0.3154'. [ 673.193054][T15768] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3160'. [ 676.485290][T15785] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3165'. [ 676.513086][T15787] netlink: 'syz.1.3167': attribute type 21 has an invalid length. [ 676.526691][T15787] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3167'. [ 676.706141][T15796] netlink: 'syz.0.3170': attribute type 10 has an invalid length. [ 676.738638][T15796] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3170'. [ 676.785028][T15800] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3172'. [ 677.996067][T15821] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3179'. [ 680.075182][T15835] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3184'. [ 680.140685][T15833] netlink: 'syz.1.3183': attribute type 10 has an invalid length. [ 680.148957][T15833] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3183'. [ 680.237499][T15844] FAULT_INJECTION: forcing a failure. [ 680.237499][T15844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.260327][T15844] CPU: 1 PID: 15844 Comm: syz.2.3187 Not tainted syzkaller #0 [ 680.267838][T15844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 680.277913][T15844] Call Trace: [ 680.281207][T15844] [ 680.284152][T15844] dump_stack_lvl+0x18c/0x250 [ 680.288863][T15844] ? show_regs_print_info+0x20/0x20 [ 680.293267][T15845] netlink: 'syz.1.3188': attribute type 33 has an invalid length. [ 680.294080][T15844] ? load_image+0x420/0x420 [ 680.302825][T15845] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3188'. [ 680.306376][T15844] ? __might_fault+0xaa/0x120 [ 680.306410][T15844] ? __lock_acquire+0x7d40/0x7d40 [ 680.306452][T15844] should_fail_ex+0x39d/0x4d0 [ 680.329954][T15844] _copy_from_iter+0x1d9/0x12e0 [ 680.334858][T15844] ? __might_fault+0xaa/0x120 [ 680.339567][T15844] ? _copy_from_iter+0x24e/0x12e0 [ 680.344618][T15844] ? __virt_addr_valid+0x18c/0x540 [ 680.349753][T15844] ? __lock_acquire+0x7d40/0x7d40 [ 680.354799][T15844] ? copyout_mc+0x70/0x70 [ 680.359161][T15844] ? copyout_mc+0x70/0x70 [ 680.363505][T15844] ? __virt_addr_valid+0x18c/0x540 [ 680.368645][T15844] ? page_copy_sane+0x16a/0x270 [ 680.373525][T15844] copy_page_from_iter+0x7b/0x100 [ 680.378571][T15844] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 680.384429][T15844] tun_get_user+0x15db/0x3ca0 [ 680.389150][T15844] ? aa_file_perm+0x11b/0xee0 [ 680.393864][T15844] ? rcu_read_unlock+0xa0/0xa0 [ 680.398677][T15844] ? tun_get+0x1c/0x2e0 [ 680.402859][T15844] ? __lock_acquire+0x7d40/0x7d40 [ 680.407915][T15844] ? tun_get+0x1c/0x2e0 [ 680.412107][T15844] tun_chr_write_iter+0x119/0x200 [ 680.417156][T15844] vfs_write+0x46c/0x990 [ 680.421439][T15844] ? file_end_write+0x250/0x250 [ 680.426319][T15844] ? __fget_files+0x43d/0x4b0 [ 680.431034][T15844] ? __fdget_pos+0x1d8/0x330 [ 680.435635][T15844] ? ksys_write+0x75/0x260 [ 680.440070][T15844] ksys_write+0x150/0x260 [ 680.444433][T15844] ? __ia32_sys_read+0x90/0x90 [ 680.449222][T15844] ? lockdep_hardirqs_on+0x98/0x150 [ 680.454446][T15844] do_syscall_64+0x55/0xb0 [ 680.458875][T15844] ? clear_bhb_loop+0x40/0x90 [ 680.463559][T15844] ? clear_bhb_loop+0x40/0x90 [ 680.468250][T15844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 680.474160][T15844] RIP: 0033:0x7fe41379ce59 [ 680.478592][T15844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.498221][T15844] RSP: 002b:00007fe4145ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 680.506657][T15844] RAX: ffffffffffffffda RBX: 00007fe413a15fa0 RCX: 00007fe41379ce59 [ 680.514642][T15844] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 680.522625][T15844] RBP: 00007fe4145ad090 R08: 0000000000000000 R09: 0000000000000000 [ 680.530709][T15844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 680.538700][T15844] R13: 00007fe413a16038 R14: 00007fe413a15fa0 R15: 00007ffef1c30058 [ 680.546750][T15844] [ 680.619119][T15845] syz.1.3188[15845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 680.619300][T15845] syz.1.3188[15845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 681.695769][T15864] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3194'. [ 685.036416][T15882] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3203'. [ 685.101546][T15885] FAULT_INJECTION: forcing a failure. [ 685.101546][T15885] name failslab, interval 1, probability 0, space 0, times 0 [ 685.134618][T15885] CPU: 0 PID: 