last executing test programs: 4.514698752s ago: executing program 3 (id=12724): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000640)='cpu&08\n&\f0\xed') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r2, &(0x7f0000000ac0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000840), 0x0, &(0x7f0000000980)=[@ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0xffffffffffffffff}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @remote}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@noop, @rr={0x7, 0x7, 0xdd, [@multicast2]}, @generic={0x82, 0x9, "a0ad319caba353"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0xa0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000001680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 4.391902104s ago: executing program 0 (id=12726): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f8ffffff00000000000000008500000036000000850000000500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000a00)="e3f8aac2658501a2cfcba54c0488", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000380), 0x2}, 0x10c21c, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x408) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="110000000000000000000000ba780f0079bba7679018b94eb3d5e7ec8aaef94e05a63b48888e2da2a0fe9d9277468a2d6000c07a3a835f90ba5836c53b82baa257dc33743b270ddbe2183ee6c87ed424ee89385f0c2439469ffea18504526dd14b9d6166fe6f7f2d82ceb7704cd91b2081fbd2afde1fc7af", @ANYRES32], 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$tipc(r5, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000019c0), 0x0, &(0x7f0000001a80)="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", 0x7c0, 0x4008094}, 0x24008854) ioctl$TUNSETOFFLOAD(r5, 0x40086602, 0x110e22fff2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000580)=""/95}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x0, 0x10, 0x0, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44", 0xe}], 0x1}, 0x0) r8 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r10 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r10, r2, 0x0, 0x3, &(0x7f0000000080)=']!\x00'}, 0x30) socketpair(0x2, 0x2, 0x73, &(0x7f0000000000)) recvmsg$unix(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x22, &(0x7f0000000000), 0x10) sendmsg$kcm(r0, 0x0, 0x0) 4.264044937s ago: executing program 2 (id=12727): r0 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x9, 0x4, 0x1ff, 0xfffd, 0x0, 0x10000, 0x0, 0x20000006}, 0x0, 0x5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x48) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x33}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r4, @ANYRES8=r1, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8929, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x8, 0x0, 0x0, 0x0, 0x640b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0xa002, 0x5, 0x43a1bd70, 0x7, 0xa, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10204, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) close(r0) recvmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x101a0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x3, 0x0) r10 = bpf$ITER_CREATE(0xb, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r11) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000000b000000186100000b00000000000800090000008500000054000000180000007c03000000000000510000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0xff, 0x0, &(0x7f00000001c0), 0x41000, 0x62, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f0000000280)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xf, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000440)=[r5, r11, r4, r11, r10, r8, r0, r4, r5, r10], &(0x7f0000000600)=[{0x0, 0x1, 0xd, 0xa}, {0x2, 0x3, 0xc, 0x7}], 0x10, 0xdb20}, 0x94) ioctl$SIOCSIFHWADDR(r11, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r11, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 3.856809206s ago: executing program 3 (id=12728): r0 = socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe, 0x3, @perf_config_ext={0x0, 0xfffffffffffffff4}, 0x0, 0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) r1 = socket$kcm(0x1e, 0x4, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) write$cgroup_subtree(r2, 0x0, 0x101d0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) (async) r4 = socket$kcm(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) (async) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10140) (async) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8934, &(0x7f00000007c0)={'hsr0\x00', @local}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00fe800000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) 3.240342639s ago: executing program 0 (id=12732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001140)='memory.events\x00', 0x0, 0x0) recvmsg$unix(r5, 0x0, 0x10060) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r4, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, 0x25, r5}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x3, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r11}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000380)=r12) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80", @ANYRESDEC], 0xffdd) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) write$cgroup_devices(r13, &(0x7f0000000280)=ANY=[], 0xffdd) socket$kcm(0x10, 0x2, 0x0) 3.162351401s ago: executing program 2 (id=12733): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4b, &(0x7f0000000080), 0x4) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r5 = syz_clone(0x1200, &(0x7f0000000680)="efa28225886c3462803c965879ce368769192dd062f2658e786dbcec856ae9d5833609072929b3aed8b2ec6c38e24744d4d67d98cb30c3678edb89a11502c8bce1dfb9f8d3ded389a8b0b0134bda07a8cd366a90cc45d0113737f26418b59e849099ced7ec760234320ce932", 0x6c, &(0x7f0000000700), &(0x7f00000007c0), &(0x7f0000001040)="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") r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r3, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe6, &(0x7f0000000900)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x2d, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x10, 0x0, r4, 0x800, '\x00', r7, r6, 0x3, 0x200000, 0x3}, 0x50) sendmsg$unix(r0, &(0x7f0000002080)={&(0x7f0000000180)=@abs={0xbe8077b9a3e97647, 0x0, 0x4e20}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000340)="6c9da1b91fe99c9062fcaca96cef1bf4bab02db23718cd51ef81319a16fe78147695d0a0eb3f67ee3b75f371783b0914f5f004c9b01c0746093a381a3a11e7eb550524290c5ec7f8a761768b0eaddb987e04a2183f0c1225f998c64bcf4e3edb1c2799b4e6c5b5b639d70e574b8b232baef2c4c2ead72be6e3d429a3d5e97c1921a5f92f8c314e757abd5891c14dc88dca6de63fefea260be3c3ae6513", 0x9d}, {&(0x7f0000000400)="ff00a2d7e60525cd7e6cbd3217fd40ea0197ab9f7f5e268cf0d3a08e57a534fb720ea790e52c", 0x26}, {&(0x7f00000004c0)="4e5359eedd468c35126289791a38e2284997fa453a2b72fc4cb95f62f92271e48a3643f26c4b70442e524ed2c65f3e7b9d147cf1ddd2c6f7ebb06d5d62c5da15c6de8405cbfd36c7313ca65fee408929597a460137d292bb367690e7e7163c2c947fc9d360c78980a64a62c6e8da2971579956", 0x73}], 0x3, &(0x7f0000002040)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff}}}], 0x20, 0x20040845}, 0x4000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.869570658s ago: executing program 3 (id=12735): r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x401c5820, &(0x7f00000001c0)='cpu~\"\"\nt\x00') 2.692760661s ago: executing program 3 (id=12737): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x7, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x606b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0x2}, 0x8204, 0xcdd, 0x43a1bd76, 0x0, 0x9, 0xd00, 0x4, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67fffff6b26462f25a4d1c2e446b72af3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbeec6e6ccd4", 0xd8}], 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200000001"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4102, 0x1006}], 0x1}, 0x2002) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a603f00ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809", 0xa1}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000", @ANYRESHEX=r2], 0x0}, 0x94) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xfe33) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b05d25a806f8c6394f90824fc602f0000000a740100053582c137153e370248018000f0176a0ebd", 0x2e}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x10\x04/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}, 0x4040090) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f000000000000010000000000000000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f0300000000ff00040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 2.628852433s ago: executing program 1 (id=12739): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffeff}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000800c05000040fffff60000000095000010"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001000000eb0fa44c800000004656b1917b0c0e365c4efe308c46ba1db49a255dfee304517864f7cee1462e3f663722de5c6cee0544476adfc8d4031a3ad755b7d8fa856220572fc84dc7b9aed562", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={0xffffffffffffffff, r5}, 0xc) recvmsg$kcm(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x2062) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x104101, 0x4, 0x0, 0x1, 0x200, 0x2, 0x1}, 0x0, 0x100004, 0xffffffffffffffff, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./cgroup/../file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.476743506s ago: executing program 2 (id=12740): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f8ffffff00000000000000008500000036000000850000000500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000a00)="e3f8aac2658501a2cfcba54c0488", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000380), 0x2}, 0x10c21c, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x408) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="110000000000000000000000ba780f0079bba7679018b94eb3d5e7ec8aaef94e05a63b48888e2da2a0fe9d9277468a2d6000c07a3a835f90ba5836c53b82baa257dc33743b270ddbe2183ee6c87ed424ee89385f0c2439469ffea18504526dd14b9d6166fe6f7f2d82ceb7704cd91b2081fbd2afde1fc7af", @ANYRES32], 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$tipc(r5, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000019c0), 0x0, &(0x7f0000001a80)="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", 0x7c0, 0x4008094}, 0x24008854) ioctl$TUNSETOFFLOAD(r5, 0x40086602, 0x110e22fff2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000580)=""/95}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x0, 0x10, 0x0, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44", 0xe}], 0x1}, 0x0) r8 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r10 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r10, r2, 0x0, 0x3, &(0x7f0000000080)=']!\x00'}, 0x30) socketpair(0x2, 0x2, 0x73, &(0x7f0000000000)) recvmsg$unix(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x22, &(0x7f0000000000), 0x10) sendmsg$kcm(r0, 0x0, 0x0) 2.418373427s ago: executing program 3 (id=12741): r0 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x9, 0x4, 0x1ff, 0xfffd, 0x0, 0x10000, 0x0, 0x20000006}, 0x0, 0x5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x48) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x33}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r4, @ANYRES8=r1, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8929, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x8, 0x0, 0x0, 0x0, 0x640b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0xa002, 0x5, 0x43a1bd70, 0x7, 0xa, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10204, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) close(r0) recvmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x101a0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x3, 0x0) r10 = bpf$ITER_CREATE(0xb, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r11) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000000b000000186100000b00000000000800090000008500000054000000180000007c03000000000000510000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0xff, 0x0, &(0x7f00000001c0), 0x41000, 0x62, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f0000000280)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xf, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000440)=[r5, r11, r4, r11, r10, r8, r0, r4, r5, r10], &(0x7f0000000600)=[{0x0, 0x1, 0xd, 0xa}, {0x2, 0x3, 0xc, 0x7}], 0x10, 0xdb20}, 0x94) ioctl$SIOCSIFHWADDR(r11, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r11, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 2.404768177s ago: executing program 1 (id=12742): r0 = socket$kcm(0xa, 0x3, 0x73) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xe}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xe}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r7, &(0x7f0000000000), 0x0}, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x3f01) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$kcm(0x18, 0x5, 0x0) (async) r9 = socket$kcm(0x18, 0x5, 0x0) close(r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xa, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r11, r10}, 0xc) write$cgroup_subtree(r8, &(0x7f0000000140)={[{0x2d, 'devices'}]}, 0x9) close(r8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) (async) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @local}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000290000000b000000000000000000000010", @ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRESDEC=r0], 0x28}, 0x0) 2.158732723s ago: executing program 1 (id=12743): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) (fail_nth: 1) 1.747903702s ago: executing program 0 (id=12744): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x1, 0x84) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r0}, 0x8) write$cgroup_int(r1, &(0x7f00000001c0), 0xfffffdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ed00000004000000040000000c0000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x19, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfff}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r6, 0x541b, &(0x7f0000000180)={'ip_vti0\x00'}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$TUNSETIFF(r1, 0x5421, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) 1.629514125s ago: executing program 1 (id=12745): r0 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x29, 0x1, 0x40, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ab, 0x2, @perf_bp={&(0x7f0000000380)}, 0x100040, 0x10000, 0x9e4, 0x9, 0x8, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x61c6}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r1, 0x6, 0x3, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x4) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x7, 0x2, 0x7f, 0x0, 0x6af, 0x38300, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0xc, 0xfff8000000000000}, 0x2000, 0x4, 0x5, 0x5, 0xb, 0x8, 0x400, 0x0, 0x9, 0x0, 0x921}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) r2 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xd, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x4880, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x8, 0x4, 0x0, 0x6, 0x0, 0x3, 0x80053, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7fffffffefff, 0x2}, 0x100040, 0xffffffff, 0xfffffffa, 0x6, 0xda0, 0xfffffffc, 0x81, 0x0, 0x400, 0x0, 0x8000000000000001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001880), 0x4) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x64010102}}, 0x80, 0x0}, 0x4044890) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) write$cgroup_subtree(r6, 0x0, 0xfe33) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000eac516179d6a8902b70c998bfa579b080000000100000080000000", @ANYRES32, @ANYBLOB="00001000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0xa}, 0x94) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f0000000080020012", 0x2d}, {&(0x7f0000000040)="ba6d53e0ca90a3aba0e6dd11c8249b93bb3582cfc2bd265f75d0d468216e4146b41a9f837250ada439c7cebac38416de07d6", 0x32}, {0x0}, {&(0x7f0000000340)}, {0x0}], 0x5}, 0x0) 1.554922536s ago: executing program 0 (id=12746): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1.552078956s ago: executing program 2 (id=12747): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000640)='cpu&08\n&\f0\xed') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r2, &(0x7f0000000ac0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000840), 0x0, &(0x7f0000000980)=[@ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0xffffffffffffffff}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @remote}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@noop, @rr={0x7, 0x7, 0xdd, [@multicast2]}, @generic={0x82, 0x9, "a0ad319caba353"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0xa0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000001680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.445741598s ago: executing program 0 (id=12748): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e640500000000007502faff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000026000000b70000000000002995000000000000001da5ad3548ebb63d18db6a1c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6d5b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa387a8077927a1ad367c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f20002b35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8c367d1bfd1aea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82dc568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000000000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac6f09c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccf5e882602897a85bf8523d891080593d831d758deb4f2c7e49c6d6b35d8fd92601c8500febb0c5fe0be294bf6bbbecad444695277a9e3992a354492513b43091d161c7c7cdbbe44e8e83b4cf333238a52f214b278c6485236ea880db2f113f6381187679a4620d6149808b0af024b3b3e6ba99b4b15ca"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x8004}, 