15885 Comm: syz.2.3202 Not tainted syzkaller #0 [ 685.142151][T15885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 685.152221][T15885] Call Trace: [ 685.155506][T15885] [ 685.158431][T15885] dump_stack_lvl+0x18c/0x250 [ 685.163153][T15885] ? show_regs_print_info+0x20/0x20 [ 685.168348][T15885] ? load_image+0x420/0x420 [ 685.172864][T15885] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 685.178881][T15885] should_fail_ex+0x39d/0x4d0 [ 685.183588][T15885] should_failslab+0x9/0x20 [ 685.188106][T15885] slab_pre_alloc_hook+0x59/0x310 [ 685.193143][T15885] ? __local_bh_enable_ip+0x13a/0x1c0 [ 685.198521][T15885] kmem_cache_alloc+0x5a/0x2d0 [ 685.203292][T15885] ? dst_alloc+0x105/0x170 [ 685.207718][T15885] dst_alloc+0x105/0x170 [ 685.211965][T15885] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 685.218051][T15885] ? ip_route_output_key_hash+0x13d/0x330 [ 685.223775][T15885] ip_route_output_key_hash+0x1f3/0x330 [ 685.229324][T15885] ? ip_route_input_rcu+0x30f0/0x30f0 [ 685.234704][T15885] ? __lock_acquire+0x7d40/0x7d40 [ 685.240447][T15885] ip_route_output_flow+0x2a/0x150 [ 685.245574][T15885] ? security_sk_classify_flow+0x7b/0x90 [ 685.251222][T15885] udp_sendmsg+0x1603/0x23b0 [ 685.255843][T15885] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 685.260701][T15885] ? udp_cmsg_send+0x350/0x350 [ 685.265472][T15885] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 685.271455][T15885] ? lock_chain_count+0x20/0x20 [ 685.276304][T15885] ? inet_sendmsg+0x14b/0x2f0 [ 685.280996][T15885] ? __local_bh_enable_ip+0x13a/0x1c0 [ 685.286365][T15885] ? _local_bh_enable+0xa0/0xa0 [ 685.291216][T15885] ? do_raw_spin_unlock+0x121/0x230 [ 685.296416][T15885] ? inet_sendmsg+0x14b/0x2f0 [ 685.301251][T15885] ? inet_sendmsg+0x14b/0x2f0 [ 685.305927][T15885] ? inet_send_prepare+0x260/0x260 [ 685.311045][T15885] ____sys_sendmsg+0x5ba/0x960 [ 685.315812][T15885] ? __lock_acquire+0x7d40/0x7d40 [ 685.320852][T15885] ? __sys_sendmsg_sock+0x30/0x30 [ 685.325874][T15885] ? __import_iovec+0x5f2/0x850 [ 685.330732][T15885] ? import_iovec+0x73/0xa0 [ 685.335236][T15885] ___sys_sendmsg+0x2a6/0x360 [ 685.339912][T15885] ? get_pid_task+0x20/0x1e0 [ 685.344505][T15885] ? __sys_sendmsg+0x2a0/0x2a0 [ 685.349285][T15885] ? __lock_acquire+0x7d40/0x7d40 [ 685.354337][T15885] __se_sys_sendmsg+0x1c2/0x2b0 [ 685.359191][T15885] ? __x64_sys_sendmsg+0x80/0x80 [ 685.364142][T15885] ? lockdep_hardirqs_on+0x98/0x150 [ 685.369348][T15885] do_syscall_64+0x55/0xb0 [ 685.373760][T15885] ? clear_bhb_loop+0x40/0x90 [ 685.378431][T15885] ? clear_bhb_loop+0x40/0x90 [ 685.383102][T15885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 685.388997][T15885] RIP: 0033:0x7fe41379ce59 [ 685.393412][T15885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.413122][T15885] RSP: 002b:00007fe4145ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.421541][T15885] RAX: ffffffffffffffda RBX: 00007fe413a15fa0 RCX: 00007fe41379ce59 [ 685.429513][T15885] RDX: 0000000007000000 RSI: 0000200000000380 RDI: 000000000000000c [ 685.437484][T15885] RBP: 00007fe4145ad090 R08: 0000000000000000 R09: 0000000000000000 [ 685.445457][T15885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.453429][T15885] R13: 00007fe413a16038 R14: 00007fe413a15fa0 R15: 00007ffef1c30058 [ 685.461415][T15885] [ 685.879354][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.887172][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.188768][T15914] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3213'. [ 686.325242][T15924] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3218'. [ 687.562463][T15949] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3225'. [ 687.792702][T15961] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3226'. [ 687.904338][T15968] sctp: [Deprecated]: syz.2.3232 (pid 15968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 687.904338][T15968] Use struct sctp_sack_info instead [ 688.956205][T15986] TCP: TCP_TX_DELAY enabled [ 689.106128][T15988] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3237'. [ 689.200765][T15990] FAULT_INJECTION: forcing a failure. [ 689.200765][T15990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.222016][T15990] CPU: 0 PID: 15990 Comm: syz.3.3238 Not tainted syzkaller #0 [ 689.229530][T15990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 689.239621][T15990] Call Trace: [ 689.242920][T15990] [ 689.245953][T15990] dump_stack_lvl+0x18c/0x250 [ 689.250695][T15990] ? show_regs_print_info+0x20/0x20 [ 689.255904][T15990] ? load_image+0x420/0x420 [ 689.260422][T15990] ? __might_fault+0xaa/0x120 [ 689.265104][T15990] ? __lock_acquire+0x7d40/0x7d40 [ 689.270130][T15990] should_fail_ex+0x39d/0x4d0 [ 689.274818][T15990] _copy_from_user+0x2f/0xe0 [ 689.279496][T15990] __sys_bpf+0x23e/0x890 [ 689.284018][T15990] ? bpf_link_show_fdinfo+0x390/0x390 [ 689.289410][T15990] ? lock_chain_count+0x20/0x20 [ 689.294278][T15990] __x64_sys_bpf+0x7c/0x90 [ 689.298707][T15990] do_syscall_64+0x55/0xb0 [ 689.303134][T15990] ? clear_bhb_loop+0x40/0x90 [ 689.307814][T15990] ? clear_bhb_loop+0x40/0x90 [ 689.312491][T15990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.318394][T15990] RIP: 0033:0x7f829eb9ce59 [ 689.322811][T15990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.342422][T15990] RSP: 002b:00007f829f9b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 689.350850][T15990] RAX: ffffffffffffffda RBX: 00007f829ee15fa0 RCX: 00007f829eb9ce59 [ 689.358829][T15990] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 689.366802][T15990] RBP: 00007f829f9b5090 R08: 0000000000000000 R09: 0000000000000000 [ 689.374774][T15990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.382744][T15990] R13: 00007f829ee16038 R14: 00007f829ee15fa0 R15: 00007ffd6f16d268 [ 689.390727][T15990] [ 689.429072][T15992] netlink: 'syz.1.3239': attribute type 28 has an invalid length. [ 689.437516][T15992] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3239'. [ 689.576124][T16005] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3243'. [ 689.770043][T16007] FAULT_INJECTION: forcing a failure. [ 689.770043][T16007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.789518][T16007] CPU: 1 PID: 16007 Comm: syz.2.3244 Not tainted syzkaller #0 [ 689.797193][T16007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 689.807253][T16007] Call Trace: [ 689.810533][T16007] [ 689.813456][T16007] dump_stack_lvl+0x18c/0x250 [ 689.818134][T16007] ? show_regs_print_info+0x20/0x20 [ 689.823329][T16007] ? load_image+0x420/0x420 [ 689.827825][T16007] ? __might_fault+0xaa/0x120 [ 689.832497][T16007] ? __lock_acquire+0x7d40/0x7d40 [ 689.837522][T16007] should_fail_ex+0x39d/0x4d0 [ 689.842205][T16007] _copy_from_user+0x2f/0xe0 [ 689.846794][T16007] get_user_ifreq+0x6b/0x180 [ 689.851382][T16007] sock_ioctl+0x6f1/0x7e0 [ 689.855728][T16007] ? sock_poll+0x3e0/0x3e0 [ 689.860155][T16007] ? bpf_lsm_file_ioctl+0x9/0x10 [ 689.865095][T16007] ? security_file_ioctl+0x80/0xa0 [ 689.870211][T16007] ? sock_poll+0x3e0/0x3e0 [ 689.874627][T16007] __se_sys_ioctl+0xfd/0x170 [ 689.879225][T16007] do_syscall_64+0x55/0xb0 [ 689.883641][T16007] ? clear_bhb_loop+0x40/0x90 [ 689.888314][T16007] ? clear_bhb_loop+0x40/0x90 [ 689.892987][T16007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.898882][T16007] RIP: 0033:0x7fe41379ce59 [ 689.903293][T16007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.922894][T16007] RSP: 002b:00007fe4145ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 689.931307][T16007] RAX: ffffffffffffffda RBX: 00007fe413a15fa0 RCX: 00007fe41379ce59 [ 689.939269][T16007] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000011 [ 689.947239][T16007] RBP: 00007fe4145ad090 R08: 0000000000000000 R09: 0000000000000000 [ 689.955210][T16007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.963170][T16007] R13: 00007fe413a16038 R14: 00007fe413a15fa0 R15: 00007ffef1c30058 [ 689.971150][T16007] [ 690.383219][T16021] FAULT_INJECTION: forcing a failure. [ 690.383219][T16021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.412817][T16021] CPU: 0 PID: 16021 Comm: syz.3.3249 Not tainted syzkaller #0 [ 690.420453][T16021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 690.430555][T16021] Call Trace: [ 690.433887][T16021] [ 690.436863][T16021] dump_stack_lvl+0x18c/0x250 [ 690.441612][T16021] ? show_regs_print_info+0x20/0x20 [ 690.446886][T16021] ? load_image+0x420/0x420 [ 690.451465][T16021] ? __might_fault+0xaa/0x120 [ 690.456200][T16021] ? __lock_acquire+0x7d40/0x7d40 [ 690.461390][T16021] should_fail_ex+0x39d/0x4d0 [ 690.466156][T16021] _copy_from_iter+0x1d9/0x12e0 [ 690.471060][T16021] ? __might_fault+0xaa/0x120 [ 690.475802][T16021] ? _copy_from_iter+0x24e/0x12e0 [ 690.481064][T16021] ? __virt_addr_valid+0x18c/0x540 [ 690.486419][T16021] ? __lock_acquire+0x7d40/0x7d40 [ 690.491508][T16021] ? copyout_mc+0x70/0x70 [ 690.494109][T16024] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3250'. [ 690.495880][T16021] ? copyout_mc+0x70/0x70 [ 690.495914][T16021] ? __virt_addr_valid+0x18c/0x540 [ 690.514386][T16021] ? page_copy_sane+0x16a/0x270 [ 690.519327][T16021] copy_page_from_iter+0x7b/0x100 [ 690.524415][T16021] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 690.530426][T16021] tun_get_user+0x15db/0x3ca0 [ 690.535190][T16021] ? aa_file_perm+0x11b/0xee0 [ 690.539943][T16021] ? rcu_read_unlock+0xa0/0xa0 [ 690.544805][T16021] ? tun_get+0x1c/0x2e0 [ 690.549019][T16021] ? __lock_acquire+0x7d40/0x7d40 [ 690.554121][T16021] ? tun_get+0x1c/0x2e0 [ 690.558361][T16021] tun_chr_write_iter+0x119/0x200 [ 690.563540][T16021] vfs_write+0x46c/0x990 [ 690.567859][T16021] ? file_end_write+0x250/0x250 [ 690.572785][T16021] ? __fget_files+0x43d/0x4b0 [ 690.577545][T16021] ? __fdget_pos+0x1d8/0x330 [ 690.582178][T16021] ? ksys_write+0x75/0x260 [ 690.586654][T16021] ksys_write+0x150/0x260 [ 690.591050][T16021] ? __ia32_sys_read+0x90/0x90 [ 690.595878][T16021] ? lockdep_hardirqs_on+0x98/0x150 [ 690.601140][T16021] do_syscall_64+0x55/0xb0 [ 690.605601][T16021] ? clear_bhb_loop+0x40/0x90 [ 690.610329][T16021] ? clear_bhb_loop+0x40/0x90 [ 690.615055][T16021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 690.621001][T16021] RIP: 0033:0x7f829eb9ce59 [ 690.625448][T16021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.645089][T16021] RSP: 002b:00007f829f9b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 690.653526][T16021] RAX: ffffffffffffffda RBX: 00007f829ee15fa0 RCX: 00007f829eb9ce59 [ 690.661509][T16021] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 690.669490][T16021] RBP: 00007f829f9b5090 R08: 0000000000000000 R09: 0000000000000000 [ 690.677478][T16021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 690.685456][T16021] R13: 00007f829ee16038 R14: 00007f829ee15fa0 R15: 00007ffd6f16d268 [ 690.693471][T16021] [ 691.030716][T16038] syzkaller0: entered promiscuous mode [ 691.036342][T16038] syzkaller0: entered allmulticast mode [ 691.186169][T16051] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3261'. [ 692.794739][T16047] netlink: 1042 bytes leftover after parsing attributes in process `syz.3.3259'. [ 692.805091][T16052] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3259'. [ 692.816629][T16052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 693.014157][T16066] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3265'. [ 693.025021][T16066] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3265'. [ 693.043043][T16066] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3265'. [ 693.065532][T16066] netlink: 'syz.0.3265': attribute type 4 has an invalid length. [ 693.158495][T16072] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3267'. [ 693.342044][T16080] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3271'. [ 693.757448][T16084] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3272'. [ 694.178315][T16100] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.3277'. [ 694.663805][T16110] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3282'. [ 698.030492][ T9405] ..c~ZDցmv: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 698.957033][T16167] FAULT_INJECTION: forcing a failure. [ 698.957033][T16167] name failslab, interval 1, probability 0, space 0, times 0 [ 698.980920][T16167] CPU: 0 PID: 16167 Comm: syz.2.3301 Not tainted syzkaller #0 [ 698.988430][T16167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 698.998505][T16167] Call Trace: [ 699.001796][T16167] [ 699.004745][T16167] dump_stack_lvl+0x18c/0x250 [ 699.009442][T16167] ? show_regs_print_info+0x20/0x20 [ 699.014659][T16167] ? load_image+0x420/0x420 [ 699.019181][T16167] ? __might_sleep+0xe0/0xe0 [ 699.023786][T16167] ? __lock_acquire+0x7d40/0x7d40 [ 699.028838][T16167] should_fail_ex+0x39d/0x4d0 [ 699.033539][T16167] should_failslab+0x9/0x20 [ 699.038055][T16167] slab_pre_alloc_hook+0x59/0x310 [ 699.043112][T16167] ? ip_setup_cork+0x22e/0x860 [ 699.047891][T16167] __kmem_cache_alloc_node+0x53/0x250 [ 699.053292][T16167] ? ip_setup_cork+0x22e/0x860 [ 699.058073][T16167] kmalloc_trace+0x2a/0xe0 [ 699.062528][T16167] ip_setup_cork+0x22e/0x860 [ 699.067144][T16167] ip_make_skb+0x157/0x440 [ 699.071576][T16167] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 