0x0, 0xfffffffffffeffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r2}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) r3 = socket$kcm(0xa, 0x2, 0x3a) write$cgroup_subtree(r3, 0x0, 0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x3, &(0x7f0000000b00)=ANY=[@ANYRESOCT=r0, @ANYBLOB="27e6bd7527443096b8e898369f7bccf019682fc54d4596e0b84a4aa6ac968d62b7e6e7a5ade88e6aa3bb4dec024ce898bcf70f39ec7ed650284f48056d4b30b90f27ecf2f0563dff4fdca831f90a3f9b25e0f5801c97345a6cccbd04b27486d11063b292"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xe129, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x8020008, 0x0, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000100)="3fd601683332b3a6c4100f3041ca494615", 0x11}, {&(0x7f0000000700)="adebedb7bd1ec4b80c20876ce996bf3512474355df4ea47c4746d7016b70ba003308159bc01b102c7869c33754010078f3f849feaabe4afcc7afc8645c9e521fbbe9bc2946fee01a30a3b26e59d1e2d69ff571dee5d70000000000000000000d000000", 0x63}, {&(0x7f0000000840)="e2ea97799b31e029b5bb6d7b856a7b6168a398eb74faf2c54b801b194f0e698865e1cf16e575c45ad5c3f3b80000000000", 0x31}, {&(0x7f0000000e00)="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", 0x157}, {&(0x7f0000000cc0)="b63a5ed5408303192f6f789fa3c70b516f0ce03d64b67f6b4ad5fa0b0f5b7ee9ee5c38e1c148b0ddeba4c4cff82b7ec38b2129ffa5e7a8689e7fa70ab2c106be2f5d122b909cda59b06d73b980ba14e6aee47f5cb4f4ad26732bb7fcdb4bebf9426ba1b501c276a8d5bd5742bda808f7cb574efe0569609ba4c28e0ce127ced7a626dd9c8ca66f7a70dbe2af46d7d5373b1e17bf5eab3375fabec1281ba7a976091a60817c50b2530ca129e98664e2d9a5472d641f4f09b5", 0xb8}], 0x5}, 0x20000004) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x410381, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6f, 0x0, 0x40, 0xa001}, {0x16, 0xfc, 0x5, 0xffffffff}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x3, 0xffffffffffffffe0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1001, 0x0, 0x0, 0x9, 0x0, 0x400, 0x6, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x2, 0xc, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r5, @ANYRES8, @ANYBLOB="00008abbd1258a954c2500"/23], 0x0, 0x0, 0xa, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x4e, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x23, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r7 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.current\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 1.402004719s ago: executing program 1 (id=12749): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18009b8700000000000000000000000071121b0800000000950000000000fcff"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@typedef={0x7, 0x0, 0x0, 0x8, 0x4}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x5, 0xa}]}, {0x0, [0x2e]}}, &(0x7f00000003c0)=""/143, 0x37, 0x8f, 0x1, 0xfffffff7}, 0x28) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x800000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c13300fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1a80000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x3ff, 0x8, 0x40, 0x42, 0x1}, 0x4f) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r10}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x17, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xb}, @alu={0x3, 0x0, 0x1, 0x9, 0xb, 0xffffffffffffffe0, 0xfffffffffffffff0}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0xf, 0x71, &(0x7f0000000300)=""/113, 0x0, 0x4, '\x00', r3, 0x25, r4, 0x8, &(0x7f00000004c0)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[r5, r7, r8, r9, r10], &(0x7f00000006c0)=[{0x4, 0x5, 0x7, 0x2}, {0x4, 0x3, 0x1, 0x6}], 0x10, 0xffffffff}, 0x94) 1.38265782s ago: executing program 3 (id=12750): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffeff}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000800c05000040fffff60000000095000010"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001000000eb0fa44c800000004656b1917b0c0e365c4efe308c46ba1db49a255dfee304517864f7cee1462e3f663722de5c6cee0544476adfc8d4031a3ad755b7d8fa856220572fc84dc7b9aed562", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={0xffffffffffffffff, r5}, 0xc) recvmsg$kcm(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x2062) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x104101, 0x4, 0x0, 0x1, 0x200, 0x2, 0x1}, 0x0, 0x100004, 0xffffffffffffffff, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./cgroup/../file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.292809732s ago: executing program 2 (id=12751): perf_event_open(&(0x7f0000000040)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3ffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c3ea00fea08b000071101a00000000009500000000000000"], 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x79, &(0x7f0000000000), 0x8) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) close(r2) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) socket$kcm(0x11, 0x200000000000003, 0x300) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/30], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x0, 0xe80, 0x0, &(0x7f0000000300)="c5dfb080cd20d308098e000086dd6b", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r8, 0x0, 0x0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffb, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x1, 0x0) 368.9µs ago: executing program 1 (id=12752): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x19, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2f}, [@map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[0x1, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x0, 0x4, 0x2, 0xb}, {0x1, 0x4, 0xc}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r0, 0x0, 0x0, 0x48, &(0x7f00000007c0), &(0x7f0000000840)=""/72, 0x4, 0x0, 0xcb, 0x8d, &(0x7f00000008c0)="aea234c609c84bb6ab8f137c304889a74d0762788f40ecdcf904ac0aabb8c8c7b42ced9ffb11fb8dd427c659ea1a14a3f2472b59d5c6ffc50b97e6887001baecc9af51ea71a3454f375b406d83d1d6dfe5ce1834dfa812632a7ac41219cb4bd74d69d609e9fb007e0731e55618e16cc7c416068028cb32bd76003c7c2884e84f47ad102f40bf399f511ea8b641e6890f9c841211537bd14cf0b9cbd8836e3ee5a9ac2ca10c6b12d91fc512d5cd6921782130823275bf57492e4a373bdaa1baf058681f89188a685190960f", &(0x7f00000009c0)="12543ff95865ec69a51a66910c76e5f809a541251fbd35b259bf4f056188d2fc9696abcc8d9ba7931e2b9d1a5c95e683d46831cbe96bd96ede254ea5d3d8374dd82e4cab2e29df38d78fda621c6fb3acc1f7d0f781e02c0af22883d7bb79f469ffbe278ecb56ce3709c3af91182fb34f92b3e865daa6aa2942a08aa981eb2f08d744850c5e48a763c05e2357af", 0x0, 0x0, 0x1e}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8982, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x400}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TUNATTACHFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) 0s ago: executing program 2 (id=12753): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x606b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0x2}, 0x8204, 0xcdd, 0x43a1bd76, 0x0, 0x9, 0xd00, 0x4, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67fffff6b26462f25a4d1c2e446b72af3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbeec6e6ccd4", 0xd8}], 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200000001"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4102, 0x1006}], 0x1}, 0x2002) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a603f00ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809", 0xa1}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000", @ANYRESHEX=r2], 0x0}, 0x94) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xfe33) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b05d25a806f8c6394f90824fc602f0000000a740100053582c137153e370248018000f0176a0ebd", 0x2e}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x10\x04/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}, 0x4040090) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f000000000000010000000000000000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f0300000000ff00040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) kernel console output (not intermixed with test programs): 61967 bytes leftover after parsing attributes in process `syz.1.11633'. [ 2725.687020][ T7862] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.11637'. [ 2725.800643][ T7869] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.11641'. [ 2725.888457][ T7867] netlink: 'syz.3.11639': attribute type 2 has an invalid length. [ 2725.956535][ T7867] netlink: 116 bytes leftover after parsing attributes in process `syz.3.11639'. [ 2726.010526][ T7867] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2726.044980][ T7870] netlink: 'syz.3.11639': attribute type 39 has an invalid length. [ 2727.369384][ T7898] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 2727.432731][ T7903] netlink: 'syz.1.11652': attribute type 2 has an invalid length. [ 2727.457226][ T7903] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2727.485898][ T7902] netlink: 'syz.1.11652': attribute type 39 has an invalid length. [ 2728.742720][ T7934] netlink: 'syz.0.11659': attribute type 10 has an invalid length. [ 2729.147565][ T7934] macvlan0: entered allmulticast mode [ 2729.170428][ T7934] veth1_vlan: entered allmulticast mode [ 2729.224891][ T7934] team0: Port device macvlan0 added [ 2729.298944][ T7944] netlink: 'syz.1.11663': attribute type 2 has an invalid length. [ 2729.314440][ T7944] __nla_validate_parse: 3 callbacks suppressed [ 2729.314476][ T7944] netlink: 116 bytes leftover after parsing attributes in process `syz.1.11663'. [ 2729.361075][ T7944] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2729.465510][ T7945] netlink: 'syz.1.11663': attribute type 39 has an invalid length. [ 2729.583664][ T7947] netlink: 'syz.0.11664': attribute type 29 has an invalid length. [ 2729.617896][ T7947] netlink: 'syz.0.11664': attribute type 29 has an invalid length. [ 2729.642451][ T7947] netlink: 'syz.0.11664': attribute type 29 has an invalid length. [ 2729.672825][ T7947] netlink: 'syz.0.11664': attribute type 29 has an invalid length. [ 2729.742615][ T7947] netlink: 'syz.0.11664': attribute type 29 has an invalid length. [ 2730.000206][ T7956] FAULT_INJECTION: forcing a failure. [ 2730.000206][ T7956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2730.044770][ T7956] CPU: 1 PID: 7956 Comm: syz.3.11668 Not tainted syzkaller #0 [ 2730.045928][ T7958] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.11669'. [ 2730.052307][ T7956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2730.052326][ T7956] Call Trace: [ 2730.075026][ T7956] [ 2730.078002][ T7956] dump_stack_lvl+0x18c/0x250 [ 2730.082749][ T7956] ? show_regs_print_info+0x20/0x20 [ 2730.087998][ T7956] ? load_image+0x420/0x420 [ 2730.092658][ T7956] ? __might_fault+0xaa/0x120 [ 2730.097411][ T7956] ? __lock_acquire+0x7d80/0x7d80 [ 2730.102492][ T7956] should_fail_ex+0x394/0x4c0 [ 2730.107226][ T7956] _copy_from_iter+0x1cd/0x1290 [ 2730.112119][ T7956] ? __might_fault+0xaa/0x120 [ 2730.116839][ T7956] ? copyout_mc+0x70/0x70 [ 2730.121211][ T7956] ? copyout_mc+0x70/0x70 [ 2730.125582][ T7956] ? __virt_addr_valid+0x10c/0x380 [ 2730.130728][ T7956] ? page_copy_sane+0x16a/0x270 [ 2730.135621][ T7956] copy_page_from_iter+0x7b/0x100 [ 2730.140686][ T7956] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 2730.146630][ T7956] tun_get_user+0xc84/0x3d70 [ 2730.151265][ T7956] ? aa_file_perm+0x3e3/0xee0 [ 2730.155974][ T7956] ? rcu_read_unlock+0xa0/0xa0 [ 2730.160776][ T7956] ? tun_get+0x1c/0x2e0 [ 2730.164966][ T7956] ? __lock_acquire+0x7d80/0x7d80 [ 2730.170036][ T7956] ? tun_get+0x1c/0x2e0 [ 2730.174232][ T7956] tun_chr_write_iter+0x119/0x200 [ 2730.179295][ T7956] vfs_write+0x474/0x9a0 [ 2730.183612][ T7956] ? file_end_write+0x250/0x250 [ 2730.188508][ T7956] ? __fget_files+0x3fc/0x460 [ 2730.193239][ T7956] ? __fdget_pos+0x1d8/0x330 [ 2730.197881][ T7956] ? ksys_write+0x74/0x260 [ 2730.202341][ T7956] ksys_write+0x151/0x260 [ 2730.206712][ T7956] ? __ia32_sys_read+0x90/0x90 [ 2730.211536][ T7956] ? lockdep_hardirqs_on+0x98/0x150 [ 2730.216792][ T7956] do_syscall_64+0x55/0xb0 [ 2730.221292][ T7956] ? clear_bhb_loop+0x40/0x90 [ 2730.226005][ T7956] ? clear_bhb_loop+0x40/0x90 [ 2730.230727][ T7956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2730.236652][ T7956] RIP: 0033:0x7f32ced9e159 [ 2730.241094][ T7956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2730.260740][ T7956] RSP: 002b:00007f32cfcc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2730.269190][ T7956] RAX: ffffffffffffffda RBX: 00007f32cf025fa0 RCX: 00007f32ced9e159 [ 2730.277213][ T7956] RDX: 000000000000fdef RSI: 00002000000004c0 RDI: 00000000000000c8 [ 2730.285213][ T7956] RBP: 00007f32cfcc2090 R08: 0000000000000000 R09: 0000000000000000 [ 2730.293213][ T7956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2730.301299][ T7956] R13: 00007f32cf026038 R14: 00007f32cf025fa0 R15: 00007ffeabb12698 [ 2730.309317][ T7956] [ 2730.896100][ T7973] netlink: 116 bytes leftover after parsing attributes in process `syz.3.11675'. [ 2730.917749][ T7973] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2731.196490][ T7978] netlink: 119 bytes leftover after parsing attributes in process `syz.1.11676'. [ 2731.505858][ T7978] can: request_module (can-proto-0) failed. [ 2732.225936][ T7999] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.11682'. [ 2732.612264][ T8008] validate_nla: 3 callbacks suppressed [ 2732.612306][ T8008] netlink: 'syz.1.11685': attribute type 2 has an invalid length. [ 2732.639003][ T8008] netlink: 116 bytes leftover after parsing attributes in process `syz.1.11685'. [ 2732.653197][ T8008] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2732.739059][ T8008] netlink: 'syz.1.11685': attribute type 39 has an invalid length. [ 2733.355535][ T8029] netlink: 'syz.0.11689': attribute type 2 has an invalid length. [ 2733.400633][ T8029] netlink: 119 bytes leftover after parsing attributes in process `syz.0.11689'. [ 2733.672153][ T8035] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11692'. [ 2733.686294][ T8029] can: request_module (can-proto-0) failed. [ 2734.031697][ T8042] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.11694'. [ 2735.331036][ T8074] netlink: 763 bytes leftover after parsing attributes in process `syz.2.11702'. [ 2735.521057][ T8077] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.11704'. [ 2735.652316][ T8082] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.11705'. [ 2735.699192][ T8077] netlink: 763 bytes leftover after parsing attributes in process `syz.2.11704'. [ 2736.703035][ T8108] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11714'. [ 2736.845406][ T8121] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.11717'. [ 2738.322129][ T8160] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.11730'. [ 2738.356071][ T8157] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11729'. [ 2739.092402][ T8179] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11739'. [ 2739.304577][ T8182] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11741'. [ 2739.384106][ T8188] netlink: 'syz.3.11740': attribute type 2 has an invalid length. [ 2741.236351][ T8231] __nla_validate_parse: 2 callbacks suppressed [ 2741.236374][ T8231] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11752'. [ 2741.265173][ T8229] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.11754'. [ 2741.899251][ T8239] netlink: 'syz.2.11755': attribute type 2 has an invalid length. [ 2741.963231][ T8239] netlink: 119 bytes leftover after parsing attributes in process `syz.2.11755'. [ 2742.624890][ T8252] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.11760'. [ 2743.133472][ T8268] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.11764'. [ 2743.223780][ T8262] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11763'. [ 2744.992785][ T8299] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11774'. [ 2745.022997][ T8295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2745.036526][ T8295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2745.048676][ T8295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2745.056788][ T8295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2745.070643][ T8295] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 2745.078813][ T8295] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 2745.302151][ T8311] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.11777'. [ 2746.007627][ T8325] netlink: 'syz.3.11782': attribute type 10 has an invalid length. [ 2746.037813][ T8325] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11782'. [ 2746.426831][ T8331] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2746.438921][ T8331] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2746.448144][ T8331] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2746.469508][ T8331] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2746.479048][ T8331] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2746.486903][ T8331] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2746.678965][T12588] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2746.763070][ T8336] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11785'. [ 2746.823471][ T8343] netlink: 'syz.0.11787': attribute type 29 has an invalid length. [ 2746.881402][T12588] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2746.941310][ T8343] netlink: 'syz.0.11787': attribute type 29 has an invalid length. [ 2746.968956][ T8344] netlink: 'syz.0.11787': attribute type 29 has an invalid length. [ 2747.031944][T12588] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2747.093341][ T8349] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.11788'. [ 2747.103266][ T8343] netlink: 'syz.0.11787': attribute type 29 has an invalid length. [ 2747.112740][ T8350] netlink: 'syz.0.11787': attribute type 29 has an invalid length. [ 2747.205981][T12588] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2748.103682][ T8366] netlink: 'syz.0.11792': attribute type 10 has an invalid length. [ 2748.285219][ T8366] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11792'. [ 2748.345314][ T8366] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2748.420831][ T8327] chnl_net:caif_netlink_parms(): no params data found [ 2748.584543][T19070] Bluetooth: hci2: command tx timeout [ 2749.263238][ T8394] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11795'. [ 2749.407369][ T8327] bridge0: port 1(bridge_slave_0) entered blocking state [ 2749.414988][ T8327] bridge0: port 1(bridge_slave_0) entered disabled state [ 2749.422269][ T8327] bridge_slave_0: entered allmulticast mode [ 2749.430041][ T8327] bridge_slave_0: entered promiscuous mode [ 2749.499531][ T8327] bridge0: port 2(bridge_slave_1) entered blocking state [ 2749.511855][ T8327] bridge0: port 2(bridge_slave_1) entered disabled state [ 2749.520846][ T8327] bridge_slave_1: entered allmulticast mode [ 2749.532609][ T8327] bridge_slave_1: entered promiscuous mode [ 2749.560375][ T8399] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.11797'. [ 2749.868585][ T8327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2749.929067][ T8327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2750.164726][ T8327] team0: Port device team_slave_0 added [ 2750.193824][ T8327] team0: Port device team_slave_1 added [ 2750.348625][ T8417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2750.362812][ T8417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2750.402017][ T8417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2750.424705][ T8417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2750.465199][ T8417] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 2750.498042][ T8417] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 2750.654898][T19070] Bluetooth: hci2: command tx timeout [ 2750.956448][ T8422] syzkaller0: entered promiscuous mode [ 2750.966092][ T8422] syzkaller0: entered allmulticast mode [ 2751.123436][ T8327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2751.153190][ T8327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2751.263208][ T8327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2752.734460][T19070] Bluetooth: hci2: command tx timeout [ 2753.566632][ T8327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2753.573669][ T8327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2753.600771][ T8327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2753.652190][ T8449] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11805'. [ 2753.850969][ T8457] netlink: 'syz.3.11807': attribute type 29 has an invalid length. [ 2753.913821][ T8327] hsr_slave_0: entered promiscuous mode [ 2753.928569][ T8327] hsr_slave_1: entered promiscuous mode [ 2753.935639][ T8327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2753.943262][ T8327] Cannot create hsr debugfs directory [ 2753.958369][ T8457] netlink: 'syz.3.11807': attribute type 29 has an invalid length. [ 2754.004160][ T8458] netlink: 'syz.3.11807': attribute type 29 has an invalid length. [ 2754.056313][ T8457] netlink: 'syz.3.11807': attribute type 29 has an invalid length. [ 2754.152244][ T8457] netlink: 'syz.3.11807': attribute type 29 has an invalid length. [ 2754.365872][T12588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2754.373396][T12588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2754.407685][T12588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2754.419192][T12588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2754.438081][T12588] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 2754.450445][T12588] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 2754.500684][T12588] veth1_macvtap: left promiscuous mode [ 2754.509484][T12588] veth0_macvtap: left promiscuous mode [ 2754.518684][T12588] veth1_vlan: left allmulticast mode [ 2754.557365][T12588] veth1_vlan: left promiscuous mode [ 2754.595984][T12588] veth0_vlan: left promiscuous mode [ 2754.816473][T19070] Bluetooth: hci2: command tx timeout [ 2755.540495][T12588] macvlan0 (unregistering): left allmulticast mode [ 2755.553743][T12588] team0 (unregistering): Port device macvlan0 removed [ 2755.892188][T12588] .76žÿ (unregistering): left allmulticast mode [ 2755.900663][T12588] team0 (unregistering): Port device .76žÿ removed [ 2755.950898][T12588] C (unregistering): left allmulticast mode [ 2755.958122][T12588] team0 (unregistering): Port device C removed [ 2756.932501][ T8500] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11816'. [ 2756.943323][ T8503] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11815'. [ 2757.627101][ T8524] netlink: 'syz.0.11822': attribute type 2 has an invalid length. [ 2757.645295][ T8524] netlink: 116 bytes leftover after parsing attributes in process `syz.0.11822'. [ 2757.672012][ T8524] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2757.739207][ T8528] netlink: 'syz.0.11822': attribute type 39 has an invalid length. [ 2757.887962][ T8327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2757.911813][ T8327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2757.949179][ T8327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2757.998638][ T8327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2758.366763][ T8327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2758.523745][ T8327] 8021q: adding VLAN 0 to HW filter on device team0 [ 2758.640446][T12588] bridge0: port 1(bridge_slave_0) entered blocking state [ 2758.647733][T12588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2758.693942][T12588] bridge0: port 2(bridge_slave_1) entered blocking state [ 2758.701225][T12588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2758.737579][ T8542] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11827'. [ 2758.918938][ T8327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2759.003118][ T8555] netlink: 'syz.1.11830': attribute type 21 has an invalid length. [ 2759.018113][ T8555] netlink: 'syz.1.11830': attribute type 6 has an invalid length. [ 2759.034942][ T8555] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11830'. [ 2759.066214][ T8558] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11830'. [ 2759.402923][ T8573] netlink: 'syz.0.11838': attribute type 2 has an invalid length. [ 2759.431495][ T8573] netlink: 119 bytes leftover after parsing attributes in process `syz.0.11838'. [ 2759.535659][ T8570] netlink: 'syz.1.11831': attribute type 2 has an invalid length. [ 2759.543718][ T8570] netlink: 116 bytes leftover after parsing attributes in process `syz.1.11831'. [ 2759.553173][ T8570] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2759.609915][ T8570] netlink: 'syz.1.11831': attribute type 39 has an invalid length. [ 2759.642401][ T8327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2759.796598][ T8327] veth0_vlan: entered promiscuous mode [ 2759.826967][ T8327] veth1_vlan: entered promiscuous mode [ 2759.931193][ T8585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2759.939959][ T8585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2759.957154][ T8585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2759.965141][ T8585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2759.974015][ T8585] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 2759.985291][ T8585] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 2760.121558][ T8327] veth0_macvtap: entered promiscuous mode [ 2760.158063][ T8327] veth1_macvtap: entered promiscuous mode [ 2760.222681][ T8327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2760.250966][ T8327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2760.317844][ T8327] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2760.339150][ T8327] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2760.359321][ T8327] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2760.373345][ T8327] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2760.557547][ T8598] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11836'. [ 2760.681459][ T1426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2760.713574][ T1426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2760.848526][ T1431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2760.910299][ T8610] netlink: 'syz.0.11841': attribute type 10 has an invalid length. [ 2760.924410][ T1431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2760.934996][ T8610] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11841'. [ 2760.949487][ T8610] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2761.126631][ T8617] netlink: 'syz.1.11842': attribute type 2 has an invalid length. [ 2761.158929][ T8617] netlink: 119 bytes leftover after parsing attributes in process `syz.1.11842'. [ 2761.970420][ T8649] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.11849'. [ 2762.244793][ T8656] netlink: 'syz.1.11851': attribute type 10 has an invalid length. [ 2762.263528][ T8656] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11851'. [ 2762.285234][ T8656] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2763.287191][ T8687] netlink: 'syz.0.11858': attribute type 2 has an invalid length. [ 2763.835385][ T8695] __nla_validate_parse: 1 callbacks suppressed [ 2763.835409][ T8695] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11861'. [ 2764.110383][ T8695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2764.167770][ T8695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2764.223849][ T8695] bond0 (unregistering): Released all slaves [ 2764.278088][ T8702] netlink: 'syz.1.11862': attribute type 10 has an invalid length. [ 2764.287759][ T8702] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11862'. [ 2764.315917][ T8702] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2764.404854][ T8706] netlink: 'syz.3.11863': attribute type 2 has an invalid length. [ 2764.413338][ T8706] netlink: 116 bytes leftover after parsing attributes in process `syz.3.11863'. [ 2764.445154][ T8706] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2764.516429][ T8709] netlink: 'syz.3.11863': attribute type 39 has an invalid length. [ 2765.276356][ T8742] netlink: 'syz.3.11872': attribute type 2 has an invalid length. [ 2765.324256][ T8742] netlink: 119 bytes leftover after parsing attributes in process `syz.3.11872'. [ 2765.421509][ T8744] netlink: 'syz.1.11873': attribute type 2 has an invalid length. [ 2765.432658][ T8744] netlink: 116 bytes leftover after parsing attributes in process `syz.1.11873'. [ 2765.444249][ T8744] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2765.524402][ T8750] netlink: 'syz.1.11873': attribute type 39 has an invalid length. [ 2765.560203][ T8746] netlink: 'syz.2.11874': attribute type 10 has an invalid length. [ 2765.568567][ T8746] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11874'. [ 2765.581598][ T8746] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 2765.593122][ T8746] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2765.622465][ T8746] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 2766.067072][ T8761] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11876'. [ 2766.924845][ T8787] netlink: 'syz.2.11883': attribute type 6 has an invalid length. [ 2766.956069][ T8787] netlink: 164 bytes leftover after parsing attributes in process `syz.2.11883'. [ 2767.384080][ T8805] netlink: 'syz.0.11887': attribute type 2 has an invalid length. [ 2767.412819][ T8805] netlink: 119 bytes leftover after parsing attributes in process `syz.0.11887'. [ 2767.441469][ T8803] netlink: 'syz.3.11888': attribute type 2 has an invalid length. [ 2767.450981][ T8803] netlink: 116 bytes leftover after parsing attributes in process `syz.3.11888'. [ 2767.471345][ T8803] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2768.486666][ T8834] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2768.878808][ T8849] __nla_validate_parse: 2 callbacks suppressed [ 2768.878827][ T8849] netlink: 119 bytes leftover after parsing attributes in process `syz.2.11899'. [ 2768.974008][ T8848] netlink: 116 bytes leftover after parsing attributes in process `syz.0.11898'. [ 2768.994502][ T8848] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2769.314059][ T8858] validate_nla: 5 callbacks suppressed [ 2769.314143][ T8858] netlink: 'syz.0.11902': attribute type 6 has an invalid length. [ 2769.335630][ T8858] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11902'. [ 2771.249869][ T8889] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.11913'. [ 2771.448100][ T8889] mac80211_hwsim hwsim71 .3ãc¤±: renamed from wlan1 (while UP) [ 2772.088272][ T8907] netlink: 'syz.3.11919': attribute type 19 has an invalid length. [ 2772.103830][ T8907] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11919'. [ 2772.533966][ T8921] netlink: 'syz.0.11923': attribute type 2 has an invalid length. [ 2772.549047][ T8921] netlink: 116 bytes leftover after parsing attributes in process `syz.0.11923'. [ 2772.559923][ T8921] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2772.585925][ T8921] netlink: 'syz.0.11923': attribute type 39 has an invalid length. [ 2772.917252][ T8934] netlink: 'syz.1.11930': attribute type 6 has an invalid length. [ 2772.933828][ T8934] netlink: 164 bytes leftover after parsing attributes in process `syz.1.11930'. [ 2773.586976][ T8947] netlink: 'syz.3.11931': attribute type 2 has an invalid length. [ 2773.634376][ T8947] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11931'. [ 2774.421729][ T8954] netlink: 'syz.1.11935': attribute type 2 has an invalid length. [ 2774.434964][ T8954] netlink: 116 bytes leftover after parsing attributes in process `syz.1.11935'. [ 2774.453198][ T8954] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2774.479036][ T8954] netlink: 'syz.1.11935': attribute type 39 has an invalid length. [ 2774.856288][ T8969] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.11941'. [ 2775.137237][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.143785][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.753744][ T8979] netlink: 'syz.3.11942': attribute type 6 has an invalid length. [ 2775.764617][ T8979] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11942'. [ 2776.012790][ T8980] netlink: 'syz.2.11944': attribute type 2 has an invalid length. [ 2776.029798][ T8980] netlink: 119 bytes leftover after parsing attributes in process `syz.2.11944'. [ 2776.062042][ T8985] netlink: 'syz.1.11945': attribute type 2 has an invalid length. [ 2776.071795][ T8985] netlink: 116 bytes leftover after parsing attributes in process `syz.1.11945'. [ 2776.085645][ T8985] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2776.105602][ T8987] netlink: 'syz.1.11945': attribute type 39 has an invalid length. [ 2776.857398][ T9003] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11951'. [ 2777.139435][ T9011] netlink: 'syz.3.11955': attribute type 2 has an invalid length. [ 2777.153736][ T9011] netlink: 116 bytes leftover after parsing attributes in process `syz.3.11955'. [ 2777.167238][ T9011] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2777.222496][ T9016] netlink: 'syz.3.11955': attribute type 39 has an invalid length. [ 2777.237358][ T9017] netlink: 'syz.1.11956': attribute type 2 has an invalid length. [ 2777.249131][ T9017] netlink: 119 bytes leftover after parsing attributes in process `syz.1.11956'. [ 2777.270151][ T9015] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.11957'. [ 2777.973407][ T9037] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11963'. [ 2778.038211][ T9039] netlink: 'syz.1.11964': attribute type 6 has an invalid length. [ 2778.250995][ T9045] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2778.379201][ T9047] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2779.419436][ T9075] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2779.520321][ T9075] validate_nla: 6 callbacks suppressed [ 2779.520361][ T9075] netlink: 'syz.0.11978': attribute type 39 has an invalid length. [ 2779.836104][ T9085] netlink: 'syz.0.11982': attribute type 10 has an invalid length. [ 2779.857856][ T9085] __nla_validate_parse: 8 callbacks suppressed [ 2779.857878][ T9085] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11982'. [ 2779.885841][ T9085] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2779.909772][ T9088] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.11983'. [ 2780.193220][ T9093] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11986'. [ 2780.302938][ T9096] netlink: 'syz.3.11987': attribute type 6 has an invalid length. [ 2780.316215][ T9096] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11987'. [ 2780.969373][ T9103] netlink: 'syz.3.11990': attribute type 2 has an invalid length. [ 2780.985590][ T9103] netlink: 116 bytes leftover after parsing attributes in process `syz.3.11990'. [ 2781.014487][ T9103] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2781.080149][ T9105] netlink: 'syz.2.11988': attribute type 2 has an invalid length. [ 2781.104412][ T9105] netlink: 119 bytes leftover after parsing attributes in process `syz.2.11988'. [ 2781.176459][ T9100] netlink: 'syz.3.11990': attribute type 39 has an invalid length. [ 2781.497053][ T9112] netlink: 'syz.1.11993': attribute type 10 has an invalid length. [ 2781.506536][ T9112] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11993'. [ 2781.525107][ T9112] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2782.197713][ T9123] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11996'. [ 2782.506473][ T8331] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2782.517038][ T8331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2782.537924][ T8331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2782.552288][ T8331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2782.562031][ T8331] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2782.569738][ T8331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2782.772561][ T1431] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2782.940413][ T1431] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2782.962660][ T9142] netlink: 