699.076438][T16167] ? ip_flush_pending_frames+0x250/0x250 [ 699.082102][T16167] udp_sendmsg+0x1ade/0x23b0 [ 699.086727][T16167] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 699.091700][T16167] ? udp_cmsg_send+0x350/0x350 [ 699.096489][T16167] ? lockdep_hardirqs_on+0x98/0x150 [ 699.101711][T16167] ? inet_sendmsg+0x14b/0x2f0 [ 699.106419][T16167] ? _local_bh_enable+0xa0/0xa0 [ 699.111288][T16167] ? inet_sendmsg+0x14b/0x2f0 [ 699.115987][T16167] ? inet_sendmsg+0x14b/0x2f0 [ 699.120685][T16167] ? inet_send_prepare+0x260/0x260 [ 699.125823][T16167] ____sys_sendmsg+0x5ba/0x960 [ 699.130603][T16167] ? __lock_acquire+0x7d40/0x7d40 [ 699.135649][T16167] ? __sys_sendmsg_sock+0x30/0x30 [ 699.140686][T16167] ? __import_iovec+0x3fa/0x850 [ 699.145554][T16167] ? import_iovec+0x73/0xa0 [ 699.150156][T16167] ___sys_sendmsg+0x2a6/0x360 [ 699.155222][T16167] ? __sys_sendmsg+0x2a0/0x2a0 [ 699.160046][T16167] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 699.166614][T16167] __se_sys_sendmsg+0x1c2/0x2b0 [ 699.171948][T16167] ? __x64_sys_sendmsg+0x80/0x80 [ 699.177100][T16167] ? lockdep_hardirqs_on+0x98/0x150 [ 699.183128][T16167] do_syscall_64+0x55/0xb0 [ 699.187570][T16167] ? clear_bhb_loop+0x40/0x90 [ 699.192372][T16167] ? clear_bhb_loop+0x40/0x90 [ 699.197210][T16167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 699.204345][T16167] RIP: 0033:0x7fe41379ce59 [ 699.209311][T16167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.228941][T16167] RSP: 002b:00007fe4145ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 699.237373][T16167] RAX: ffffffffffffffda RBX: 00007fe413a15fa0 RCX: 00007fe41379ce59 [ 699.245356][T16167] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000007 [ 699.253774][T16167] RBP: 00007fe4145ad090 R08: 0000000000000000 R09: 0000000000000000 [ 699.261751][T16167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.269742][T16167] R13: 00007fe413a16038 R14: 00007fe413a15fa0 R15: 00007ffef1c30058 [ 699.277749][T16167] [ 699.293252][T16166] __nla_validate_parse: 3 callbacks suppressed [ 699.293269][T16166] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3302'. [ 699.543041][T16178] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3307'. [ 699.716996][T16184] netlink: 'syz.0.3308': attribute type 27 has an invalid length. [ 699.946495][T16190] netlink: 'syz.0.3310': attribute type 29 has an invalid length. [ 699.959412][T16190] netlink: 'syz.0.3310': attribute type 29 has an invalid length. [ 699.970682][T16190] netlink: 'syz.0.3310': attribute type 29 has an invalid length. [ 699.979079][T16190] netlink: 'syz.0.3310': attribute type 29 has an invalid length. [ 699.989754][T16190] netlink: 'syz.0.3310': attribute type 29 has an invalid length. [ 703.376775][T16204] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3315'. [ 704.186052][T16225] netlink: 'syz.2.3324': attribute type 1 has an invalid length. [ 704.297469][T16225] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3324'. [ 704.567690][T16234] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.3324'. [ 706.980127][T16226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.099657][T16242] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3327'. [ 707.527414][T16254] netlink: 'syz.1.3333': attribute type 41 has an invalid length. [ 707.603468][T16250] : renamed from vlan0 (while UP) [ 708.402137][T16273] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3339'. [ 711.015919][T16285] FAULT_INJECTION: forcing a failure. [ 711.015919][T16285] name failslab, interval 1, probability 0, space 0, times 0 [ 711.033285][T16285] CPU: 0 PID: 16285 Comm: syz.2.3344 Not tainted syzkaller #0 [ 711.040790][T16285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 711.050864][T16285] Call Trace: [ 711.054159][T16285] [ 711.057105][T16285] dump_stack_lvl+0x18c/0x250 [ 711.061815][T16285] ? show_regs_print_info+0x20/0x20 [ 711.067041][T16285] ? load_image+0x420/0x420 [ 711.071568][T16285] ? slab_post_alloc_hook+0x8a/0x4b0 [ 711.076873][T16285] should_fail_ex+0x39d/0x4d0 [ 711.081567][T16285] should_failslab+0x9/0x20 [ 711.086192][T16285] slab_pre_alloc_hook+0x59/0x310 [ 711.091422][T16285] ? __build_skb_around+0x255/0x3d0 [ 711.096650][T16285] kmem_cache_alloc+0x5a/0x2d0 [ 711.101440][T16285] ? _sctp_make_chunk+0x14e/0x420 [ 711.106486][T16285] _sctp_make_chunk+0x14e/0x420 [ 711.111357][T16285] sctp_make_init+0x5f3/0xfc0 [ 711.116074][T16285] ? sctp_addto_chunk+0x230/0x230 [ 711.121124][T16285] ? kernel_text_address+0xa0/0xd0 [ 711.126258][T16285] ? __kernel_text_address+0xd/0x30 [ 711.131476][T16285] ? stack_trace_save+0x100/0x100 [ 711.136522][T16285] ? arch_stack_walk+0x160/0x190 [ 711.141661][T16285] sctp_sf_do_prm_asoc+0xd2/0x3e0 [ 711.146710][T16285] sctp_do_sm+0x23a/0x5a60 [ 711.151145][T16285] ? sctp_cname+0x110/0x110 [ 711.155669][T16285] ? __stack_depot_save+0x1f/0x630 [ 711.160896][T16285] ? kasan_set_track+0x4e/0x70 [ 711.165675][T16285] ? __kasan_kmalloc+0x8f/0xa0 [ 711.170459][T16285] ? sctp_stream_init_ext+0x57/0x170 [ 711.175775][T16285] ? sctp_sendmsg_to_asoc+0x1324/0x1830 [ 711.181348][T16285] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 711.187291][T16285] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 711.192338][T16285] ? do_syscall_64+0x55/0xb0 [ 711.196949][T16285] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 711.203085][T16285] ? __sk_mem_raise_allocated+0xa29/0x1340 [ 711.208919][T16285] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 711.214403][T16285] sctp_sendmsg_to_asoc+0x10a6/0x1830 [ 711.219788][T16285] ? __asan_memcpy+0x40/0x70 [ 711.224405][T16285] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 711.229815][T16285] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 711.235646][T16285] ? __sctp_connect+0xd80/0xd80 [ 711.240519][T16285] ? __local_bh_enable_ip+0x13a/0x1c0 [ 711.245911][T16285] ? _local_bh_enable+0xa0/0xa0 [ 711.250780][T16285] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 711.256606][T16285] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 711.262435][T16285] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 711.268008][T16285] ? security_sctp_bind_connect+0x89/0xb0 [ 711.273767][T16285] sctp_sendmsg+0x1bd2/0x2910 [ 711.278481][T16285] ? sctp_getsockopt+0xb60/0xb60 [ 711.283443][T16285] ? aa_sk_perm+0x83c/0x970 [ 711.287972][T16285] ? aa_af_perm+0x330/0x330 [ 711.292503][T16285] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 711.298942][T16285] ? sock_rps_record_flow+0x19/0x3f0 [ 711.304257][T16285] ? inet_sendmsg+0x7c/0x2f0 [ 711.308865][T16285] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 711.314170][T16285] ? security_socket_sendmsg+0x80/0xa0 [ 711.319650][T16285] ? inet_send_prepare+0x260/0x260 [ 711.324787][T16285] ____sys_sendmsg+0x5ba/0x960 [ 711.329568][T16285] ? __lock_acquire+0x7d40/0x7d40 [ 711.334614][T16285] ? __asan_memset+0x22/0x40 [ 711.339220][T16285] ? __sys_sendmsg_sock+0x30/0x30 [ 711.344262][T16285] ? __import_iovec+0x5f2/0x850 [ 711.349140][T16285] ? import_iovec+0x73/0xa0 [ 711.353668][T16285] ___sys_sendmsg+0x2a6/0x360 [ 711.358371][T16285] ? __sys_sendmsg+0x2a0/0x2a0 [ 711.363180][T16285] ? __lock_acquire+0x7d40/0x7d40 [ 711.368260][T16285] __se_sys_sendmsg+0x1c2/0x2b0 [ 711.373137][T16285] ? __x64_sys_sendmsg+0x80/0x80 [ 711.378110][T16285] ? lockdep_hardirqs_on+0x98/0x150 [ 711.383335][T16285] do_syscall_64+0x55/0xb0 [ 711.387769][T16285] ? clear_bhb_loop+0x40/0x90 [ 711.392458][T16285] ? clear_bhb_loop+0x40/0x90 [ 711.397161][T16285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 711.403078][T16285] RIP: 0033:0x7fe41379ce59 [ 711.407512][T16285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.427403][T16285] RSP: 002b:00007fe4145ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 711.435839][T16285] RAX: ffffffffffffffda RBX: 00007fe413a15fa0 RCX: 00007fe41379ce59 [ 711.443831][T16285] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 711.451823][T16285] RBP: 00007fe4145ad090 R08: 0000000000000000 R09: 0000000000000000 [ 711.459814][T16285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 711.467803][T16285] R13: 00007fe413a16038 R14: 00007fe413a15fa0 R15: 00007ffef1c30058 [ 711.475813][T16285] [ 711.693420][T16296] netlink: 'syz.1.3345': attribute type 5 has an invalid length. [ 712.240854][T16304] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3349'. [ 715.845576][T16324] netlink: 'syz.2.3357': attribute type 14 has an invalid length. [ 715.860451][T16324] netlink: 42643 bytes leftover after parsing attributes in process `syz.2.3357'. [ 715.869826][T16322] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3356'. [ 715.886310][T16324] netlink: 'syz.2.3357': attribute type 14 has an invalid length. [ 715.900365][T16324] netlink: 42643 bytes leftover after parsing attributes in process `syz.2.3357'. [ 715.917317][T16324] netlink: 'syz.2.3357': attribute type 14 has an invalid length. [ 715.943589][T16324] netlink: 42643 bytes leftover after parsing attributes in process `syz.2.3357'. [ 715.987308][T16324] netlink: 'syz.2.3357': attribute type 14 has an invalid length. [ 716.015408][T16324] netlink: 42643 bytes leftover after parsing attributes in process `syz.2.3357'. [ 716.062546][T16324] netlink: 'syz.2.3357': attribute type 14 has an invalid length. [ 716.071253][T16324] netlink: 42643 bytes leftover after parsing attributes in process `syz.2.3357'. [ 716.087651][T16324] netlink: 'syz.2.3357': attribute type 14 has an invalid length. [ 716.098403][T16324] netlink: 42643 bytes leftover after parsing attributes in process `syz.2.3357'. [ 716.109163][T16324] netlink: 'syz.2.3357': attribute type 14 has an invalid length. [ 716.118931][T16324] netlink: 42643 bytes leftover after parsing attributes in process `syz.2.3357'. [ 716.144061][T16324] netlink: 'syz.2.3357': attribute type 14 has an invalid length. [ 716.152716][T16324] netlink: 42643 bytes leftover after parsing attributes in process `syz.2.3357'. [ 716.175918][T16324] netlink: 'syz.2.3357': attribute type 14 has an invalid length. [ 716.191318][T16324] netlink: 'syz.2.3357': attribute type 14 has an invalid length. [ 716.423561][T16332] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 719.008564][ T9409] wlan1: Trigger new scan to find an IBSS to join [ 719.818397][T16339] ------------[ cut here ]------------ [ 719.824551][T16339] WARNING: CPU: 0 PID: 16339 at kernel/events/core.c:6808 perf_pending_task+0x35c/0x470 [ 719.834651][T16339] Modules linked in: [ 719.839366][T16339] CPU: 0 PID: 16339 Comm: syz.2.3362 Not tainted syzkaller #0 [ 719.848100][T16339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 719.871818][T16339] RIP: 0010:perf_pending_task+0x35c/0x470 [ 719.895733][T16339] Code: ff 84 db 75 14 e8 74 cb d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 cb d5 ff e8 4b 3d 4f ff eb e5 e8 54 cb d5 ff <0f> 0b e9 f3 fe ff ff e8 48 cb d5 ff 48 c7 c7 10 f9 1c 8d 4c 89 f6 [ 719.917750][T16339] RSP: 0018:ffffc900038079c0 EFLAGS: 00010293 [ 719.925285][T16339] RAX: ffffffff81b1603c RBX: ffff88802db03b40 RCX: ffff88802ab7da00 [ 719.934048][T16339] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 719.943443][T16339] RBP: 0000000000000001 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 719.952216][T16339] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: ffff88802ab7da00 [ 719.963350][T16339] R13: ffff88805d37fd30 R14: ffff88802db03900 R15: 1ffff11005b60720 [ 719.972735][T16339] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 719.991524][T16339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 720.002056][T16339] CR2: 0000001b33d21ff8 CR3: 0000000069179000 CR4: 00000000003506f0 [ 720.013898][T16339] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 720.022539][T16339] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 720.031833][T16339] Call Trace: [ 720.035669][T16339] [ 720.038643][T16339] task_work_run+0x1d4/0x260 [ 720.043581][T16339] ? task_work_cancel+0x220/0x220 [ 720.050553][T16339] do_exit+0x95a/0x2460 [ 720.055199][T16339] ? get_signal+0x1068/0x13f0 [ 720.061935][T16339] ? put_task_struct+0xc0/0xc0 [ 720.067241][T16339] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 720.073663][T16339] ? get_signal+0x1068/0x13f0 [ 720.078571][T16339] ? lock_chain_count+0x20/0x20 [ 720.083496][T16339] ? _raw_spin_lock_irq+0xbb/0xf0 [ 720.088539][T16339] do_group_exit+0x21b/0x2d0 [ 720.093190][T16339] ? lockdep_hardirqs_on+0x98/0x150 [ 720.098405][T16339] get_signal+0x12fc/0x13f0 [ 720.103022][T16339] arch_do_signal_or_restart+0xc2/0x800 [ 720.108598][T16339] ? __ia32_sys_get_robust_list+0x110/0x110 [ 720.114653][T16339] ? get_sigframe_size+0x20/0x20 [ 720.119639][T16339] ? exit_to_user_mode_loop+0x3b/0x110 [ 720.125158][T16339] exit_to_user_mode_loop+0x70/0x110 [ 720.130545][T16339] exit_to_user_mode_prepare+0xee/0x180 [ 720.136118][T16339] syscall_exit_to_user_mode+0x1a/0x50 [ 720.141636][T16339] do_syscall_64+0x61/0xb0 [ 720.146097][T16339] ? clear_bhb_loop+0x40/0x90 [ 720.150817][T16339] ? clear_bhb_loop+0x40/0x90 [ 720.155511][T16339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 720.161491][T16339] RIP: 0033:0x7fe41379ce59 [ 720.165935][T16339] Code: Unable to access opcode bytes at 0x7fe41379ce2f. [ 