'syz.0.12002': attribute type 2 has an invalid length. [ 2782.977596][ T9142] netlink: 116 bytes leftover after parsing attributes in process `syz.0.12002'. [ 2783.000206][ T9142] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2783.061983][ T1431] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2783.078029][ T9144] netlink: 'syz.0.12002': attribute type 39 has an invalid length. [ 2783.109248][ T9145] netlink: 'syz.2.12003': attribute type 10 has an invalid length. [ 2783.119208][ T9145] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12003'. [ 2783.202879][ T1431] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2783.478684][ T9130] chnl_net:caif_netlink_parms(): no params data found [ 2784.530392][ T9130] bridge0: port 1(bridge_slave_0) entered blocking state [ 2784.545119][ T9130] bridge0: port 1(bridge_slave_0) entered disabled state [ 2784.568575][ T9130] bridge_slave_0: entered allmulticast mode [ 2784.596893][ T9130] bridge_slave_0: entered promiscuous mode [ 2784.663732][T19070] Bluetooth: hci1: command tx timeout [ 2784.690673][ T9178] validate_nla: 2 callbacks suppressed [ 2784.690715][ T9178] netlink: 'syz.3.12011': attribute type 2 has an invalid length. [ 2784.705952][ T9178] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2784.781593][ T9130] bridge0: port 2(bridge_slave_1) entered blocking state [ 2784.789199][ T9130] bridge0: port 2(bridge_slave_1) entered disabled state [ 2784.797121][ T9130] bridge_slave_1: entered allmulticast mode [ 2784.806103][ T9130] bridge_slave_1: entered promiscuous mode [ 2784.817118][ T9182] netlink: 'syz.3.12011': attribute type 39 has an invalid length. [ 2784.833905][ T9185] netlink: 'syz.0.12012': attribute type 10 has an invalid length. [ 2784.846111][ T9185] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2785.069041][ T9130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2785.087045][ T9191] netlink: 'syz.3.12014': attribute type 6 has an invalid length. [ 2785.096542][ T9191] __nla_validate_parse: 5 callbacks suppressed [ 2785.096560][ T9191] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12014'. [ 2785.148344][ T9130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2785.326099][ T9130] team0: Port device team_slave_0 added [ 2785.361859][ T9130] team0: Port device team_slave_1 added [ 2785.440216][ T9130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2785.449876][ T9130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2785.485588][ T9130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2785.506829][ T9130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2785.516675][ T9130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2785.550050][ T9130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2785.633751][ T9200] syzkaller0: entered promiscuous mode [ 2785.654296][ T9200] syzkaller0: entered allmulticast mode [ 2786.741520][T19070] Bluetooth: hci1: command tx timeout [ 2788.126881][ T9130] hsr_slave_0: entered promiscuous mode [ 2788.133567][ T9130] hsr_slave_1: entered promiscuous mode [ 2788.141435][ T9130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2788.149176][ T9130] Cannot create hsr debugfs directory [ 2788.449198][ T1431] hsr_slave_0: left promiscuous mode [ 2788.481264][ T1431] veth1_macvtap: left promiscuous mode [ 2788.494495][ T1431] veth0_macvtap: left promiscuous mode [ 2788.500257][ T1431] veth1_vlan: left promiscuous mode [ 2788.525140][ T1431] veth0_vlan: left promiscuous mode [ 2788.824702][T19070] Bluetooth: hci1: command tx timeout [ 2789.564634][ T1431] team_slave_1 (unregistering): left allmulticast mode [ 2789.577273][ T1431] team0 (unregistering): Port device team_slave_1 removed [ 2789.633071][ T1431] C (unregistering): left allmulticast mode [ 2789.642460][ T1431] team0 (unregistering): Port device C removed [ 2790.138675][ T9229] netlink: 'syz.2.12020': attribute type 6 has an invalid length. [ 2790.146800][ T9229] netlink: 164 bytes leftover after parsing attributes in process `syz.2.12020'. [ 2790.159596][ T9236] netlink: 'syz.3.12022': attribute type 6 has an invalid length. [ 2790.168366][ T9236] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12022'. [ 2790.184885][ T9237] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12021'. [ 2790.342123][ T9247] netlink: 'syz.3.12025': attribute type 10 has an invalid length. [ 2790.374459][ T9247] netlink: 55 bytes leftover after parsing attributes in process `syz.3.12025'. [ 2790.895997][T19070] Bluetooth: hci1: command tx timeout [ 2791.338947][ T9268] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.12031'. [ 2791.508426][ T9272] netlink: 'syz.0.12032': attribute type 6 has an invalid length. [ 2791.544494][ T9272] netlink: 164 bytes leftover after parsing attributes in process `syz.0.12032'. [ 2791.560597][ T9276] netlink: 'syz.2.12033': attribute type 6 has an invalid length. [ 2791.594458][ T9276] netlink: 164 bytes leftover after parsing attributes in process `syz.2.12033'. [ 2792.377116][ T9130] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2792.408117][ T9130] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2792.451838][ T9130] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2792.479370][ T9130] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2792.683870][ T9130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2792.718854][ T9130] 8021q: adding VLAN 0 to HW filter on device team0 [ 2792.740110][ T1431] bridge0: port 1(bridge_slave_0) entered blocking state [ 2792.747376][ T1431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2792.777689][ T1431] bridge0: port 2(bridge_slave_1) entered blocking state [ 2792.784980][ T1431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2793.403838][ T9130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2793.572172][ T9130] veth0_vlan: entered promiscuous mode [ 2793.618438][ T9130] veth1_vlan: entered promiscuous mode [ 2793.739637][ T9130] veth0_macvtap: entered promiscuous mode [ 2793.781400][ T9130] veth1_macvtap: entered promiscuous mode [ 2793.817198][ T9306] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12035'. [ 2793.848759][ T9130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2793.860189][ T9130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2793.874457][ T9130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2793.907663][ T9130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2793.964348][ T9130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2794.005959][ T9130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2794.042049][ T9130] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2794.074346][ T9130] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2794.094481][ T9130] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2794.115700][ T9130] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2794.397989][ T1442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2794.419070][ T1442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2794.499439][ T1426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2794.538088][ T1426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2794.605557][ T9331] netlink: 180 bytes leftover after parsing attributes in process `syz.0.12042'. [ 2794.662114][ T9334] netlink: 'syz.3.12044': attribute type 6 has an invalid length. [ 2794.680654][ T9334] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12044'. [ 2794.823557][ T9337] mac80211_hwsim hwsim74 .3ãc¤±: renamed from wlan1 (while UP) [ 2795.049677][ T9342] netlink: set zone limit has 8 unknown bytes [ 2795.505636][ T9351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2795.524438][ T9351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2795.535654][ T9351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2795.543587][ T9351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2796.836388][ T9388] FAULT_INJECTION: forcing a failure. [ 2796.836388][ T9388] name failslab, interval 1, probability 0, space 0, times 0 [ 2796.854569][ T9386] netlink: 'syz.0.12053': attribute type 2 has an invalid length. [ 2796.864633][ T9388] CPU: 0 PID: 9388 Comm: syz.2.12052 Not tainted syzkaller #0 [ 2796.872256][ T9388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2796.882375][ T9388] Call Trace: [ 2796.885729][ T9388] [ 2796.888710][ T9388] dump_stack_lvl+0x18c/0x250 [ 2796.893450][ T9388] ? show_regs_print_info+0x20/0x20 [ 2796.898716][ T9388] ? load_image+0x420/0x420 [ 2796.903281][ T9388] ? __lock_acquire+0x7d80/0x7d80 [ 2796.908368][ T9388] ? verify_lock_unused+0x140/0x140 [ 2796.913658][ T9388] should_fail_ex+0x394/0x4c0 [ 2796.918403][ T9388] should_failslab+0x9/0x20 [ 2796.922958][ T9388] slab_pre_alloc_hook+0x59/0x300 [ 2796.928053][ T9388] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 2796.933684][ T9388] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 2796.939293][ T9388] __kmem_cache_alloc_node+0x53/0x250 [ 2796.944728][ T9388] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 2796.950342][ T9388] __kmalloc+0xa7/0x240 [ 2796.954565][ T9388] bpf_prog_test_run_skb+0x242/0x18f0 [ 2796.959998][ T9388] ? __fget_files+0x28/0x460 [ 2796.964658][ T9388] ? __fget_files+0x3fc/0x460 [ 2796.969407][ T9388] ? cpu_online+0x60/0x60 [ 2796.973798][ T9388] bpf_prog_test_run+0x31f/0x390 [ 2796.978795][ T9388] __sys_bpf+0x49d/0x890 [ 2796.983098][ T9388] ? bpf_link_show_fdinfo+0x390/0x390 [ 2796.988540][ T9388] ? lock_chain_count+0x20/0x20 [ 2796.993466][ T9388] __x64_sys_bpf+0x7c/0x90 [ 2796.997934][ T9388] do_syscall_64+0x55/0xb0 [ 2797.002402][ T9388] ? clear_bhb_loop+0x40/0x90 [ 2797.007135][ T9388] ? clear_bhb_loop+0x40/0x90 [ 2797.011957][ T9388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2797.017915][ T9388] RIP: 0033:0x7f699d79e159 [ 2797.022406][ T9388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2797.042072][ T9388] RSP: 002b:00007f699e593028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2797.050546][ T9388] RAX: ffffffffffffffda RBX: 00007f699da26090 RCX: 00007f699d79e159 [ 2797.058599][ T9388] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 2797.066615][ T9388] RBP: 00007f699e593090 R08: 0000000000000000 R09: 0000000000000000 [ 2797.074660][ T9388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2797.082669][ T9388] R13: 00007f699da26128 R14: 00007f699da26090 R15: 00007fff4c4227d8 [ 2797.090708][ T9388] [ 2797.100429][ T9386] __nla_validate_parse: 1 callbacks suppressed [ 2797.100481][ T9386] netlink: 116 bytes leftover after parsing attributes in process `syz.0.12053'. [ 2797.146272][ T9386] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2797.208164][ T9386] netlink: 'syz.0.12053': attribute type 39 has an invalid length. [ 2797.283490][ T9393] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.12054'. [ 2797.437985][ T9396] netlink: 'syz.0.12055': attribute type 10 has an invalid length. [ 2797.465119][ T9396] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12055'. [ 2798.332969][ T9426] FAULT_INJECTION: forcing a failure. [ 2798.332969][ T9426] name failslab, interval 1, probability 0, space 0, times 0 [ 2798.348041][ T9426] CPU: 1 PID: 9426 Comm: syz.0.12061 Not tainted syzkaller #0 [ 2798.355608][ T9426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2798.365721][ T9426] Call Trace: [ 2798.369062][ T9426] [ 2798.372082][ T9426] dump_stack_lvl+0x18c/0x250 [ 2798.376828][ T9426] ? show_regs_print_info+0x20/0x20 [ 2798.382104][ T9426] ? load_image+0x420/0x420 [ 2798.386683][ T9426] should_fail_ex+0x394/0x4c0 [ 2798.391433][ T9426] should_failslab+0x9/0x20 [ 2798.396005][ T9426] slab_pre_alloc_hook+0x59/0x300 [ 2798.401110][ T9426] kmem_cache_alloc+0x5a/0x2c0 [ 2798.405946][ T9426] ? dst_alloc+0x105/0x170 [ 2798.410952][ T9426] dst_alloc+0x105/0x170 [ 2798.415256][ T9426] rt_dst_clone+0x58/0x680 [ 2798.419735][ T9426] ip_mc_finish_output+0xea/0x260 [ 2798.424811][ T9426] ? skb_clone+0x21f/0x370 [ 2798.429274][ T9426] ip_mc_output+0x254/0x570 [ 2798.433811][ T9426] ip_send_skb+0x12f/0x1d0 [ 2798.438301][ T9426] raw_sendmsg+0x15de/0x1ba0 [ 2798.442966][ T9426] ? compat_raw_ioctl+0x70/0x70 [ 2798.447884][ T9426] ? aa_sk_perm+0x83c/0x970 [ 2798.452457][ T9426] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 2798.458924][ T9426] ? aa_sock_msg_perm+0x94/0x150 [ 2798.463916][ T9426] ? sock_rps_record_flow+0x19/0x3f0 [ 2798.469256][ T9426] ? inet_sendmsg+0x7e/0x2a0 [ 2798.473881][ T9426] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2798.479239][ T9426] ? inet_send_prepare+0x250/0x250 [ 2798.484386][ T9426] ____sys_sendmsg+0x61b/0x980 [ 2798.489193][ T9426] ? __sys_sendmsg_sock+0x30/0x30 [ 2798.494252][ T9426] ? __import_iovec+0x3fa/0x850 [ 2798.499148][ T9426] ? import_iovec+0x73/0xa0 [ 2798.503693][ T9426] ___sys_sendmsg+0x2a6/0x360 [ 2798.508447][ T9426] ? __sys_sendmsg+0x2b0/0x2b0 [ 2798.513260][ T9426] ? trace_call_bpf+0xc3/0x6c0 [ 2798.518079][ T9426] __se_sys_sendmsg+0x1d0/0x2c0 [ 2798.522968][ T9426] ? perf_trace_preemptirq_template+0x269/0x330 [ 2798.529273][ T9426] ? __x64_sys_sendmsg+0x80/0x80 [ 2798.534340][ T9426] ? lockdep_hardirqs_on+0x98/0x150 [ 2798.539576][ T9426] do_syscall_64+0x55/0xb0 [ 2798.544021][ T9426] ? clear_bhb_loop+0x40/0x90 [ 2798.548729][ T9426] ? clear_bhb_loop+0x40/0x90 [ 2798.553446][ T9426] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2798.559375][ T9426] RIP: 0033:0x7f7a9899e159 [ 2798.563816][ T9426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2798.583464][ T9426] RSP: 002b:00007f7a99867028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2798.591917][ T9426] RAX: ffffffffffffffda RBX: 00007f7a98c25fa0 RCX: 00007f7a9899e159 [ 2798.599922][ T9426] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000003 [ 2798.607933][ T9426] RBP: 00007f7a99867090 R08: 0000000000000000 R09: 0000000000000000 [ 2798.615971][ T9426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2798.623981][ T9426] R13: 00007f7a98c26038 R14: 00007f7a98c25fa0 R15: 00007ffc155f8398 [ 2798.631997][ T9426] [ 2798.932633][ T9430] netlink: 'syz.0.12063': attribute type 2 has an invalid length. [ 2798.954420][ T9430] netlink: 116 bytes leftover after parsing attributes in process `syz.0.12063'. [ 2798.977070][ T9430] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2799.003766][ T9433] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.12064'. [ 2799.025872][ T9437] netlink: 'syz.2.12065': attribute type 6 has an invalid length. [ 2799.042856][ T9437] netlink: 164 bytes leftover after parsing attributes in process `syz.2.12065'. [ 2799.136778][ T9430] netlink: 'syz.0.12063': attribute type 39 has an invalid length. [ 2801.003936][ T9486] netlink: 'syz.3.12075': attribute type 2 has an invalid length. [ 2801.025141][ T9486] netlink: 116 bytes leftover after parsing attributes in process `syz.3.12075'. [ 2801.045283][ T9486] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2801.118851][ T9486] netlink: 'syz.3.12075': attribute type 39 has an invalid length. [ 2801.239327][ T9493] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.12076'. [ 2802.268418][ T9524] netlink: 'syz.1.12085': attribute type 6 has an invalid length. [ 2802.283009][ T9524] netlink: 164 bytes leftover after parsing attributes in process `syz.1.12085'. [ 2802.499170][ T9522] netlink: 'syz.0.12086': attribute type 2 has an invalid length. [ 2802.538436][ T9522] netlink: 116 bytes leftover after parsing attributes in process `syz.0.12086'. [ 2802.554723][ T9522] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2802.572796][ T9526] netlink: 'syz.0.12086': attribute type 39 has an invalid length. [ 2802.768931][ T9541] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.12090'. [ 2803.523942][ T9557] netlink: 'syz.3.12097': attribute type 2 has an invalid length. [ 2803.538427][ T9557] netlink: 116 bytes leftover after parsing attributes in process `syz.3.12097'. [ 2803.564527][ T9557] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2803.592118][ T9559] netlink: 'syz.3.12097': attribute type 39 has an invalid length. [ 2803.743545][ T9564] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.12099'. [ 2803.826353][ T9566] netlink: 'syz.1.12100': attribute type 10 has an invalid length. [ 2803.936440][ T9566] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12100'. [ 2803.957739][ T9566] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2804.422336][ T9582] C: renamed from team_slave_0 (while UP) [ 2804.443521][ T9582] netlink: 'syz.1.12107': attribute type 2 has an invalid length. [ 2804.452091][ T9582] netlink: 116 bytes leftover after parsing attributes in process `syz.1.12107'. [ 2804.462426][ T9582] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2804.492461][ T9582] netlink: 'syz.1.12107': attribute type 39 has an invalid length. [ 2804.602261][ T9582] hsr_slave_1 (unregistering): left promiscuous mode [ 2804.846261][ T9592] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.12110'. [ 2804.866457][ T9594] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.12111'. [ 2805.643375][ T9614] netlink: 'syz.1.12117': attribute type 2 has an invalid length. [ 2805.684549][ T9614] netlink: 119 bytes leftover after parsing attributes in process `syz.1.12117'. [ 2806.443606][ T9625] netlink: 'syz.0.12120': attribute type 2 has an invalid length. [ 2806.474657][ T9625] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2807.882036][ T8331] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2807.883544][ T9649] validate_nla: 1 callbacks suppressed [ 2807.883590][ T9649] netlink: 'syz.3.12129': attribute type 2 has an invalid length. [ 2807.925935][ T8331] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2807.929739][ T9649] __nla_validate_parse: 2 callbacks suppressed [ 2807.929831][ T9649] netlink: 119 bytes leftover after parsing attributes in process `syz.3.12129'. [ 2807.954065][ T8331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2807.965456][ T8331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2808.003254][ T8331] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2808.012045][ T8331] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2808.216672][ T9652] netlink: 'syz.1.12130': attribute type 2 has an invalid length. [ 2808.232084][ T9652] netlink: 116 bytes leftover after parsing attributes in process `syz.1.12130'. [ 2808.242235][ T9652] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2808.287744][ T9656] netlink: 'syz.1.12130': attribute type 39 has an invalid length. [ 2808.638645][ T9654] chnl_net:caif_netlink_parms(): no params data found [ 2808.818068][ T9675] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.12136'. [ 2808.828393][ T9654] bridge0: port 1(bridge_slave_0) entered blocking state [ 2808.835865][ T9654] bridge0: port 1(bridge_slave_0) entered disabled state [ 2808.843258][ T9654] bridge_slave_0: entered allmulticast mode [ 2808.851856][ T9654] bridge_slave_0: entered promiscuous mode [ 2808.880676][ T9654] bridge0: port 2(bridge_slave_1) entered blocking state [ 2808.890942][ T9654] bridge0: port 2(bridge_slave_1) entered disabled state [ 2808.904620][ T9654] bridge_slave_1: entered allmulticast mode [ 2808.912382][ T9654] bridge_slave_1: entered promiscuous mode [ 2808.954655][ T9654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2808.985297][ T9654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2809.082384][ T9654] team0: Port device team_slave_0 added [ 2809.100085][ T9654] team0: Port device team_slave_1 added [ 2809.158622][ T9654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2809.165969][ T9654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2809.193947][ T9654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2809.207992][ T9654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2809.215156][ T9654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2809.304735][ T9654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2809.396759][ T9654] hsr_slave_0: entered promiscuous mode [ 2809.406281][ T9654] hsr_slave_1: entered promiscuous mode [ 2809.520326][ T9687] netlink: 'syz.3.12140': attribute type 2 has an invalid length. [ 2809.530501][ T9687] netlink: 116 bytes leftover after parsing attributes in process `syz.3.12140'. [ 2809.548011][ T9687] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2809.605172][ T9690] netlink: 'syz.3.12140': attribute type 39 has an invalid length. [ 2809.829379][ T9654] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2810.094497][ T8331] Bluetooth: hci3: command tx timeout [ 2810.139782][ T9654] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2810.205466][ T9702] netlink: 'syz.2.12144': attribute type 2 has an invalid length. [ 2810.213847][ T9702] netlink: 119 bytes leftover after parsing attributes in process `syz.2.12144'. [ 2810.442520][ T9654] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2810.494542][ T9705] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.12145'. [ 2810.670291][ T9654] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2811.136052][ T9715] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12148'. [ 2811.170690][ T9654] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2811.189357][ T9654] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2811.216733][ T9654] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2811.250194][ T9654] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2811.388118][ T9717] C: renamed from team_slave_0 (while UP) [ 2811.412848][ T9717] netlink: 'syz.2.12150': attribute type 2 has an invalid length. [ 2811.421413][ T9717] netlink: 116 bytes leftover after parsing attributes in process `syz.2.12150'. [ 2811.450657][ T9717] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2811.481967][ T9721] netlink: 'syz.2.12150': attribute type 39 has an invalid length. [ 2811.639777][ T9721] hsr_slave_1 (unregistering): left promiscuous mode [ 2811.811767][ T9730] netlink: 'syz.1.12154': attribute type 6 has an invalid length. [ 2811.839698][ T9730] netlink: 164 bytes leftover after parsing attributes in process `syz.1.12154'. [ 2811.939153][ T9654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2811.995103][ T9732] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.12155'. [ 2812.089390][ T9654] 8021q: adding VLAN 0 to HW filter on device team0 [ 2812.174959][ T8331] Bluetooth: hci3: command tx timeout [ 2812.212923][T29720] bridge0: port 1(bridge_slave_0) entered blocking state [ 2812.220304][T29720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2812.334938][T27057] bridge0: port 2(bridge_slave_1) entered blocking state [ 2812.342171][T27057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2812.700950][ T9742] netlink: 'syz.3.12158': attribute type 10 has an invalid length. [ 2812.745133][ T9742] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2813.482191][ T9654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2813.586290][ T9654] veth0_vlan: entered promiscuous mode [ 2813.618281][ T9654] veth1_vlan: entered promiscuous mode [ 2813.691393][ T9654] veth0_macvtap: entered promiscuous mode [ 2813.729820][ T9654] veth1_macvtap: entered promiscuous mode [ 2813.776610][ T9654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2813.790209][ T9654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2813.805307][ T9654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2813.834843][ T9654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2813.846479][ T9654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2813.872342][ T9654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2813.901567][ T9654] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2813.921991][ T9654] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2813.939738][ T9654] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2813.957977][ T9654] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2814.000391][ T9760] netlink: 'syz.1.12163': attribute type 2 has an invalid length. [ 2814.017602][ T9760] __nla_validate_parse: 2 callbacks suppressed [ 2814.017640][ T9760] netlink: 116 bytes leftover after parsing attributes in process `syz.1.12163'. [ 2814.036498][ T9760] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2814.060979][ T9763] netlink: 'syz.1.12163': attribute type 39 has an invalid length. [ 2814.204278][ T9766] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.12165'. [ 2814.264339][ T8331] Bluetooth: hci3: command tx timeout [ 2814.275872][ T1442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2814.329942][ T1442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2814.550481][ T9768] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12166'. [ 2814.564680][T29720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2814.572602][T29720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2814.673175][ T9768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2814.704052][ T9768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2814.735450][ T9768] bond0 (unregistering): Released all slaves [ 2814.786048][ T9775] netlink: 'syz.3.12168': attribute type 10 has an invalid length. [ 2814.794115][ T9775] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12168'. [ 2814.817352][ T9775] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2816.334539][ T8331] Bluetooth: hci3: command tx timeout [ 2816.843075][ T9800] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.12175'. [ 2816.994619][ T9802] netlink: 'syz.2.12176': attribute type 6 has an invalid length. [ 2817.002880][ T9802] netlink: 164 bytes leftover after parsing attributes in process `syz.2.12176'. [ 2818.092776][ T9810] netlink: 'syz.3.12177': attribute type 6 has an invalid length. [ 2818.134611][ T9810] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12177'. [ 2818.354766][ T9812] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12178'. [ 2819.014564][ T9817] netlink: 'syz.1.12179': attribute type 10 has an invalid length. [ 2819.049348][ T9817] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12179'. [ 2819.070641][ T9817] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2821.332503][ T9842] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.12186'. [ 2821.552361][ T9846] netlink: 'syz.2.12185': attribute type 2 has an invalid length. [ 2821.561955][ T9846] netlink: 119 bytes leftover after parsing attributes in process `syz.2.12185'. [ 2822.486484][ T9854] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12187'. [ 2822.561017][ T9854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2822.580940][ T9854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2822.593470][ T9854] bond0 (unregistering): Released all slaves [ 2822.863718][ T9859] netlink: 'syz.1.12189': attribute type 10 has an invalid length. [ 2822.873019][ T9859] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12189'. [ 2822.914726][ T9859] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2824.139394][ T9884] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.12196'. [ 2825.111472][ T9891] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12198'. [ 2825.258479][ T9899] netlink: 'syz.1.12199': attribute type 2 has an invalid length. [ 2825.268358][ T9899] netlink: 116 bytes leftover after parsing attributes in process `syz.1.12199'. [ 2825.300474][ T9899] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2825.332390][ T9899] netlink: 'syz.1.12199': attribute type 39 has an invalid length. [ 2825.387620][ T9901] netlink: 'syz.0.12200': attribute type 10 has an invalid length. [ 2825.404578][ T9901] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12200'. [ 2825.422911][ T9901] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 2825.430608][ T9901] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2825.495093][ T9901] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 2825.635614][ T9908] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12203'. [ 2825.933020][ T9924] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.12207'. [ 2826.222284][ T9930] netlink: 'syz.2.12209': attribute type 6 has an invalid length. [ 2826.233284][ T9930] netlink: 164 bytes leftover after parsing attributes in process `syz.2.12209'. [ 2826.384061][ T9932] netlink: 'syz.3.12210': attribute type 2 has an invalid length. [ 2826.418234][ T9932] netlink: 116 bytes leftover after parsing attributes in process `syz.3.12210'. [ 2826.464526][ T9932] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2826.838333][ T9935] netlink: 'syz.3.12210': attribute type 39 has an invalid length. [ 2828.436870][ T9944] netlink: 'syz.3.12213': attribute type 10 has an invalid length. [ 2828.468060][ T9944] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12213'. [ 2828.491845][ T9944] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2829.748322][ T9963] netlink: 'syz.0.12218': attribute type 6 has an invalid length. [ 2829.944255][ T9963] netlink: 164 bytes leftover after parsing attributes in process `syz.0.12218'. [ 2830.558737][ T9972] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.12220'. [ 2830.988315][ T9977] netlink: 'syz.1.12221': attribute type 2 has an invalid length. [ 2831.024458][ T9977] netlink: 116 bytes leftover after parsing attributes in process `syz.1.12221'. [ 2831.066629][ T9977] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2831.160826][ T9977] netlink: 'syz.1.12221': attribute type 39 has an invalid length. [ 2831.439047][ T9980] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12222'. [ 2831.680437][ T9982] netlink: 'syz.1.12223': attribute type 10 has an invalid length. [ 2831.697404][ T9982] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12223'. [ 2831.716740][ T9982] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2831.769115][ T1426] hsr_slave_0: left promiscuous mode [ 2831.810510][ T1426] veth0_macvtap: left promiscuous mode [ 2832.572821][ T1426] macvlan0 (unregistering): left allmulticast mode [ 2832.605031][ T1426] team0 (unregistering): Port device macvlan0 removed [ 2833.313282][ T1426] team_slave_1 (unregistering): left allmulticast mode [ 2833.328688][ T1426] team0 (unregistering): Port device team_slave_1 removed [ 2833.400351][ T1426] C (unregistering): left allmulticast mode [ 2833.409916][ T1426] team0 (unregistering): Port device C removed [ 2833.913332][ T9988] netlink: 'syz.0.12233': attribute type 6 has an invalid length. [ 2833.924141][ T9988] netlink: 164 bytes leftover after parsing attributes in process `syz.0.12233'. [ 2834.150076][T10015] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.12230'. [ 2834.190562][T10017] netlink: 'syz.1.12231': attribute type 2 has an invalid length. [ 2834.208989][T10017] netlink: 116 bytes leftover after parsing attributes in process `syz.1.12231'. [ 2834.225495][T10017] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2834.305892][T10017] netlink: 'syz.1.12231': attribute type 39 has an invalid length. [ 2834.700009][T10022] netlink: 'syz.1.12241': attribute type 2 has an invalid length. [ 2834.726807][T10022] netlink: 116 bytes leftover after parsing attributes in process `syz.1.12241'. [ 2834.755620][T10022] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2835.397278][T10028] netlink: 'syz.2.12234': attribute type 10 has an invalid length. [ 2835.414491][T10028] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12234'. [ 2835.465920][T10022] netlink: 'syz.1.12241': attribute type 39 has an invalid length. [ 2835.742887][T10034] netlink: 'syz.2.12236': attribute type 6 has an invalid length. [ 2835.764382][T10034] netlink: 164 bytes leftover after parsing attributes in process `syz.2.12236'. [ 2835.883239][T10033] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12235'. [ 2836.455180][T10041] netlink: 'syz.0.12246': attribute type 10 has an invalid length. [ 2836.464751][T10041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12246'. [ 2836.610828][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.624356][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2837.454825][T10060] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.12243'. [ 2837.609545][T10060] mac80211_hwsim hwsim76 .3ãc¤±: renamed from wlan1 (while UP) [ 2837.748411][T10063] netlink: 'syz.1.12244': attribute type 2 has an invalid length. [ 2837.757196][T10063] netlink: 116 bytes leftover after parsing attributes in process `syz.1.12244'. [ 2837.784855][T10063] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2837.849371][T10064] netlink: 'syz.1.12244': attribute type 39 has an invalid length. [ 2839.540430][T10077] netlink: 'syz.3.12250': attribute type 10 has an invalid length. [ 2839.553932][T10077] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12250'. [ 2839.564334][T10077] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2840.503652][T10101] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.12255'. [ 2840.741246][T10104] netlink: 'syz.3.12256': attribute type 2 has an invalid length. [ 2840.764898][T10104] netlink: 116 bytes leftover after parsing attributes in process `syz.3.12256'. [ 2840.789405][T10104] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2840.842703][T10104] netlink: 'syz.3.12256': attribute type 39 has an invalid length. [ 2841.093205][T10116] netlink: 'syz.3.12259': attribute type 6 has an invalid length. [ 2841.102291][T10116] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12259'. [ 2841.123323][T10118] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.12267'. [ 2842.000748][T10130] netlink: 'syz.1.12261': attribute type 10 has an invalid length. [ 2842.028067][T10130] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12261'. [ 2842.085167][T10130] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2842.505581][T10148] netlink: 'syz.2.12265': attribute type 29 has an invalid length. [ 2842.555022][T10148] netlink: 'syz.2.12265': attribute type 29 has an invalid length. [ 2842.584873][T10149] netlink: 'syz.2.12265': attribute type 29 has an invalid length. [ 2842.617099][T10148] netlink: 'syz.2.12265': attribute type 29 has an invalid length. [ 2842.924722][T10152] C: renamed from team_slave_0 (while UP) [ 2843.031179][T10152] netlink: 'syz.0.12266': attribute type 2 has an invalid length. [ 2843.047374][T10152] netlink: 116 bytes leftover after parsing attributes in process `syz.0.12266'. [ 2843.104496][T10152] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2843.142852][T10155] netlink: 'syz.0.12266': attribute type 39 has an invalid length. [ 2843.393058][T10155] hsr_slave_1 (unregistering): left promiscuous mode [ 2843.480473][T10160] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.12271'. [ 2843.578456][T10165] mac80211_hwsim hwsim73 wlan0: entered promiscuous mode [ 2843.589758][T10165] mac80211_hwsim hwsim73 wlan0: entered allmulticast mode [ 2843.820187][T10173] netlink: 'syz.2.12274': attribute type 10 has an invalid length. [ 2843.829690][T10173] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12274'. [ 2844.125622][T10187] FAULT_INJECTION: forcing a failure. [ 2844.125622][T10187] name failslab, interval 1, probability 0, space 0, times 0 [ 2844.172448][T10187] CPU: 0 PID: 10187 Comm: syz.2.12278 Not tainted syzkaller #0 [ 2844.180104][T10187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2844.190324][T10187] Call Trace: [ 2844.193664][T10187] [ 2844.196697][T10187] dump_stack_lvl+0x18c/0x250 [ 2844.201458][T10187] ? show_regs_print_info+0x20/0x20 [ 2844.206751][T10187] ? load_image+0x420/0x420 [ 2844.211366][T10187] ? __lock_acquire+0x7d80/0x7d80 [ 2844.216655][T10187] should_fail_ex+0x394/0x4c0 [ 2844.221595][T10187] should_failslab+0x9/0x20 [ 2844.226179][T10187] slab_pre_alloc_hook+0x59/0x300 [ 2844.231397][T10187] ? security_sk_alloc+0x4b/0x130 [ 2844.236585][T10187] ? security_sk_alloc+0x4b/0x130 [ 2844.241709][T10187] __kmem_cache_alloc_node+0x53/0x250 [ 2844.247182][T10187] ? security_sk_alloc+0x4b/0x130 [ 2844.252301][T10187] __kmalloc+0xa7/0x240 [ 2844.256548][T10187] ? sk_prot_alloc+0xe7/0x210 [ 2844.261313][T10187] security_sk_alloc+0x4b/0x130 [ 2844.266241][T10187] sk_prot_alloc+0x101/0x210 [ 2844.270911][T10187] ? sk_alloc+0x24/0x350 [ 2844.275263][T10187] sk_alloc+0x3a/0x350 [ 2844.279444][T10187] mISDN_sock_create+0x329/0x640 [ 2844.284548][T10187] __sock_create+0x49e/0x940 [ 2844.289233][T10187] __sys_socketpair+0x236/0x550 [ 2844.294162][T10187] __x64_sys_socketpair+0x9b/0xb0 [ 2844.299263][T10187] do_syscall_64+0x55/0xb0 [ 2844.303755][T10187] ? clear_bhb_loop+0x40/0x90 [ 2844.308519][T10187] ? clear_bhb_loop+0x40/0x90 [ 2844.313293][T10187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2844.319265][T10187] RIP: 0033:0x7f699d79e159 [ 2844.323743][T10187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2844.343422][T10187] RSP: 002b:00007f699e5b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2844.351914][T10187] RAX: ffffffffffffffda RBX: 00007f699da25fa0 RCX: 00007f699d79e159 [ 2844.360053][T10187] RDX: 0000000000000022 RSI: 0000000000000002 RDI: 0000000000000022 [ 2844.368098][T10187] RBP: 00007f699e5b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2844.376234][T10187] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2844.384278][T10187] R13: 00007f699da26038 R14: 00007f699da25fa0 R15: 00007fff4c4227d8 [ 2844.392347][T10187] [ 2844.455934][T10187] delete_channel: no stack [ 2844.516178][ T1426] tipc: Subscription rejected, illegal request [ 2844.706108][T10193] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12280'. [ 2844.832830][T10204] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.12282'. [ 2844.843960][T10201] netlink: 'syz.3.12283': attribute type 2 has an invalid length. [ 2844.858418][T10201] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2844.945501][T10205] netlink: 'syz.1.12281': attribute type 6 has an invalid length. [ 2845.788538][T10220] __nla_validate_parse: 2 callbacks suppressed [ 2845.788563][T10220] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12286'. [ 2846.050125][T19070] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2846.061496][T19070] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2846.090208][T19070] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2846.103308][T19070] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2846.126851][T19070] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2846.134897][T19070] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2846.703067][T10236] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 2846.791422][T10240] team0: Device wg1 is of different type [ 2846.851736][T10246] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.12292'. [ 2847.419542][T10223] chnl_net:caif_netlink_parms(): no params data found [ 2847.496216][T10258] validate_nla: 3 callbacks suppressed [ 2847.496261][T10258] netlink: 'syz.2.12293': attribute type 2 has an invalid length. [ 2847.520047][T10258] netlink: 116 bytes leftover after parsing attributes in process `syz.2.12293'. [ 2847.535756][T10258] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2847.571620][T10260] netlink: 'syz.2.12293': attribute type 39 has an invalid length. [ 2847.780708][T10223] bridge0: port 1(bridge_slave_0) entered blocking state [ 2847.807961][T10223] bridge0: port 1(bridge_slave_0) entered disabled state [ 2847.836994][T10223] bridge_slave_0: entered allmulticast mode [ 2847.859629][T10223] bridge_slave_0: entered promiscuous mode [ 2847.874423][T10269] netlink: 'syz.2.12295': attribute type 10 has an invalid length. [ 2847.897051][T10269] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12295'. [ 2847.921131][T10223] bridge0: port 2(bridge_slave_1) entered blocking state [ 2847.940235][T10223] bridge0: port 2(bridge_slave_1) entered disabled state [ 2847.948317][T10223] bridge_slave_1: entered allmulticast mode [ 2847.989519][T10223] bridge_slave_1: entered promiscuous mode [ 2848.113536][ T1426] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2848.173941][T10223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2848.226258][T10223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2848.254546][T19070] Bluetooth: hci0: command tx timeout [ 2848.313477][ T1426] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2848.397436][T10284] netlink: 'syz.0.12300': attribute type 2 has an invalid length. [ 2848.455020][T10284] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12300'. [ 2848.477011][T10223] team0: Port device team_slave_0 added [ 2848.507077][ T1426] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2848.522280][T10289] FAULT_INJECTION: forcing a failure. [ 2848.522280][T10289] name failslab, interval 1, probability 0, space 0, times 0 [ 2848.556476][T10223] team0: Port device team_slave_1 added [ 2848.574677][T10289] CPU: 0 PID: 10289 Comm: syz.1.12302 Not tainted syzkaller #0 [ 2848.582496][T10289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2848.592616][T10289] Call Trace: [ 2848.596202][T10289] [ 2848.599557][T10289] dump_stack_lvl+0x18c/0x250 [ 2848.604411][T10289] ? show_regs_print_info+0x20/0x20 [ 2848.609776][T10289] ? load_image+0x420/0x420 [ 2848.614347][T10289] ? __might_sleep+0xe0/0xe0 [ 2848.619025][T10289] ? __lock_acquire+0x7d80/0x7d80 [ 2848.624173][T10289] should_fail_ex+0x394/0x4c0 [ 2848.628975][T10289] should_failslab+0x9/0x20 [ 2848.633823][T10289] slab_pre_alloc_hook+0x59/0x300 [ 2848.638954][T10289] ? __request_module+0x2ed/0x600 [ 2848.644071][T10289] ? __request_module+0x2ed/0x600 [ 2848.649169][T10289] __kmem_cache_alloc_node+0x53/0x250 [ 2848.654642][T10289] ? __request_module+0x2ed/0x600 [ 2848.659737][T10289] __kmalloc_node_track_caller+0xa4/0x230 [ 2848.665984][T10289] kstrdup+0x3b/0x80 [ 2848.669968][T10289] __request_module+0x2ed/0x600 [ 2848.674904][T10289] ? module_enforce_rwx_sections+0x150/0x150 [ 2848.680958][T10289] ? dev_load+0x21/0x1f0 [ 2848.685388][T10289] ? bpf_lsm_capable+0x9/0x10 [ 2848.690241][T10289] ? dev_load+0x21/0x1f0 [ 2848.694568][T10289] dev_load+0x18b/0x1f0 [ 2848.699045][T10289] dev_ioctl+0x837/0x1140 [ 2848.703467][T10289] sock_ioctl+0x74c/0x7e0 [ 2848.708152][T10289] ? sock_poll+0x3e0/0x3e0 [ 2848.712841][T10289] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2848.718199][T10289] ? security_file_ioctl+0x80/0xa0 [ 2848.723471][T10289] ? sock_poll+0x3e0/0x3e0 [ 2848.727992][T10289] __se_sys_ioctl+0xfd/0x170 [ 2848.732660][T10289] do_syscall_64+0x55/0xb0 [ 2848.737234][T10289] ? clear_bhb_loop+0x40/0x90 [ 2848.741987][T10289] ? clear_bhb_loop+0x40/0x90 [ 2848.746745][T10289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2848.752707][T10289] RIP: 0033:0x7fd563b9e159 [ 2848.757178][T10289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2848.776858][T10289] RSP: 002b:00007fd5649be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2848.785640][T10289] RAX: ffffffffffffffda RBX: 00007fd563e25fa0 RCX: 00007fd563b9e159 [ 2848.793704][T10289] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 2848.801757][T10289] RBP: 00007fd5649be090 R08: 0000000000000000 R09: 0000000000000000 [ 2848.809821][T10289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2848.817961][T10289] R13: 00007fd563e26038 R14: 00007fd563e25fa0 R15: 00007fff859bf208 [ 2848.826029][T10289] [ 2848.882724][ T1426] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2848.920386][T10223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2848.931460][T10223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2849.007865][T10223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2849.045495][T10292] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.12303'. [ 2849.103093][T10223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2849.129566][T10223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2849.217086][T10223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2849.635662][T10223] hsr_slave_0: entered promiscuous mode [ 2849.662111][T10223] hsr_slave_1: entered promiscuous mode [ 2849.676445][T10223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2849.684099][T10223] Cannot create hsr debugfs directory [ 2849.759689][T10305] netlink: 'syz.1.12304': attribute type 2 has an invalid length. [ 2849.768791][T10305] netlink: 116 bytes leftover after parsing attributes in process `syz.1.12304'. [ 2849.784913][T10305] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2849.812938][T10308] netlink: 'syz.1.12304': attribute type 39 has an invalid length. [ 2849.850755][T10311] netlink: 'syz.2.12305': attribute type 10 has an invalid length. [ 2849.871022][T10311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12305'. [ 2850.335162][T19070] Bluetooth: hci0: command tx timeout [ 2850.891487][T10348] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.12313'. [ 2851.388174][T10354] netlink: 'syz.0.12314': attribute type 2 has an invalid length. [ 2851.430980][T10354] netlink: 116 bytes leftover after parsing attributes in process `syz.0.12314'. [ 2851.469713][T10354] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2851.489710][T10359] netlink: 'syz.0.12314': attribute type 39 has an invalid length. [ 2851.747964][T10365] netlink: 'syz.2.12315': attribute type 10 has an invalid length. [ 2851.770568][T10365] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12315'. [ 2852.125497][T10223] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2852.181154][T10223] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2852.235019][T10223] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2852.414454][T19070] Bluetooth: hci0: command tx timeout [ 2852.444760][T10223] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2853.543424][T10399] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.12323'. [ 2853.555516][T10401] netlink: 'syz.0.12324': attribute type 2 has an invalid length. [ 2853.563823][T10401] netlink: 116 bytes leftover after parsing attributes in process `syz.0.12324'. [ 2853.581065][T10401] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2853.601752][T10403] netlink: 'syz.0.12324': attribute type 39 has an invalid length. [ 2853.987941][ T1426] hsr_slave_0: left promiscuous mode [ 2854.125378][ T1426] veth1_macvtap: left promiscuous mode [ 2854.131112][ T1426] veth0_macvtap: left promiscuous mode [ 2854.144496][ T1426] veth1_vlan: left promiscuous mode [ 2854.155364][ T1426] veth0_vlan: left promiscuous mode [ 2854.503935][T19070] Bluetooth: hci0: command tx timeout [ 2855.286664][ T1426] team_slave_1 (unregistering): left allmulticast mode [ 2855.309335][ T1426] team0 (unregistering): Port device team_slave_1 removed [ 2855.360659][ T1426] C (unregistering): left allmulticast mode [ 2855.370837][ T1426] team0 (unregistering): Port device C removed [ 2855.818376][T10413] netlink: 'syz.0.12326': attribute type 21 has an invalid length. [ 2855.829287][T10413] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12326'. [ 2855.842283][T10415] sit0: entered allmulticast mode [ 2855.856092][T10420] netlink: 'syz.1.12328': attribute type 10 has an invalid length. [ 2855.864110][T10420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12328'. [ 2855.884922][T10420] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2856.009935][T10223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2856.047146][T10223] 8021q: adding VLAN 0 to HW filter on device team0 [ 2856.115953][ T1442] bridge0: port 1(bridge_slave_0) entered blocking state [ 2856.123165][ T1442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2856.150408][ T1442] bridge0: port 2(bridge_slave_1) entered blocking state [ 2856.157729][ T1442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2856.518004][T10443] netlink: 'syz.0.12333': attribute type 2 has an invalid length. [ 2856.536447][T10443] netlink: 116 bytes leftover after parsing attributes in process `syz.0.12333'. [ 2856.575843][T10443] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2856.651940][T10451] netlink: 'syz.0.12333': attribute type 39 has an invalid length. [ 2856.745951][T10455] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.12335'. [ 2857.026213][T10223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2857.191240][T10223] veth0_vlan: entered promiscuous mode [ 2857.242091][T10223] veth1_vlan: entered promiscuous mode [ 2857.319494][T10223] veth0_macvtap: entered promiscuous mode [ 2857.358220][T10223] veth1_macvtap: entered promiscuous mode [ 2857.398595][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2857.415533][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2857.431404][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2857.442712][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2857.462360][T10223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2857.470684][T10467] netlink: 'syz.1.12338': attribute type 10 has an invalid length. [ 2857.486656][T10467] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12338'. [ 2857.502235][T10467] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2857.544998][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2857.556905][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2857.569702][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2857.580761][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2857.606260][T10223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2857.638028][T10223] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2857.654380][T10223] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2857.663163][T10223] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2857.689333][T10223] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2857.883980][ T1442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2857.904949][ T1442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2857.959297][T10256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2857.994729][T10256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2858.090609][T10486] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.12345'. [ 2858.787748][T10503] netlink: 144 bytes leftover after parsing attributes in process `syz.1.12347'. [ 2858.819403][T10503] netlink: 'syz.1.12347': attribute type 39 has an invalid length. [ 2858.920831][T10508] netlink: 'syz.3.12349': attribute type 10 has an invalid length. [ 2858.949298][T10508] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12349'. [ 2858.966258][T10508] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 2859.009069][T10508] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2859.073170][T10508] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 2859.363290][T10523] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.12355'. [ 2859.590257][T10522] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12354'. [ 2859.901835][T10522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2859.967443][T10522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2860.007140][T10522] bond0 (unregistering): Released all slaves [ 2860.330010][T10541] netlink: 144 bytes leftover after parsing attributes in process `syz.0.12359'. [ 2860.362557][T10541] netlink: 'syz.0.12359': attribute type 39 has an invalid length. [ 2860.661877][T10551] netlink: 'syz.3.12363': attribute type 10 has an invalid length. [ 2860.687970][T10551] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12363'. [ 2861.460214][T10575] C: renamed from team_slave_0 (while UP) [ 2861.498236][T10575] netlink: 'syz.3.12369': attribute type 39 has an invalid length. [ 2861.790811][T10575] hsr_slave_1 (unregistering): left promiscuous mode [ 2862.130720][T10580] __nla_validate_parse: 2 callbacks suppressed [ 2862.130740][T10580] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12371'. [ 2862.384583][T10594] netlink: 'syz.3.12376': attribute type 10 has an invalid length. [ 2862.393801][T10594] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12376'. [ 2862.466334][T10599] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.12379'. [ 2862.507016][T10596] netlink: 'syz.2.12377': attribute type 2 has an invalid length. [ 2862.536543][T10596] netlink: 116 bytes leftover after parsing attributes in process `syz.2.12377'. [ 2862.594606][T10596] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2862.685962][T10597] netlink: 'syz.2.12377': attribute type 39 has an invalid length. [ 2863.224752][T10618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2863.232541][T10618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2863.249326][T10618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2863.261224][T10618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2863.287855][T10625] netlink: 'syz.1.12384': attribute type 2 has an invalid length. [ 2863.305581][T10618] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 2863.317665][T10625] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12384'. [ 2863.328004][T10618] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 2863.452865][T10626] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12383'. [ 2863.498040][T10628] netlink: 144 bytes leftover after parsing attributes in process `syz.1.12385'. [ 2863.512288][T10628] netlink: 'syz.1.12385': attribute type 39 has an invalid length. [ 2863.691347][T10634] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12388'. [ 2863.701685][T10634] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2864.362278][T10642] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.12392'. [ 2864.390571][T10645] mac80211_hwsim hwsim75 wlan0: entered promiscuous mode [ 2864.406389][T10645] mac80211_hwsim hwsim75 wlan0: entered allmulticast mode [ 2864.432043][T10644] validate_nla: 1 callbacks suppressed [ 2864.432112][T10644] netlink: 'syz.1.12393': attribute type 2 has an invalid length. [ 2864.465676][T10644] netlink: 116 bytes leftover after parsing attributes in process `syz.1.12393'. [ 2864.504396][T10644] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2864.522210][T10648] netlink: 'syz.1.12393': attribute type 39 has an invalid length. [ 2864.759945][T10655] netlink: 'syz.0.12395': attribute type 39 has an invalid length. [ 2864.967929][T10667] netlink: 'syz.3.12399': attribute type 2 has an invalid length. [ 2865.006384][T10665] netlink: 