720.173021][T16339] RSP: 002b:00007fe4145ad0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 720.181852][T16339] RAX: fffffffffffffe00 RBX: 00007fe413a15fa8 RCX: 00007fe41379ce59 [ 720.189852][T16339] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe413a15fa8 [ 720.198174][T16339] RBP: 00007fe413a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 720.206251][T16339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.214294][T16339] R13: 00007fe413a16038 R14: 00007ffef1c2ff70 R15: 00007ffef1c30058 [ 720.222397][T16339] [ 720.225430][T16339] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 720.232721][T16339] CPU: 0 PID: 16339 Comm: syz.2.3362 Not tainted syzkaller #0 [ 720.240201][T16339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 720.250806][T16339] Call Trace: [ 720.254111][T16339] [ 720.257048][T16339] dump_stack_lvl+0x18c/0x250 [ 720.261741][T16339] ? show_regs_print_info+0x20/0x20 [ 720.266963][T16339] ? load_image+0x420/0x420 [ 720.271484][T16339] panic+0x2dc/0x730 [ 720.275393][T16339] ? bpf_jit_dump+0xd0/0xd0 [ 720.279934][T16339] __warn+0x2e0/0x470 [ 720.283911][T16339] ? perf_pending_task+0x35c/0x470 [ 720.289021][T16339] ? perf_pending_task+0x35c/0x470 [ 720.294143][T16339] report_bug+0x2be/0x4f0 [ 720.298487][T16339] ? perf_pending_task+0x35c/0x470 [ 720.303606][T16339] ? perf_pending_task+0x35c/0x470 [ 720.308816][T16339] ? perf_pending_task+0x35e/0x470 [ 720.313938][T16339] handle_bug+0xcf/0x120 [ 720.318179][T16339] exc_invalid_op+0x1a/0x50 [ 720.322678][T16339] asm_exc_invalid_op+0x1a/0x20 [ 720.327529][T16339] RIP: 0010:perf_pending_task+0x35c/0x470 [ 720.333247][T16339] Code: ff 84 db 75 14 e8 74 cb d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 cb d5 ff e8 4b 3d 4f ff eb e5 e8 54 cb d5 ff <0f> 0b e9 f3 fe ff ff e8 48 cb d5 ff 48 c7 c7 10 f9 1c 8d 4c 89 f6 [ 720.353024][T16339] RSP: 0018:ffffc900038079c0 EFLAGS: 00010293 [ 720.359086][T16339] RAX: ffffffff81b1603c RBX: ffff88802db03b40 RCX: ffff88802ab7da00 [ 720.367055][T16339] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 720.375936][T16339] RBP: 0000000000000001 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 720.384025][T16339] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: ffff88802ab7da00 [ 720.392107][T16339] R13: ffff88805d37fd30 R14: ffff88802db03900 R15: 1ffff11005b60720 [ 720.400112][T16339] ? perf_pending_task+0x35c/0x470 [ 720.405248][T16339] task_work_run+0x1d4/0x260 [ 720.409845][T16339] ? task_work_cancel+0x220/0x220 [ 720.414924][T16339] do_exit+0x95a/0x2460 [ 720.419095][T16339] ? get_signal+0x1068/0x13f0 [ 720.423767][T16339] ? put_task_struct+0xc0/0xc0 [ 720.428537][T16339] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 720.434511][T16339] ? get_signal+0x1068/0x13f0 [ 720.439179][T16339] ? lock_chain_count+0x20/0x20 [ 720.444032][T16339] ? _raw_spin_lock_irq+0xbb/0xf0 [ 720.449055][T16339] do_group_exit+0x21b/0x2d0 [ 720.453644][T16339] ? lockdep_hardirqs_on+0x98/0x150 [ 720.458841][T16339] get_signal+0x12fc/0x13f0 [ 720.463351][T16339] arch_do_signal_or_restart+0xc2/0x800 [ 720.469265][T16339] ? __ia32_sys_get_robust_list+0x110/0x110 [ 720.475172][T16339] ? get_sigframe_size+0x20/0x20 [ 720.480172][T16339] ? exit_to_user_mode_loop+0x3b/0x110 [ 720.485652][T16339] exit_to_user_mode_loop+0x70/0x110 [ 720.490955][T16339] exit_to_user_mode_prepare+0xee/0x180 [ 720.496505][T16339] syscall_exit_to_user_mode+0x1a/0x50 [ 720.501976][T16339] do_syscall_64+0x61/0xb0 [ 720.506394][T16339] ? clear_bhb_loop+0x40/0x90 [ 720.511064][T16339] ? clear_bhb_loop+0x40/0x90 [ 720.515737][T16339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 720.521642][T16339] RIP: 0033:0x7fe41379ce59 [ 720.526054][T16339] Code: Unable to access opcode bytes at 0x7fe41379ce2f. [ 720.533079][T16339] RSP: 002b:00007fe4145ad0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 720.541494][T16339] RAX: fffffffffffffe00 RBX: 00007fe413a15fa8 RCX: 00007fe41379ce59 [ 720.549488][T16339] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe413a15fa8 [ 720.557466][T16339] RBP: 00007fe413a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 720.565441][T16339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.573413][T16339] R13: 00007fe413a16038 R14: 00007ffef1c2ff70 R15: 00007ffef1c30058 [ 720.581404][T16339] [ 720.584756][T16339] Kernel Offset: disabled [ 720.589076][T16339] Rebooting in 86400 seconds..