'syz.0.12407': attribute type 39 has an invalid length. [ 2865.221142][T10671] netlink: 'syz.2.12402': attribute type 2 has an invalid length. [ 2865.242118][T10671] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2865.425032][T10671] netlink: 'syz.2.12402': attribute type 39 has an invalid length. [ 2865.464758][T10675] netlink: 'syz.0.12401': attribute type 10 has an invalid length. [ 2865.661403][T10680] netlink: 'syz.2.12404': attribute type 2 has an invalid length. [ 2865.670533][T10680] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2865.699675][T10680] netlink: 'syz.2.12404': attribute type 39 has an invalid length. [ 2866.431768][T10701] mac80211_hwsim hwsim70 wlan0: entered promiscuous mode [ 2866.448481][T10701] mac80211_hwsim hwsim70 wlan0: entered allmulticast mode [ 2866.689369][T10704] mac80211_hwsim hwsim78 .3ãc¤±: renamed from wlan1 (while UP) [ 2867.399689][T10722] __nla_validate_parse: 11 callbacks suppressed [ 2867.399814][T10722] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12417'. [ 2867.491699][T10733] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.12421'. [ 2867.535530][T10731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2867.543315][T10731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2867.552642][T10731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2867.575552][T10731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2867.592854][T10731] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 2867.608370][T10731] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 2868.018348][T10742] netlink: 116 bytes leftover after parsing attributes in process `syz.3.12423'. [ 2868.033360][T10742] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2868.244663][T10752] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12427'. [ 2868.402030][T10760] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.12428'. [ 2868.798226][T10769] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12431'. [ 2868.906664][T10774] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.12433'. [ 2869.381214][T19070] Bluetooth: hci2: command 0x0406 tx timeout [ 2869.435686][T10792] FAULT_INJECTION: forcing a failure. [ 2869.435686][T10792] name failslab, interval 1, probability 0, space 0, times 0 [ 2869.452604][T10792] CPU: 0 PID: 10792 Comm: syz.2.12438 Not tainted syzkaller #0 [ 2869.460252][T10792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2869.470374][T10792] Call Trace: [ 2869.473739][T10792] [ 2869.476730][T10792] dump_stack_lvl+0x18c/0x250 [ 2869.481485][T10792] ? show_regs_print_info+0x20/0x20 [ 2869.486752][T10792] ? load_image+0x420/0x420 [ 2869.491324][T10792] ? __might_sleep+0xe0/0xe0 [ 2869.495997][T10792] ? __lock_acquire+0x7d80/0x7d80 [ 2869.501106][T10792] should_fail_ex+0x394/0x4c0 [ 2869.505897][T10792] should_failslab+0x9/0x20 [ 2869.510513][T10792] slab_pre_alloc_hook+0x59/0x300 [ 2869.515623][T10792] kmem_cache_alloc_node+0x5e/0x310 [ 2869.520889][T10792] ? __alloc_skb+0x103/0x2c0 [ 2869.525564][T10792] __alloc_skb+0x103/0x2c0 [ 2869.530057][T10792] rtmsg_ifinfo_build_skb+0x83/0x260 [ 2869.535644][T10792] ? ip6_route_dev_notify+0x9a/0x5b0 [ 2869.540973][T10792] rtmsg_ifinfo+0x8c/0x1a0 [ 2869.545458][T10792] netdev_state_change+0xfe/0x170 [ 2869.550560][T10792] ? netdev_features_change+0xd0/0xd0 [ 2869.555996][T10792] ? br_set_hello_time+0xfb/0x110 [ 2869.561136][T10792] ? br_set_hello_time+0xfb/0x110 [ 2869.566246][T10792] br_dev_siocdevprivate+0xe6e/0x15e0 [ 2869.571691][T10792] ? rcu_is_watching+0x15/0xb0 [ 2869.576520][T10792] ? br_handle_local_finish+0x20/0x20 [ 2869.581949][T10792] ? trace_contention_end+0x39/0xe0 [ 2869.587197][T10792] ? __mutex_lock+0x30d/0xc80 [ 2869.592001][T10792] ? dev_load+0x21/0x1f0 [ 2869.596327][T10792] ? dev_ioctl+0x83c/0x1140 [ 2869.600883][T10792] ? __lock_acquire+0x7d80/0x7d80 [ 2869.606071][T10792] ? mutex_lock_nested+0x20/0x20 [ 2869.611085][T10792] ? full_name_hash+0x92/0xe0 [ 2869.615842][T10792] ? dev_ifsioc+0x957/0xc40 [ 2869.620428][T10792] dev_ioctl+0x84c/0x1140 [ 2869.624874][T10792] sock_ioctl+0x74c/0x7e0 [ 2869.629287][T10792] ? sock_poll+0x3e0/0x3e0 [ 2869.633797][T10792] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2869.638836][T10792] ? security_file_ioctl+0x80/0xa0 [ 2869.644026][T10792] ? sock_poll+0x3e0/0x3e0 [ 2869.648523][T10792] __se_sys_ioctl+0xfd/0x170 [ 2869.653204][T10792] do_syscall_64+0x55/0xb0 [ 2869.657692][T10792] ? clear_bhb_loop+0x40/0x90 [ 2869.662446][T10792] ? clear_bhb_loop+0x40/0x90 [ 2869.667191][T10792] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2869.673161][T10792] RIP: 0033:0x7f699d79e159 [ 2869.677636][T10792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2869.697684][T10792] RSP: 002b:00007f699e5b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2869.706176][T10792] RAX: ffffffffffffffda RBX: 00007f699da25fa0 RCX: 00007f699d79e159 [ 2869.714211][T10792] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 2869.722251][T10792] RBP: 00007f699e5b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2869.730338][T10792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2869.738401][T10792] R13: 00007f699da26038 R14: 00007f699da25fa0 R15: 00007fff4c4227d8 [ 2869.746654][T10792] [ 2870.039636][T10805] validate_nla: 7 callbacks suppressed [ 2870.039659][T10805] netlink: 'syz.2.12440': attribute type 10 has an invalid length. [ 2870.073818][T10805] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12440'. [ 2870.089998][T10805] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2870.246713][T10809] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12441'. [ 2870.284836][T10810] netlink: 'syz.1.12442': attribute type 39 has an invalid length. [ 2870.384422][T10815] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.12444'. [ 2870.785073][T10821] netlink: 'syz.1.12453': attribute type 39 has an invalid length. [ 2871.380285][T10843] netlink: 'syz.3.12451': attribute type 10 has an invalid length. [ 2871.389669][T10843] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2871.812165][T10858] netlink: 'syz.0.12456': attribute type 39 has an invalid length. [ 2872.107754][T10866] netlink: 'syz.0.12460': attribute type 10 has an invalid length. [ 2872.576486][T10877] netlink: 'syz.1.12463': attribute type 10 has an invalid length. [ 2872.585696][T10877] __nla_validate_parse: 6 callbacks suppressed [ 2872.585715][T10877] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12463'. [ 2872.603738][T10877] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2872.664619][T10879] netlink: 'syz.0.12465': attribute type 10 has an invalid length. [ 2872.672756][T10879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12465'. [ 2872.764105][T10882] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12466'. [ 2873.067767][T10893] netlink: 'syz.0.12468': attribute type 39 has an invalid length. [ 2873.220674][T10900] netlink: 'syz.1.12470': attribute type 10 has an invalid length. [ 2873.229354][T10900] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12470'. [ 2873.240087][T10900] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2873.315489][T10904] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.12472'. [ 2873.729867][T10918] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.12482'. [ 2874.484221][T10931] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12477'. [ 2874.925973][T10939] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12481'. [ 2875.282176][T10962] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.12489'. [ 2875.362262][T10963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2875.385875][T10963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2875.410759][T10963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2875.428960][T10963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2875.451110][T10963] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 2875.468272][T10963] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 2875.672518][T10968] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12490'. [ 2875.935185][T10973] validate_nla: 1 callbacks suppressed [ 2875.935228][T10973] netlink: 'syz.1.12492': attribute type 39 has an invalid length. [ 2876.203070][T10977] netlink: 'syz.2.12494': attribute type 10 has an invalid length. [ 2876.298688][T10977] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2876.542595][T10979] netlink: 'syz.1.12495': attribute type 39 has an invalid length. [ 2877.697218][T11010] netlink: 'syz.2.12503': attribute type 39 has an invalid length. [ 2877.859136][T11014] __nla_validate_parse: 4 callbacks suppressed [ 2877.859183][T11014] netlink: 144 bytes leftover after parsing attributes in process `syz.0.12505'. [ 2877.889334][T11014] netlink: 'syz.0.12505': attribute type 39 has an invalid length. [ 2878.569924][T11048] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.12513'. [ 2878.708496][T11046] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12512'. [ 2878.878797][T11052] netlink: 'syz.1.12514': attribute type 39 has an invalid length. [ 2879.067937][T11056] netlink: 'syz.0.12516': attribute type 39 has an invalid length. [ 2879.574016][T11085] netlink: 'syz.1.12523': attribute type 3 has an invalid length. [ 2879.604068][T11085] netlink: 'syz.1.12523': attribute type 8 has an invalid length. [ 2879.616436][T11085] netlink: 197324 bytes leftover after parsing attributes in process `syz.1.12523'. [ 2879.658912][T11088] netlink: 'syz.0.12524': attribute type 10 has an invalid length. [ 2879.667595][T11088] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12524'. [ 2879.678398][T11088] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2879.846055][T11091] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12525'. [ 2879.858367][T11095] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.12527'. [ 2880.662350][T11125] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12535'. [ 2880.699439][T11125] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2880.791894][T11128] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12537'. [ 2881.005218][T11132] validate_nla: 4 callbacks suppressed [ 2881.005258][T11132] netlink: 'syz.3.12540': attribute type 39 has an invalid length. [ 2881.216453][T11149] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.12542'. [ 2881.639309][T11160] netlink: 'syz.3.12545': attribute type 39 has an invalid length. [ 2881.849881][T11166] netlink: 'syz.1.12549': attribute type 10 has an invalid length. [ 2881.859719][T11166] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2882.056865][T11174] netlink: 'syz.2.12551': attribute type 39 has an invalid length. [ 2882.536676][T11191] sit0: entered allmulticast mode [ 2882.609448][T11184] sit0: entered promiscuous mode [ 2882.865259][T11203] netlink: 'syz.0.12559': attribute type 39 has an invalid length. [ 2883.108223][T11205] __nla_validate_parse: 3 callbacks suppressed [ 2883.108246][T11205] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12560'. [ 2883.131851][T11209] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12562'. [ 2883.663041][T11238] netlink: 176 bytes leftover after parsing attributes in process `syz.1.12571'. [ 2883.696879][T11238] C: entered allmulticast mode [ 2883.768395][T11242] netlink: 'syz.1.12571': attribute type 39 has an invalid length. [ 2883.897582][T11245] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12572'. [ 2884.047866][T11250] FAULT_INJECTION: forcing a failure. [ 2884.047866][T11250] name failslab, interval 1, probability 0, space 0, times 0 [ 2884.062553][T11250] CPU: 1 PID: 11250 Comm: syz.3.12574 Not tainted syzkaller #0 [ 2884.070277][T11250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2884.080794][T11250] Call Trace: [ 2884.084126][T11250] [ 2884.087140][T11250] dump_stack_lvl+0x18c/0x250 [ 2884.091895][T11250] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2884.098223][T11250] ? show_regs_print_info+0x20/0x20 [ 2884.103497][T11250] ? load_image+0x420/0x420 [ 2884.108113][T11250] should_fail_ex+0x394/0x4c0 [ 2884.112880][T11250] should_failslab+0x9/0x20 [ 2884.117581][T11250] slab_pre_alloc_hook+0x59/0x300 [ 2884.122790][T11250] ? kvmalloc_node+0x70/0x180 [ 2884.127553][T11250] ? kvmalloc_node+0x70/0x180 [ 2884.132311][T11250] __kmem_cache_alloc_node+0x53/0x250 [ 2884.137782][T11250] ? kvmalloc_node+0x70/0x180 [ 2884.142566][T11250] __kmalloc_node+0xa6/0x240 [ 2884.147245][T11250] kvmalloc_node+0x70/0x180 [ 2884.151934][T11250] bpf_test_run_xdp_live+0x1e9/0x1b30 [ 2884.157498][T11250] ? 0xffffffffa0004200 [ 2884.161729][T11250] ? 0xffffffffa0004200 [ 2884.165986][T11250] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 2884.171964][T11250] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2884.178213][T11250] ? xdp_convert_md_to_buff+0x330/0x330 [ 2884.183871][T11250] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2884.190175][T11250] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2884.195707][T11250] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 2884.201126][T11250] ? __lock_acquire+0x7d80/0x7d80 [ 2884.206216][T11250] ? dev_put+0x80/0x80 [ 2884.210376][T11250] ? dev_put+0x80/0x80 [ 2884.214504][T11250] bpf_prog_test_run+0x31f/0x390 [ 2884.219516][T11250] __sys_bpf+0x49d/0x890 [ 2884.223810][T11250] ? bpf_link_show_fdinfo+0x390/0x390 [ 2884.229258][T11250] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2884.235470][T11250] __x64_sys_bpf+0x7c/0x90 [ 2884.239927][T11250] do_syscall_64+0x55/0xb0 [ 2884.244381][T11250] ? clear_bhb_loop+0x40/0x90 [ 2884.249117][T11250] ? clear_bhb_loop+0x40/0x90 [ 2884.253922][T11250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2884.259953][T11250] RIP: 0033:0x7f4fff79e159 [ 2884.264427][T11250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2884.284091][T11250] RSP: 002b:00007f5000696028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2884.292813][T11250] RAX: ffffffffffffffda RBX: 00007f4fffa25fa0 RCX: 00007f4fff79e159 [ 2884.300853][T11250] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 2884.308860][T11250] RBP: 00007f5000696090 R08: 0000000000000000 R09: 0000000000000000 [ 2884.316867][T11250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2884.324895][T11250] R13: 00007f4fffa26038 R14: 00007f4fffa25fa0 R15: 00007fff08238ba8 [ 2884.332972][T11250] [ 2884.505549][T11248] netlink: 'syz.1.12573': attribute type 10 has an invalid length. [ 2884.513696][T11248] netlink: 2 bytes leftover after parsing attributes in process `syz.1.12573'. [ 2884.534370][T11248] hsr0: entered promiscuous mode [ 2884.539886][T11248] bridge0: port 3(hsr0) entered blocking state [ 2884.556352][T11248] bridge0: port 3(hsr0) entered disabled state [ 2884.563012][T11248] hsr0: entered allmulticast mode [ 2884.571000][T11248] hsr_slave_0: entered allmulticast mode [ 2884.595115][T11248] bridge0: port 3(hsr0) entered blocking state [ 2884.601734][T11248] bridge0: port 3(hsr0) entered forwarding state [ 2884.929479][T11267] netlink: 176 bytes leftover after parsing attributes in process `syz.0.12581'. [ 2884.950241][T11267] C: entered allmulticast mode [ 2885.013336][T11274] netlink: 'syz.0.12581': attribute type 39 has an invalid length. [ 2885.047695][T11269] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12582'. [ 2885.190737][T11277] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.12585'. [ 2885.230070][T11282] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.12586'. [ 2886.140077][T11307] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12592'. [ 2886.190892][T11309] netlink: 'syz.0.12593': attribute type 39 has an invalid length. [ 2887.191848][T11348] netlink: 'syz.1.12603': attribute type 39 has an invalid length. [ 2887.716083][T11363] netlink: 'syz.1.12611': attribute type 10 has an invalid length. [ 2887.784071][T11363] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2888.584056][T11373] __nla_validate_parse: 8 callbacks suppressed [ 2888.584093][T11373] netlink: 176 bytes leftover after parsing attributes in process `syz.3.12614'. [ 2888.652568][T11373] netlink: 'syz.3.12614': attribute type 39 has an invalid length. [ 2888.874040][T11388] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12620'. [ 2889.319084][T11400] netlink: 'syz.3.12622': attribute type 39 has an invalid length. [ 2889.448297][T11405] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.12624'. [ 2889.782625][T11415] netlink: 'syz.2.12626': attribute type 10 has an invalid length. [ 2889.804401][T11415] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12626'. [ 2889.834537][T11415] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2889.944329][T11419] netlink: 176 bytes leftover after parsing attributes in process `syz.0.12628'. [ 2889.962453][T11419] netlink: 'syz.0.12628': attribute type 39 has an invalid length. [ 2890.377014][T11440] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.12635'. [ 2891.003240][T11451] netlink: 'syz.2.12638': attribute type 10 has an invalid length. [ 2891.011870][T11451] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12638'. [ 2891.022717][T11451] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2891.322109][T11453] netlink: 168 bytes leftover after parsing attributes in process `syz.1.12639'. [ 2891.377296][T11453] netlink: 'syz.1.12639': attribute type 39 has an invalid length. [ 2891.860601][T11462] netlink: 168 bytes leftover after parsing attributes in process `syz.1.12650'. [ 2891.888438][T11468] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.12644'. [ 2891.907410][T11462] netlink: 'syz.1.12650': attribute type 39 has an invalid length. [ 2892.654051][T11492] netlink: 'syz.0.12651': attribute type 10 has an invalid length. [ 2892.665384][T11492] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2893.107760][T11500] netlink: 'syz.1.12655': attribute type 39 has an invalid length. [ 2893.323510][T11497] delete_channel: no stack [ 2893.554832][T11508] IPv6: Can't replace route, no match found [ 2893.805936][T11517] netlink: 'syz.3.12662': attribute type 10 has an invalid length. [ 2893.815098][T11517] __nla_validate_parse: 5 callbacks suppressed [ 2893.815118][T11517] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12662'. [ 2893.838019][T11517] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2894.245914][T11525] delete_channel: no stack [ 2894.251067][T11525] delete_channel: no stack [ 2894.430181][T11523] netlink: 'syz.0.12664': attribute type 39 has an invalid length. [ 2895.522631][T11548] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.12670'. [ 2895.537146][T11548] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.12670'. [ 2895.547577][T11548] tipc: Started in network mode [ 2895.554500][T11548] tipc: Node identity b, cluster identity 57 [ 2895.560819][T11548] tipc: Node number set to 11 [ 2895.830271][T11556] netlink: 'syz.1.12673': attribute type 10 has an invalid length. [ 2895.848486][T11556] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12673'. [ 2895.864089][T11556] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2895.948163][T11558] FAULT_INJECTION: forcing a failure. [ 2895.948163][T11558] name failslab, interval 1, probability 0, space 0, times 0 [ 2895.984265][T11558] CPU: 1 PID: 11558 Comm: syz.2.12675 Not tainted syzkaller #0 [ 2895.991993][T11558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2896.002109][T11558] Call Trace: [ 2896.005446][T11558] [ 2896.008423][T11558] dump_stack_lvl+0x18c/0x250 [ 2896.013200][T11558] ? show_regs_print_info+0x20/0x20 [ 2896.018491][T11558] ? load_image+0x420/0x420 [ 2896.023067][T11558] ? verify_lock_unused+0x140/0x140 [ 2896.028365][T11558] should_fail_ex+0x394/0x4c0 [ 2896.033215][T11558] should_failslab+0x9/0x20 [ 2896.037793][T11558] slab_pre_alloc_hook+0x59/0x300 [ 2896.042982][T11558] kmem_cache_alloc+0x5a/0x2c0 [ 2896.047809][T11558] ? skb_clone+0x1eb/0x370 [ 2896.052370][T11558] skb_clone+0x1eb/0x370 [ 2896.056741][T11558] __netlink_deliver_tap+0x411/0x7f0 [ 2896.062073][T11558] ? netlink_deliver_tap+0x2e/0x1b0 [ 2896.067311][T11558] netlink_deliver_tap+0x19c/0x1b0 [ 2896.072458][T11558] netlink_unicast+0x77b/0x930 [ 2896.077288][T11558] netlink_sendmsg+0x8d0/0xbf0 [ 2896.082231][T11558] ? netlink_getsockopt+0x590/0x590 [ 2896.087503][T11558] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2896.093121][T11558] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2896.098463][T11558] ? security_socket_sendmsg+0x80/0xa0 [ 2896.103985][T11558] ? netlink_getsockopt+0x590/0x590 [ 2896.109254][T11558] ____sys_sendmsg+0x61b/0x980 [ 2896.114077][T11558] ? __asan_memset+0x22/0x40 [ 2896.118743][T11558] ? __sys_sendmsg_sock+0x30/0x30 [ 2896.123894][T11558] ? __import_iovec+0x5f2/0x850 [ 2896.128788][T11558] ? import_iovec+0x73/0xa0 [ 2896.133342][T11558] ___sys_sendmsg+0x2a6/0x360 [ 2896.138071][T11558] ? get_pid_task+0x20/0x1e0 [ 2896.142705][T11558] ? __sys_sendmsg+0x2b0/0x2b0 [ 2896.147520][T11558] ? __lock_acquire+0x7d80/0x7d80 [ 2896.152596][T11558] __se_sys_sendmsg+0x1d0/0x2c0 [ 2896.157475][T11558] ? perf_trace_preemptirq_template+0x269/0x330 [ 2896.163755][T11558] ? __x64_sys_sendmsg+0x80/0x80 [ 2896.168738][T11558] ? lockdep_hardirqs_on+0x98/0x150 [ 2896.173982][T11558] do_syscall_64+0x55/0xb0 [ 2896.178474][T11558] ? clear_bhb_loop+0x40/0x90 [ 2896.183188][T11558] ? clear_bhb_loop+0x40/0x90 [ 2896.187897][T11558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2896.193821][T11558] RIP: 0033:0x7f699d79e159 [ 2896.198336][T11558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2896.217972][T11558] RSP: 002b:00007f699e5b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2896.226418][T11558] RAX: ffffffffffffffda RBX: 00007f699da25fa0 RCX: 00007f699d79e159 [ 2896.234422][T11558] RDX: 00000000000000c0 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2896.242445][T11558] RBP: 00007f699e5b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2896.250448][T11558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2896.258538][T11558] R13: 00007f699da26038 R14: 00007f699da25fa0 R15: 00007fff4c4227d8 [ 2896.266554][T11558] [ 2897.519203][T11592] netlink: 'syz.2.12686': attribute type 10 has an invalid length. [ 2897.531355][T11592] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12686'. [ 2897.542537][T11592] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2897.568787][T11594] netlink: 'syz.0.12687': attribute type 10 has an invalid length. [ 2897.605129][T11594] bridge0: port 2(bridge_slave_1) entered disabled state [ 2897.631386][T11594] bridge_slave_1: left allmulticast mode [ 2897.637782][T11594] bridge_slave_1: left promiscuous mode [ 2897.645993][T11594] bridge0: port 2(bridge_slave_1) entered disabled state [ 2898.007042][T11614] netlink: 'syz.2.12695': attribute type 29 has an invalid length. [ 2898.017277][T11614] netlink: 'syz.2.12695': attribute type 29 has an invalid length. [ 2898.025947][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2898.033255][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2898.044583][T11614] netlink: 'syz.2.12695': attribute type 29 has an invalid length. [ 2898.053303][T11614] netlink: 'syz.2.12695': attribute type 29 has an invalid length. [ 2898.063838][T11614] netlink: 'syz.2.12695': attribute type 29 has an invalid length. [ 2898.371499][T11628] netlink: 'syz.1.12698': attribute type 10 has an invalid length. [ 2898.380715][T11628] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12698'. [ 2898.391269][T11628] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2898.818367][T11643] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.12705'. [ 2898.832036][T11643] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.12705'. [ 2898.841594][T11643] tipc: Started in network mode [ 2898.846798][T11643] tipc: Node identity b, cluster identity 57 [ 2898.853106][T11643] tipc: Node number set to 11 [ 2899.067432][T11651] netlink: 148 bytes leftover after parsing attributes in process `syz.3.12708'. [ 2899.100921][T11651] netlink: 'syz.3.12708': attribute type 39 has an invalid length. [ 2902.381469][T11710] syzkaller0: entered promiscuous mode [ 2902.397710][T11710] syzkaller0: entered allmulticast mode [ 2902.505461][T11727] netlink: 'syz.0.12720': attribute type 4 has an invalid length. [ 2902.639431][T11729] netlink: 148 bytes leftover after parsing attributes in process `syz.2.12721'. [ 2902.681483][T11729] netlink: 'syz.2.12721': attribute type 39 has an invalid length. [ 2902.933674][T11737] can: request_module (can-proto-4) failed. [ 2903.245254][T11742] can: request_module (can-proto-4) failed. [ 2903.569187][T11761] netlink: 'syz.3.12728': attribute type 7 has an invalid length. [ 2903.943545][T11768] netlink: 'syz.1.12731': attribute type 10 has an invalid length. [ 2903.975152][T11768] syz_tun: entered promiscuous mode [ 2904.490749][T11787] netlink: 'syz.3.12737': attribute type 10 has an invalid length. [ 2904.528757][T11787] bridge0: port 2(bridge_slave_1) entered disabled state [ 2904.570174][T11787] bridge_slave_1: left allmulticast mode [ 2904.584371][T11787] bridge_slave_1: left promiscuous mode [ 2904.595010][T11787] bridge0: port 2(bridge_slave_1) entered disabled state [ 2904.768047][T11789] netlink: 'syz.0.12738': attribute type 10 has an invalid length. [ 2904.795686][T11789] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12738'. [ 2904.847169][T11789] bridge0: port 2(team0) entered blocking state [ 2904.858050][T11789] bridge0: port 2(team0) entered disabled state [ 2904.879696][T11789] team0: entered allmulticast mode [ 2904.886417][T11789] team_slave_1: entered allmulticast mode [ 2904.911237][T11789] team0: entered promiscuous mode [ 2904.917475][T11789] C: entered promiscuous mode [ 2904.927448][T11789] team_slave_1: entered promiscuous mode [ 2904.950696][T11789] bridge0: port 2(team0) entered blocking state [ 2904.957901][T11789] bridge0: port 2(team0) entered forwarding state [ 2905.002821][T11806] FAULT_INJECTION: forcing a failure. [ 2905.002821][T11806] name failslab, interval 1, probability 0, space 0, times 0 [ 2905.016562][T11806] CPU: 0 PID: 11806 Comm: syz.1.12743 Not tainted syzkaller #0 [ 2905.024182][T11806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2905.034396][T11806] Call Trace: [ 2905.037726][T11806] [ 2905.040714][T11806] dump_stack_lvl+0x18c/0x250 [ 2905.045551][T11806] ? show_regs_print_info+0x20/0x20 [ 2905.050813][T11806] ? load_image+0x420/0x420 [ 2905.055388][T11806] ? __might_sleep+0xe0/0xe0 [ 2905.060132][T11806] ? __lock_acquire+0x7d80/0x7d80 [ 2905.065229][T11806] should_fail_ex+0x394/0x4c0 [ 2905.070002][T11806] should_failslab+0x9/0x20 [ 2905.074573][T11806] slab_pre_alloc_hook+0x59/0x300 [ 2905.079678][T11806] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 2905.085471][T11806] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 2905.091383][T11806] __kmem_cache_alloc_node+0x53/0x250 [ 2905.096831][T11806] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 2905.102634][T11806] __kmalloc+0xa7/0x240 [ 2905.106874][T11806] tomoyo_realpath_from_path+0xe6/0x5c0 [ 2905.112495][T11806] ? tomoyo_domain+0xd6/0x120 [ 2905.117356][T11806] tomoyo_path_number_perm+0x248/0x5e0 [ 2905.122861][T11806] ? tomoyo_path_number_perm+0x217/0x5e0 [ 2905.128547][T11806] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2905.134141][T11806] ? ksys_write+0x1d2/0x260 [ 2905.138732][T11806] ? __fget_files+0x28/0x460 [ 2905.143378][T11806] security_file_ioctl+0x70/0xa0 [ 2905.148365][T11806] __se_sys_ioctl+0x48/0x170 [ 2905.153003][T11806] do_syscall_64+0x55/0xb0 [ 2905.157462][T11806] ? clear_bhb_loop+0x40/0x90 [ 2905.162169][T11806] ? clear_bhb_loop+0x40/0x90 [ 2905.166880][T11806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2905.172808][T11806] RIP: 0033:0x7fd563b9e159 [ 2905.177257][T11806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2905.196988][T11806] RSP: 002b:00007fd5649be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2905.205434][T11806] RAX: ffffffffffffffda RBX: 00007fd563e25fa0 RCX: 00007fd563b9e159 [ 2905.213431][T11806] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 2905.221431][T11806] RBP: 00007fd5649be090 R08: 0000000000000000 R09: 0000000000000000 [ 2905.229439][T11806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2905.237437][T11806] R13: 00007fd563e26038 R14: 00007fd563e25fa0 R15: 00007fff859bf208 [ 2905.245461][T11806] [ 2905.270922][ T8331] Bluetooth: hci1: command 0x0406 tx timeout [ 2905.288179][T11806] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2905.589726][T11820] netlink: 830 bytes leftover after parsing attributes in process `syz.0.12746'. [ 2905.632460][T11818] netlink: 'syz.1.12745': attribute type 39 has an invalid length. [ 3010.794158][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 3010.800807][ C1] rcu: 1-....: (1 GPs behind) idle=912c/1/0x4000000000000000 softirq=208802/208803 fqs=4311 [ 3010.812298][ C1] rcu: hardirqs softirqs csw/system [ 3010.818727][ C1] rcu: number: 1531855 0 0 [ 3010.825168][ C1] rcu: cputime: 17607 34862 67 ==> 52470(ms) [ 3010.833034][ C1] rcu: (t=10500 jiffies g=325681 q=651 ncpus=2) [ 3010.839409][ C1] CPU: 1 PID: 11824 Comm: syz.0.12748 Not tainted syzkaller #0 [ 3010.846997][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3010.857087][ C1] RIP: 0010:skb_release_data+0x665/0x7f0 [ 3010.862739][ C1] Code: 00 00 ea ff ff 48 01 c7 0f b6 74 24 1c e8 63 cf ff ff 84 c0 74 07 e8 0a d8 0a f9 eb 0d e8 03 d8 0a f9 4c 89 f7 e8 5b 9f 57 f9 <48> 8b 44 24 38 42 0f b6 04 20 84 c0 75 54 41 80 27 7f 48 83 c4 50 [ 3010.882361][ C1] RSP: 0018:ffffc900001f0088 EFLAGS: 00000296 [ 3010.888443][ C1] RAX: 3b71f3aee741a800 RBX: 0000000000000000 RCX: 3b71f3aee741a800 [ 3010.896444][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d3360 [ 3010.904438][ C1] RBP: 0000000000000000 R08: ffffffff911ef5ef R09: 1ffffffff223debd [ 3010.912620][ C1] R10: dffffc0000000000 R11: fffffbfff223debe R12: dffffc0000000000 [ 3010.920597][ C1] R13: ffff8880785da0d0 R14: ffff888062b449c0 R15: ffff8880785da07e [ 3010.928574][ C1] FS: 00007f62668cc6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 3010.937525][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3010.944124][ C1] CR2: 00002000000029c0 CR3: 000000005991f000 CR4: 00000000003506e0 [ 3010.952123][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000008d24 [ 3010.960102][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 3010.968102][ C1] Call Trace: [ 3010.971394][ C1] [ 3010.974308][ C1] kfree_skb_reason+0x10e/0x170 [ 3010.979174][ C1] ? ip6_negative_advice+0x310/0x310 [ 3010.984481][ C1] ip_tunnel_xmit+0xd77/0x25b0 [ 3010.989259][ C1] ? ip_tunnel_xmit+0x170/0x25b0 [ 3010.994211][ C1] ? validate_xmit_xfrm+0xbb/0x1340 [ 3010.999420][ C1] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 3011.004459][ C1] ? gre_build_header+0x251/0x9a0 [ 3011.009494][ C1] gre_tap_xmit+0x50e/0x710 [ 3011.014011][ C1] dev_hard_start_xmit+0x269/0x790 [ 3011.019149][ C1] sch_direct_xmit+0x251/0x4a0 [ 3011.023950][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3011.030136][ C1] ? mrp_pdu_parse_vecattr_event+0x230/0x230 [ 3011.036146][ C1] __dev_queue_xmit+0x162a/0x3640 [ 3011.041199][ C1] ? lock_chain_count+0x20/0x20 [ 3011.046064][ C1] ? __dev_queue_xmit+0x275/0x3640 [ 3011.051203][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 3011.056431][ C1] ? netdev_core_pick_tx+0x370/0x370 [ 3011.061732][ C1] ? __asan_memcpy+0x40/0x70 [ 3011.066340][ C1] ? eth_header+0x11b/0x200 [ 3011.070859][ C1] ? llc_sysctl_exit+0x70/0x70 [ 3011.075636][ C1] ? neigh_resolve_output+0x5f5/0x710 [ 3011.081034][ C1] ip6_finish_output2+0xf7a/0x1690 [ 3011.086179][ C1] ? ip6_finish_output2+0x71a/0x1690 [ 3011.091502][ C1] ? nf_hook+0x390/0x390 [ 3011.095756][ C1] ? ip6_mtu+0x321/0x3f0 [ 3011.100033][ C1] ? ip6_finish_output+0x567/0x7f0 [ 3011.105224][ C1] ndisc_send_skb+0xbb9/0x1480 [ 3011.110017][ C1] ? ndisc_send_skb+0x201/0x1480 [ 3011.115001][ C1] ? ndisc_mc_map+0x680/0x680 [ 3011.119699][ C1] ? skb_dst+0xd0/0xd0 [ 3011.123798][ C1] addrconf_rs_timer+0x36b/0x640 [ 3011.128750][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 3011.134846][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3011.140853][ C1] call_timer_fn+0x189/0x540 [ 3011.145476][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 3011.151558][ C1] ? call_timer_fn+0xd2/0x540 [ 3011.156246][ C1] ? __run_timers+0x810/0x810 [ 3011.160941][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 3011.167023][ C1] __run_timers+0x570/0x810 [ 3011.171550][ C1] ? detach_timer+0x2b0/0x2b0 [ 3011.176242][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 3011.181470][ C1] run_timer_softirq+0x67/0xf0 [ 3011.186259][ C1] handle_softirqs+0x27d/0x820 [ 3011.191069][ C1] ? read_tsc+0x9/0x20 [ 3011.195181][ C1] ? ktime_get+0x24b/0x280 [ 3011.199671][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 3011.204466][ C1] ? do_softirq+0x1a0/0x1a0 [ 3011.208993][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 3011.214237][ C1] __irq_exit_rcu+0xd3/0x190 [ 3011.219020][ C1] ? irq_exit_rcu+0x20/0x20 [ 3011.223537][ C1] irq_exit_rcu+0x9/0x20 [ 3011.227789][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3011.233446][ C1] [ 3011.236406][ C1] [ 3011.239348][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3011.245348][ C1] RIP: 0010:generic_exec_single+0x477/0x4e0 [ 3011.251263][ C1] Code: 75 11 e8 0c 10 0b 00 48 85 db 75 16 e8 02 10 0b 00 eb 15 e8 fb 0f 0b 00 e8 06 38 13 09 48 85 db 74 ea e8 ec 0f 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 3011.270884][ C1] RSP: 0018:ffffc9000e1f7a00 EFLAGS: 00000246 [ 3011.276960][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 3011.284959][ C1] RDX: ffffc9000da2b000 RSI: 0000000000003b50 RDI: 0000000000003b51 [ 3011.292943][ C1] RBP: ffffc9000e1f7ad0 R08: ffffffff911ef607 R09: 1ffffffff223dec0 [ 3011.300931][ C1] R10: dffffc0000000000 R11: fffffbfff223dec1 R12: 1ffff92001c3ef44 [ 3011.309095][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92001c3ef65 [ 3011.317122][ C1] ? event_function+0x300/0x300 [ 3011.322009][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 3011.327776][ C1] ? smp_call_function_single+0x1e7/0x5a0 [ 3011.333561][ C1] smp_call_function_single+0x36d/0x5a0 [ 3011.339150][ C1] ? event_function+0x300/0x300 [ 3011.344098][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 3011.350347][ C1] ? event_function+0x300/0x300 [ 3011.355244][ C1] perf_install_in_context+0x5bb/0x920 [ 3011.360825][ C1] ? alloc_file_pseudo+0x1ae/0x210 [ 3011.365961][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 3011.371969][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 3011.377207][ C1] ? add_event_to_ctx+0x1170/0x1170 [ 3011.382464][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 3011.387705][ C1] ? perf_event__header_size+0x165/0x220 [ 3011.393369][ C1] __se_sys_perf_event_open+0x1841/0x1c60 [ 3011.399193][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 3011.404851][ C1] ? lock_chain_count+0x20/0x20 [ 3011.409712][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3011.415733][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 3011.421034][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 3011.426709][ C1] do_syscall_64+0x55/0xb0 [ 3011.431177][ C1] ? clear_bhb_loop+0x40/0x90 [ 3011.435890][ C1] ? clear_bhb_loop+0x40/0x90 [ 3011.440606][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3011.446517][ C1] RIP: 0033:0x7f626599e159 [ 3011.450984][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3011.470895][ C1] RSP: 002b:00007f62668cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3011.479329][ C1] RAX: ffffffffffffffda RBX: 00007f6265c25fa0 RCX: 00007f626599e159 [ 3011.487345][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 3011.495364][ C1] RBP: 00007f6265a35024 R08: 0000000000000002 R09: 0000000000000000 [ 3011.503358][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3011.511349][ C1] R13: 00007f6265c26038 R14: 00007f6265c25fa0 R15: 00007ffe33190b08 [ 3011.519359][ C1]